Flower Delivery Upton Park: GDPR Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Upton Park ("we", "us", or "our") collects, uses, stores, and protects your personal information when you place an order for flower delivery within Upton Park and its surrounding districts. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

Scope of This Policy

This Privacy Policy applies to all customers who place flower delivery orders with Flower Delivery Upton Park, whether for themselves or on behalf of others, for delivery in Upton Park and adjacent areas. By using our services, you acknowledge and agree to the terms set forth herein.

Personal Data We Collect

Depending on the nature of your order, we may collect the following categories of personal data:

• Identity Data: Name, surname, and, if required, identification data for account creation or payment verification.
• Contact Data: Delivery address, billing address, recipient name and address, telephone number, and contact preferences.
• Order Information: Details of your flower order, any personalised messages, delivery dates, and instructions.
• Payment Information: Payment method, transaction amount, and anonymised payment reference. Please note, we do not store full card details on our own servers. All online transactions are processed via secure, compliant third-party payment providers.
• Technical and Usage Data: IP address, browser type, device identifiers, and general information about your visit to our website for security, analytics, and fraud prevention.

Lawful Basis for Processing Your Data

Our legal grounds for processing your personal data under the GDPR include:

• Performance of Contract: Most processing is necessary to fulfill our contract with you, such as processing your order, delivering flowers, and communicating order updates.
• Legal Obligations: We process data as needed to comply with applicable legal or regulatory obligations (for example, record keeping for tax purposes).
• Legitimate Interests: We may use your data for our legitimate interests, such as service improvement, fraud prevention, or, in limited cases, direct marketing (where permitted by law and with your right to object).
• Consent: If we seek your consent for specific data uses (for example, marketing by email), you may withdraw consent at any time.

How We Use Your Data

Your personal information is used for the following purposes:

• Processing and fulfilling your order, including communicating with you regarding your purchase and delivery.
• Contacting recipients for delivery coordination or addressing any issues with an order.
• Managing payments and refunds securely through compliant payment processors.
• Improving our products, services, and customer experience.
• Complying with legal requirements and resolving disputes.

How We Share Your Information

We may share your personal data with the following third parties only as necessary for the purposes described in this policy:

• Payment Processors: For secure transaction processing. These providers are compliant with applicable data protection laws and do not use your data for unrelated purposes.
• Delivery Partners/Couriers: To ensure your flowers are delivered to the correct recipient and address.
• Service Providers: Companies that support our website, IT systems, or analytics, acting only on our instructions and under strict confidentiality.
• Legal Authorities: If required by law, regulation, or where necessary to protect your rights or our business.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including for the duration of our contractual relationship and to comply with legal, accounting, or reporting requirements. Typically, personal order information is retained for a period of up to seven years in line with legal and financial record keeping obligations. When your data is no longer required, it will be securely deleted or anonymised.

Your Data Protection Rights

Under the GDPR, you are entitled to certain rights concerning your personal information. These include:

• Right of Access: You may request access to your personal data and obtain a copy.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your data in certain circumstances.
• Right to Restrict Processing: You may ask us to suspend processing under specified circumstances.
• Right to Object: You can object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: You may request to receive your data in a structured, commonly-used format or have it transferred to another provider.

To exercise any of your rights, please contact us via the contact details available on our website. Where legally required, we will respond to your request within one month.

Protecting Your Personal Data

We implement appropriate technical and organisational measures to safeguard your personal information. This includes secure data storage, access controls, and ongoing staff training. Where third parties process your data on our behalf, they are contractually obliged to process your data only in accordance with our instructions and to protect its confidentiality and integrity.

Data Transfers Outside the European Economic Area (EEA)

Your personal data may be processed outside the EEA if necessary for order fulfilment or where our service providers operate internationally. In such cases, we ensure adequate safeguards are in place, such as data processing agreements or certified mechanisms, to protect your rights and privacy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or best practices. Updated policies will be published on our website, and significant changes will be notified as appropriate.

Contact and Complaints

If you have any questions regarding this Privacy Policy or how your data is used, please use the contact options provided on our website. If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.

Summary

Flower Delivery Upton Park values your privacy and is dedicated to ensuring your personal information is handled securely and transparently. We encourage you to read this policy carefully and contact us if you have any questions or wish to exercise your data rights.