Flower Delivery Enfield Town GDPR Privacy Policy

Introduction

This GDPR Privacy Policy describes how Flower Delivery Enfield Town (“we”, “our”, “us”) collects, uses, stores, and protects the personal data of customers placing flower delivery orders in Enfield Town and the surrounding districts. We are committed to safeguarding the privacy of our customers and ensuring their data is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Scope of This Policy

This policy applies to all customers who place orders with Flower Delivery Enfield Town, whether through our website, by telephone, or via any other method we offer. It also covers data processed for inquiries or customer service requests relating to orders or our services in Enfield Town and its surrounding areas.

What Data We Collect

To fulfil your orders and provide customer service, we collect the following types of personal data:

• Identity Information: Name, address (for both sender and recipient), and contact details (such as phone number where necessary for delivery coordination).
• Order Information: Details about the products ordered, delivery instructions, gift messages, and order history.
• Payment Information: Payment method used and relevant transaction references (actual payment processing is handled by third-party providers; we do not store your credit/debit card numbers).
• Communication Records: Correspondence with our customer service, including details of inquiries, complaints, or feedback.
• Technical Data: IP address, browser type, and device information (for website orders, collected through cookies or similar technologies).

Our Lawful Basis for Data Collection

Under the GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following:

• Contractual Necessity: We need your data to process and deliver your order and provide customer support.
• Legal Obligations: We process data as required to comply with legal and regulatory requirements, such as tax and record-keeping obligations.
• Legitimate Interests: We may use your data to improve our services, prevent fraud, or handle queries, provided our interests do not override your rights.
• Consent: Where you have specifically agreed (e.g., for marketing communications), we rely on your consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling your flower delivery orders
• Communicating order status and managing delivery logistics
• Responding to your customer service inquiries
• Internal record keeping and compliance with accounting or legal requirements
• Improving our website and services
• Sending you information, with your consent, about relevant offers or products

How Long We Retain Your Data

We retain personal data only as long as necessary for order fulfilment, customer service, compliance with legal obligations, and for the purposes described in this policy:

• Orders and Customer Records: Typically retained for seven years after your last order to comply with accounting and tax regulations.
• Marketing Consent Data: Retained until you withdraw consent or request deletion.
• Technical Data (from cookies): Retained according to our cookie management practice, generally not exceeding 24 months.

After these periods, your personal information is securely deleted or anonymised.

Use of Data Processors

To deliver our services efficiently, we may share your data with carefully selected third-party processors, strictly for the purposes described below. These include:

• Payment Processing Providers: For handling your payment transactions securely.
• Delivery Partners and Couriers: For delivering your flowers to the recipient at your specified address.
• IT Service Providers: For hosting our website and maintaining our order management system.
• Professional Advisors: For legal, accounting or regulatory compliance support.

All processors are contractually bound by data protection agreements to handle your data in accordance with GDPR and to ensure your information is not used for any other purpose.

We do not sell or rent your personal data to third parties.

Your Data Protection Rights

Under GDPR, you have a number of important rights regarding your personal data. These include the right to:

• Access the personal data we hold about you
• Request the correction of any inaccurate or incomplete data
• Request deletion or removal of your personal data (subject to legal or contractual requirements)
• Object to our processing of your data, or request restriction of processing
• Request the transfer of your data to another service provider (data portability)
• Withdraw your consent at any time, where processing is based on consent

To exercise any of these rights, please contact us using the details on our website. We will respond to your request within one month, in line with GDPR requirements.

How We Protect Your Data

We implement appropriate security measures to protect your personal data from unauthorised access, use, alteration, or disclosure. This includes a combination of physical, electronic, and organizational procedures, such as:

• Restricted data access to authorised staff only
• Secure storage and encryption where appropriate
• Regular reviews and updates to our data handling and security practices

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or relevant laws. Any changes will be published on our website, and where appropriate, we will notify our customers directly.

Contact and Further Information

If you have any questions about how we handle your data or wish to exercise your rights, please refer to our contact details provided on our official website or speak to our customer service when placing an order. We are committed to resolving any issues promptly and transparently.