Privacy Policy for Customers of Flower Delivery Tottenham Hale

Our Commitment to Your Privacy

At Flower Delivery Tottenham Hale, we are dedicated to upholding the privacy and security of all customers placing orders from Tottenham Hale and the surrounding districts. Your trust is important to us, and we are committed to handling your personal data in accordance with the General Data Protection Regulation (GDPR) and all applicable UK data protection legislation. This Privacy Policy explains what information we collect from you, why and how we use it, how we protect it, and your rights regarding your data.

Who This Policy Applies To

This policy applies to individuals who place flower delivery orders through Flower Delivery Tottenham Hale, whether directly or on behalf of others, within Tottenham Hale and neighbouring areas. By using our services, you consent to the practices outlined in this document.

What Data We Collect

We collect and process a variety of personal data to facilitate the flower delivery services you order. The types of data we may collect include:

• Contact Information: Name, delivery address, billing address, telephone number, and email address.
• Order Details: Products ordered, order amounts, delivery instructions, and preferences.
• Recipient Details: Name, delivery address, and any specific instructions relevant for delivery.
• Payment Information: Limited payment card information required to process your payment; full payment card details are not stored but may be processed securely via payment processors.
• Communication: Correspondence via phone, written notes, or other forms of communications regarding your order.
• Technical Data: IP address, browser type and version, time zone setting, device information, and cookies (when using our website).

Lawful Basis for Processing

Under the GDPR, we must have a valid lawful basis to process your personal data. Flower Delivery Tottenham Hale relies on the following bases:

• Contractual Necessity: Most data is processed to fulfill our contract with you—namely, to deliver your flower order and provide customer support.
• Legal Obligation: Some data is retained to comply with legal and regulatory requirements, such as accounting, tax, and anti-fraud purposes.
• Legitimate Interests: We may process certain data for our legitimate business interests, such as ensuring quality customer service, improving our products, or communicating important information about your order. These interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications or non-essential cookies, we will seek your explicit consent before collecting or using your data for these purposes. You may withdraw your consent at any time.

How We Use Your Data

Personal data is used solely for the following legitimate business purposes:

• Processing and delivering your flower order accurately to the specified recipient and address.
• Managing payments, refunds, and resolving payment issues.
• Responding to your queries or providing aftercare and support related to your orders.
• Maintaining records for invoicing, accounting, and legal compliance.
• Improving the quality of our delivery services through customer feedback and analysis.
• Sending relevant updates about your order status, delivery scheduling, or exceptional circumstances affecting your order.
• If consent is provided, sending marketing communications or special offers relating to flower products and services.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including the fulfilment of your order and any legal, accounting, or reporting requirements. Typically, customer and transaction data is retained for up to six years in line with UK statutory limitation periods for financial and tax regulations. Data used solely for marketing purposes will be kept until you unsubscribe or withdraw your consent.

After the retention period has expired, your personal information will be securely deleted or anonymised.

Processors and Data Sharing

We may engage third-party processors to assist in delivering our services. These may include:

• Payment processors who manage payments securely on our behalf.
• IT service providers managing our website, order processing platforms, and cloud storage.
• Delivery partners assisting with the physical delivery of your order.
• Professional advisors such as accountants or legal representatives.

All third-party processors are contractually required to comply with GDPR and handle your personal data securely, only for the specified purposes, and not to use it for their own interests. We do not sell or trade your personal information for marketing purposes.

Your data may be shared with UK governmental or regulatory bodies if required by law.

In the event that we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place to protect your rights.

User Rights Under GDPR

You have a range of rights under the GDPR in relation to your personal data. These include:

• Right to Access: You can request a copy of the personal data we hold about you, as well as information about how it is processed.
• Right to Rectification: You can ask us to correct inaccuracies or update incomplete data held on file.
• Right to Erasure: You can request the deletion of your personal data when it is no longer needed for the purposes collected, or if you withdraw consent (where consent was the lawful basis).
• Right to Restrict Processing: You can request restricted processing of your data in certain circumstances.
• Right to Data Portability: For data processed based on consent or contract, you may request a copy of your data in a commonly used electronic format.
• Right to Object: You may object to our processing of your data based on legitimate interests or direct marketing, at any time.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: Should you wish to raise a concern about our handling of your data, you can contact the Information Commissioner's Office (ICO) or your local supervisory authority.

How We Protect Your Data

We implement physical, technical, and organisational safeguards to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Access to your information is limited only to those employees, agents, and processors who require it to fulfill your order or support our business operations.

Amendments to This Policy

We may update this Privacy Policy in response to changes in the law, our services, or data processing practices. Any changes will be published on this page, and continued use of our services signifies your agreement to the most recent version.

Contact Information

Further details about this policy, your data, or how to exercise your rights can be provided upon request. Please contact us by post or via our website for any queries, requests, or concerns regarding your personal data and privacy.