Flower Delivery Primrose Hill Privacy Policy

Introduction

This Privacy Policy describes how Flower Delivery Primrose Hill collects, uses, and protects the personal information of its customers. It applies to all individuals who place orders with Flower Delivery Primrose Hill in Primrose Hill and the surrounding districts. Our practices are in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

What Data We Collect

We collect personal data necessary for processing your flower delivery orders efficiently and safely. The categories of personal data we may collect include:

  • Identity Data: Full name, title, and contact information.
  • Contact Data: Delivery address, billing address, phone number (if provided), and other contact details.
  • Order Information: Details of your flower order, special instructions, and recipient information (such as recipient’s name and address).
  • Payment Data: Payment information (through secure, third-party payment processors), transaction records, and billing details.
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and platform (collected via cookies and similar technologies when you interact with our online services).
  • Correspondence: Records of your communications with us (for example, when you contact us via our website).

Lawful Basis for Processing

Under GDPR, we must have a legitimate basis for processing your personal data. We process your personal data on the following lawful bases:

  • Contractual Necessity: To fulfill our contract with you; for example, to process and deliver your flower order or respond to your requests.
  • Legitimate Interests: Where necessary for our legitimate business interests, provided these do not override your rights and interests. For example, improving our services, troubleshooting, conducting analytics and ensuring the security of our website.
  • Legal Obligation: Where we are required to comply with legal or regulatory requirements, such as financial record-keeping for tax purposes.
  • Consent: In some situations, we may ask for your consent before collecting or processing certain personal data (for example, marketing communications). Where we rely on consent, you can withdraw it at any time.

How We Use Your Information

We use your personal data to:

  • Take and fulfill flower delivery orders.
  • Manage payments, fees, and charges.
  • Deliver flowers to you or your chosen recipients.
  • Communicate order updates or delivery information.
  • Address your requests, queries, or complaints.
  • Improve our services and customer experience.
  • Meet our legal and regulatory obligations.
  • Where you have agreed, send relevant offers or promotions.

Data Retention Policy

We only retain your personal data for as long as is necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Our typical data retention periods are as follows:

  • Order and Transaction Data: Retained for up to 7 years from the date of your order to comply with legal obligations (such as tax regulations) and maintain accurate records.
  • Marketing Data: If you have consented to receive marketing communications, we will retain your contact details until you unsubscribe or withdraw your consent.
  • Technical Data: Collected via cookies or analytics is retained for up to 2 years unless required longer for security or legal purposes.

After these periods, we securely delete or anonymise your data.

Data Processors and Sharing

We do not sell or rent your personal information. We may share your data with trusted third-party service providers (data processors) who support our operations, such as:

  • Payment service providers: Securely process your transactions.
  • Delivery and logistics partners: Coordinate and fulfill your delivery requests.
  • IT and system administration providers: Maintain our website or store data securely.
  • Analytics providers: Help us understand customer use of our services.

All third-party processors are required to treat your data in accordance with GDPR, maintaining confidentiality and only using your data as necessary to perform specific functions on our behalf.

We may also disclose your data if required to do so by law or to protect our legal rights or the rights and safety of others.

Your Rights Under GDPR

Subject to the conditions and limitations set out in the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data held by us.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: Request to restrict how your data is processed in certain situations.
  • Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller where technically feasible.
  • Right to Object: Object to certain uses of your data, such as direct marketing. You can opt out from marketing messages at any time.
  • Right to Withdraw Consent: Where we rely on your consent, you are entitled to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, you may contact us through the means provided on our website. We will respond to all requests in accordance with applicable data protection laws.

International Transfers

We strive to store and process your data within the UK and European Economic Area (EEA). Where we need to transfer personal data outside these areas (for example, if an external processor is located outside the EEA), we ensure necessary safeguards are in place to comply with GDPR and protect your rights.

Security

We take protection of your personal data seriously. We maintain appropriate technical and organisational measures to safeguard your data from loss, misuse, unauthorised access, disclosure, alteration, and destruction. These safeguards include encryption, secure payment processing, and restricted access controls.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. Significant changes will be notified to you through our website or other appropriate means. We encourage you to review this Privacy Policy regularly so you remain informed about our practices and your rights.

Contact and Complaints

If you have any questions or concerns about how your personal data is handled by Flower Delivery Primrose Hill, please contact us using the methods provided on our website. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in compliance with the GDPR.