Flower Delivery Belgravia Customer Privacy Notice
Introduction to Our Privacy Policy
This Privacy Policy is created by Flower Delivery Belgravia to inform you, our valued customer, about how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). The policy applies to all individuals placing flower orders with Flower Delivery Belgravia from Belgravia and the surrounding districts. We value your trust and are committed to safeguarding your privacy every step of the way.
What Data We Collect
In providing our flower delivery services, we may collect and process the following categories of personal data:
- Personal Identification Data: Name, surname, and, when placing orders on behalf of someone else, recipient’s name.
- Contact Details: Delivery address, billing address, phone numbers, and contact instructions provided during order placement.
- Transaction and Payment Data: Information regarding the orders you place, payment method details (excluding complete card data, which are securely handled by payment processors; we never store complete card numbers), and related transaction history.
- Correspondence Data: Any communications, such as emails or messages, you send to us regarding your order and our services.
- Preference Data: Details regarding your delivery and floral preferences provided in the course of using our services.
- Website Usage Data: IP address, browser details, and analytic information relevant to usage patterns on our website, collected through cookies and similar technologies (see our separate Cookies Policy for more).
Lawful Basis for Data Processing
Flower Delivery Belgravia processes your personal data under the following lawful grounds, as permitted by the GDPR:
- Performance of a Contract: To process your order and deliver flowers as requested, we require certain personal data to fulfil our contract with you.
- Legal Obligation: We may be legally required to collect and retain information for tax, accounting, or other regulatory reasons.
- Legitimate Interests: We may process data to pursue legitimate business interests, such as improving our services, preventing fraud, and responding to customer queries. In such cases, we ensure that our interests do not override your personal data rights.
- Consent: Where processing is not strictly necessary for the above reasons, we will seek your consent, such as for marketing communications. You can withdraw consent at any time.
How We Use Your Data
We use the data we collect for the following purposes:
- To process and deliver your orders efficiently and accurately.
- To communicate with you about your order status, delivery updates, or any issues requiring clarification.
- To handle payments, refunds, or resolve transaction-related issues.
- To respond to your queries, complaints, or requests for information.
- To improve our products and customer experience based on usage patterns and feedback.
- To comply with applicable laws and regulations.
- If you have provided explicit consent, to send you marketing updates or special offers relevant to flower delivery services.
How We Store and Retain Your Data
Your personal data is stored securely within our systems, and safeguards are in place to protect against loss, misuse, or unauthorised access. We only retain your personal data for as long as necessary to fulfil the original purposes for which it was collected, or as required by applicable laws and regulations (for example, record retention laws for invoices and financial transactions). Generally, this means we will retain your core account and order data for up to six years after your last order, unless legal obligations require longer retention or you request erasure (where permitted).
Third-Party Data Processors
Flower Delivery Belgravia may engage third-party service providers ("processors") to support our operations, including:
- Payment processing services to securely handle your payments.
- IT infrastructure and website hosting providers for the functionality and security of our services.
- Courier/delivery partners to ensure your flowers reach the intended recipient.
- Communication service providers for facilitating order notifications and confirmations.
- Analytics providers to help us monitor website performance and improve our services.
When engaging such processors, we ensure that they are contractually bound to comply with GDPR, process data only as instructed by us, and implement appropriate security measures.
Your Rights
Under the GDPR, you have various rights regarding your personal data. These include:
- Right of Access: You have the right to request a copy of your personal data we hold.
- Right to Rectification: You can request correction of any inaccurate or incomplete data.
- Right to Erasure: Subject to certain conditions, you may request the deletion of your personal data.
- Right to Restrict Processing: You may ask us to limit how we use your personal data in certain circumstances.
- Right to Data Portability: You can request certain data to be provided to you or a third party in a digital form.
- Right to Object: You may object to data processing where we rely on legitimate interests or where your data is used for direct marketing.
- Right to Withdraw Consent: You can withdraw any consent given for processing your data at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe your data rights have been infringed.
International Data Transfers
We primarily process and store your data within the UK and European Economic Area (EEA). If we engage processors that transfer data outside these areas, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
Policy Updates
We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Any revisions will apply as soon as they are published on our website. We encourage you to review this page regularly to stay informed about our privacy practices.
Contacting Us
If you have any questions or wish to exercise your GDPR rights relating to your personal data held by Flower Delivery Belgravia, please use the contact form on our website or write to us at our registered business address. We treat all privacy-related queries and requests with the utmost priority and confidentiality.