Privacy Policy for Flower Delivery Woking Customers

Introduction

This Privacy Policy outlines how Flower Delivery Woking ("we", "us", or "our") collects, uses, processes, and protects personal information of customers placing flower delivery orders in Woking and the surrounding districts. It also details the rights you have under the General Data Protection Regulation (GDPR) and how you can exercise them. This policy applies to all individuals who interact with Flower Delivery Woking as customers or potential customers within our service areas.

What Data We Collect

We collect personal data in order to provide a seamless flower delivery service and to fulfil our contractual obligations to our customers. The types of data we collect may include:

• Contact Information: Name, delivery address, billing address, phone number, and other relevant contact details.
• Order Details: Flower selection, card messages, delivery instructions, preferred delivery date and time.
• Payment Information: Information required to process your payment, such as transaction details. (Please note: we do not store full payment card details; payment processing may be handled by third-party processors.)
• Account Details: If you create an account, we may collect your username, password (encrypted), and order history.
• Communication Records: Correspondence between you and Flower Delivery Woking, including customer support enquiries, feedback, and complaints.
• Technical Data: IP address, browser type, device identifiers, and cookies where applicable, which help us improve our website and services.

Lawful Basis for Processing Personal Data

We may process your personal data on the following lawful bases as stipulated by the GDPR:

• Contractual Necessity: Processing your information is necessary for fulfilling our contract with you, such as delivering your flower order to the correct address.
• Legitimate Interests: We process certain data to improve our services, respond to your enquiries, and for administrative purposes, provided these interests are not overridden by your rights.
• Legal Obligation: In some cases, we are legally required to retain or disclose certain information, for example, relating to tax or fraud prevention.
• Consent: Where you provide specific consent (such as for marketing communications), you have the right to withdraw this consent at any time.

How We Use Your Data

Your data is used exclusively for providing flower delivery services, processing orders, communicating with you regarding your orders, and enhancing your experience with us. Specifically, your data may be used to:

• Confirm and process your flower delivery order.
• Contact you regarding your delivery or to resolve any issues with your order.
• Respond to your requests, questions, and queries.
• Comply with applicable legal and regulatory requirements.
• Conduct internal analysis to improve our services and offerings.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specifically:

• Customer and order data are typically retained for up to seven years to comply with financial regulations and audit requirements.
• Data associated with customer accounts may be retained until the account is deleted or becomes inactive.
• Information processed on the basis of consent (such as for marketing) will be retained until you withdraw your consent.

Data Processors and Third Parties

To operate our business effectively, your personal information may be shared with trusted third parties, known as data processors. These processors act on our instructions and are obliged to protect your data in accordance with GDPR requirements. Examples include:

• Payment service providers: For secure processing of your payments.
• IT and hosting providers: To manage our website and data infrastructure.
• Delivery partners: For fulfilling flower delivery to your chosen address.

Where we engage third-party processors, we ensure they provide adequate safeguards and only process your data for the specified purposes.

International Data Transfers

Your personal data is primarily processed within the United Kingdom or European Economic Area (EEA). If we transfer your data outside these regions, we ensure necessary safeguards are in place, such as Standard Contractual Clauses, to protect your privacy rights.

Your Rights Under GDPR

You are entitled to several key rights under the GDPR with respect to your personal data. These rights include:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data we hold about you.
• Right to Erasure: In certain circumstances, you can request the deletion of your data ("right to be forgotten").
• Right to Restrict Processing: You may ask us to suspend processing of your personal data under certain conditions.
• Right to Data Portability: You can request that we transfer your data to another service provider, where technically feasible.
• Right to Object: You may object to processing of your data where we rely on legitimate interests, including for direct marketing.
• Right to Withdraw Consent: Where we process data based on your consent, you have the right to withdraw that consent at any time.

To exercise these rights, please contact us using the methods provided on our website.

Data Security

We are committed to ensuring that your personal data is safeguarded. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration. Only authorised staff and trusted processors have access to your data, and only for legitimate business purposes.

Policy Updates

This Privacy Policy may be updated from time to time to reflect new legal, regulatory, or operational requirements. When updates are made, changes will be published on our website. We encourage you to review this policy periodically to remain informed about how Flower Delivery Woking protects your data.

Contact for Queries and Complaints

If you have any questions or concerns regarding how we process your personal data, or if you wish to exercise your GDPR rights, please contact us via the contact methods provided on the Flower Delivery Woking website. If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

Applicability

This privacy policy is applicable to all customers placing flower delivery orders with Flower Delivery Woking from Woking and the surrounding districts. By placing an order or interacting with our services, you acknowledge and agree to the terms outlined in this policy.