Flower Delivery Canning Town Privacy Commitment

Introduction

This Privacy Policy explains how Flower Delivery Canning Town (“we”, “our”, “us”) collects, uses, stores, and protects the personal data of customers (“you”, “your”) when placing flower delivery orders in Canning Town and the surrounding districts. We are dedicated to maintaining your privacy and complying with the General Data Protection Regulation (GDPR) and relevant UK data protection laws.

Scope of this Policy

This Privacy Policy applies to all individuals who place orders with Flower Delivery Canning Town, whether via our website, telephone, or in person. It covers all personal data processed in connection with the purchase and delivery of our products and services within Canning Town and adjacent areas.

What Personal Data We Collect

When you use our services, we may collect and process the following categories of personal information:

• Identity Data: Name, title
• Contact Data: Delivery address, billing address, phone number (if provided), and any additional contact information required to fulfil your order
• Order Data: Details about the flowers and gifts ordered, delivery preferences, recipient’s details (if different), card messages
• Payment Data: Payment method, partial card or transaction details (as managed by our payment processors)
• Technical Data: IP address, browser type and version, time zone setting, device identifiers, and cookie data (where necessary for the operation of our website)
• Correspondence: Any other information you choose to provide when you contact us with questions, feedback, or customer service requests

Lawful Basis for Processing Your Personal Data

We only process your information when allowed under applicable data protection laws. Our lawful bases are as follows:

• Performance of a contract: Most data we collect is to process, deliver and manage your order (e.g., delivery addresses, order content).
• Legal obligation: We are required to keep certain records for tax, fraud prevention, or regulatory reasons.
• Legitimate interests: We may process information for our legitimate business interests, such as to improve service quality, maintain security, or send you service-related communications (never for unlawful marketing).
• Consent: Where required (for example, to send certain marketing messages), we will ask for your explicit consent, which you can withdraw at any time.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order and delivery data are retained for a period sufficient to process orders, manage any issues, and meet regulatory requirements, after which your information is securely deleted or anonymised. We regularly review retention periods to ensure we do not keep information longer than is legally or operationally necessary.

Use of Data Processors

To provide our services, we may engage specialised third-party service providers ("processors") who process personal data on our behalf. These may include:

• Payment processors to securely manage transaction data
• IT hosting and maintenance providers to operate our website and internal systems
• Delivery couriers who may require details for successful delivery
• Providers of analytics services to help us understand website usage (using aggregated or anonymised data)

We select processors who meet high standards of security and data protection. All processors operate under contracts ensuring compliance with GDPR, and your data is never transferred outside the UK or European Economic Area unless suitable safeguards are in place.

Your Rights under GDPR

Under GDPR and UK data protection legislation, you have a number of important rights. Subject to certain conditions, you can:

• Request access to the personal data we hold about you (commonly known as a ‘data subject access request’)
• Request correction of any inaccurate or incomplete data
• Request erasure of your personal data where there is no legitimate need for us to continue processing it
• Object to us processing your personal data based on our legitimate interests
• Request restriction of processing if we are addressing a dispute or verifying data accuracy
• Request the transfer of your personal data to you or to another provider in a structured, commonly used, and machine-readable format (data portability)
• Withdraw consent at any time, where consent is the basis of processing

To exercise your rights or to make a data-related enquiry, please contact us using the details provided on our website or in your order confirmation. We may need to verify your identity before fulfilling your request for security reasons. We aim to respond to all legitimate requests without undue delay and always within statutory time frames.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. These measures include restricted access, internal policies, regular staff training, and secure data disposal practices. We constantly review and update these processes to reflect technological developments and regulatory requirements.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in how we operate, legal updates, or customer feedback. The latest version will always be available on our website. We encourage you to review the policy periodically to stay informed about how we protect your personal information.

Contact and Further Information

If you have any questions about this Privacy Policy, your personal information, or wish to make a complaint, please consult our website for the latest contact details or refer to your order confirmation. You are also entitled to contact the UK Information Commissioner’s Office (ICO) if you believe your data protection rights are not being upheld.