Flower Delivery Charlton Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Charlton uses, stores, and protects your personal information when you place a flower delivery order in Charlton or the surrounding districts. We are committed to maintaining your privacy and handling your information with security and transparency. This policy is designed to comply with the EU General Data Protection Regulation (GDPR). Please read it thoroughly to understand how your data is managed.

Scope of Policy

This Privacy Policy applies to all customers who place orders with Flower Delivery Charlton, whether for themselves or on behalf of others, across Charlton and neighbouring districts. By using our services, you acknowledge and agree to the practices described in this document.

What Data We Collect

We collect and process personal information necessary to provide our flower delivery services efficiently and safely. The data we may collect includes:

  • Identity Information: Your full name.
  • Contact Information: Delivery address, billing address, phone number, and (if provided) instructions relating to the delivery.
  • Recipient Information: Name, address, and any personalised message or preferences for the recipient, if supplying flowers to someone else.
  • Order Data: Details of orders placed, including card messages, delivery preferences, and purchase history.
  • Payment Information: Transaction data (please note, we do not directly store card details; this is processed securely via payment processors).
  • Technical Data: IP address, browser type, and other standard web log information, collected via cookies and similar technologies for security and functionality.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal information. Flower Delivery Charlton relies on the following bases:

  • Contractual Necessity: Most of our data processing is necessary to fulfil and deliver your order.
  • Legal Obligation: In some cases, we must process your data to comply with legal and regulatory requirements, including taxation and accounting.
  • Legitimate Interests: We may process your information for the effective management of our service, to communicate service updates, or to improve our offerings—only when our interests are not overridden by your rights and freedoms.
  • Consent: If we wish to send marketing communications or process optional data, we will ask for your explicit consent, which you can withdraw at any time.

How We Use Your Information

We use your personal data for the following purposes:

  • Processing orders, payments, and arranging deliveries.
  • Communicating with you about your order status, delivery updates, and service issues.
  • Providing customer support and responding to queries.
  • Improving our products, services, and customer experience.
  • Complying with legal and regulatory requirements.
  • Conducting analysis and managing administrative tasks associated with running our business.

Retention of Your Data

Your personal information is retained only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Generally:

  • Order data and associated contact details are retained for up to seven years to meet statutory accounting obligations.
  • Data used solely for marketing purposes is kept until you withdraw your consent or object to this processing.
  • Basic contact and identity details may be retained for a shorter period if you request deletion, provided we are not legally required to keep these records.

Sharing and Data Processors

To operate our services effectively, we share your information with carefully selected third-party processors who assist us in providing our services. These may include:

  • Payment processors (for secure transaction handling).
  • Delivery service providers (for logistics and successful order delivery).
  • IT service providers (for website hosting and support functions).

All processors are required to adhere to strict data protection and confidentiality standards, and are only permitted to use your data in accordance with our instructions.
We do not sell or rent your personal information to any third parties for marketing or any other purposes.

Your Rights

You have a number of rights concerning your personal data under GDPR, including:

  • Right to Access: You can request copies of your personal information we hold.
  • Right to Rectification: If any information is inaccurate or incomplete, you can request it be corrected.
  • Right to Erasure: In certain circumstances, you can request your data be deleted, provided this does not conflict with legal requirements.
  • Right to Restrict Processing: You can ask us to limit how we use your information in certain circumstances.
  • Right to Data Portability: You can ask for your data in a structured, commonly used format for transfer to another provider, where feasible.
  • Right to Object: You have the right to object to certain types of processing, such as direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw this at any time without affecting the lawfulness of previous processing.
  • Right to Lodge a Complaint: If you have concerns about how we handle your data, you have the right to contact your local data protection authority.

Security of Your Information

We use technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or loss. This includes secure servers, encryption, access controls, and regular security assessments.

Updates to This Policy

We may periodically update this Privacy Policy to reflect changes in our processes, legal obligations, or customer feedback. The latest version will always be available on our website and will be effective immediately upon posting. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact and Further Information

If you require more information about our privacy practices, this policy, or wish to exercise any of your rights, please get in touch with us through our customer service channels. We are committed to responding promptly and transparently to any privacy-related queries you may have.