How Flower Delivery New Barnet Protects Your Privacy

Scope of This Privacy Policy

This Privacy Policy outlines how Flower Delivery New Barnet ('we', 'us', or 'our') collects, uses, protects, and retains personal data for customers placing flower delivery orders in New Barnet and the surrounding districts. By utilising our services, you acknowledge and agree to the data practices described in this policy, which is designed to be compliant with the General Data Protection Regulation (GDPR).

What Personal Data We Collect

To provide our flower delivery services, we may collect and process the following categories of personal data:

• Contact Information: Such as your name, address, phone number, and delivery address details.
• Order Details: Information about the flowers or gifts you order, the recipients’ names and addresses, delivery preferences, and card messages.
• Payment Data: Payment method details necessary for transaction processing (note: payment card data is processed via secure third-party payment processors and not retained on our systems).
• Communication Records: Any correspondence exchanged with us (for example, enquiries or customer support).
• Technical Information: Such as IP address, browser type, device identifiers, and access times, collected when you interact with our website for security and performance monitoring.

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases, as defined by the GDPR:

• Contractual Necessity: Processing is essential to fulfil your order and deliver our flower delivery service.
• Legitimate Interests: For operational purposes, such as ensuring efficient delivery, improving services, responding to enquiries, and ensuring the security of our website.
• Legal Obligation: We may process and retain data where required by law (for example, in relation to tax or accounting regulations).
• Consent: Where you have provided specific consent (such as for marketing communications), you may withdraw this consent at any time.

How We Use Your Personal Data

We use your personal data mainly to process and deliver your orders, communicate with you about your orders, handle your enquiries, personalize your experience, and ensure effective customer service. Personal data is also used for administrative, analytical, and business improvement purposes, always in line with GDPR principles.

How We Share and Disclose Data

We treat your personal information with care and confidentiality. Your data may be shared with trusted third parties under strict contractual obligations, including:

• Delivery Partners: Couriers or florists who deliver your order on our behalf.
• Payment Processors: Secure third-party providers who handle your payment transactions.
• IT & Customer Support Providers: Service providers who host our website, maintain IT systems, or assist with customer support.

We do not sell or rent personal information to third parties. Data is only shared for legitimate business needs, regulatory purposes, or as required by law.

Data Retention Periods

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Order Records: Kept for up to seven years to comply with legal and tax obligations.
• Customer Support: Recordings and correspondence held for up to two years after order resolution.
• Marketing Data: Held for as long as you remain subscribed; immediately deleted upon opt-out.

Upon expiry of these periods, data is securely erased or anonymised unless longer retention is required by law.

Your Rights Under GDPR

You have specific legal rights in relation to your personal data. These include the right to:

• Access: Request a copy of any personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal or contractual restrictions.
• Restriction: Ask us to restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Portability: Receive your personal data in a structured, commonly used format and have it transmitted to another controller.
• Withdraw Consent: Where consent is the basis for processing, you may withdraw it at any time.

To exercise these rights, you may contact us using the contact form on our website. If you believe your rights have not been respected, you can lodge a complaint with the Information Commissioner's Office (ICO).

How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data. These measures include encryption, regular security reviews, access controls, secure payment processing, and staff training. Personal data is processed within the UK or EEA and appropriate safeguards are applied if data needs to be transferred outside these regions.

Changes to this Privacy Policy

We review our privacy practices regularly and may update this policy from time to time. Any significant changes will be posted on our website with the date of the latest revision clearly stated. We encourage you to review this policy periodically.

Contact and Further Information

For further questions about how Flower Delivery New Barnet collects or uses your personal information, or if you wish to exercise your rights, please use our website's contact form. We are committed to upholding your privacy rights with transparency and integrity.