Flower Delivery Mill Hill Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Mill Hill ("we", "our", or "us") collects, processes, and safeguards the personal data of individuals placing flower delivery orders in Mill Hill and the surrounding districts. Your privacy is important to us, and we are committed to adhering to the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Scope of This Policy

This policy applies to all customers and website visitors ordering flower deliveries from Flower Delivery Mill Hill within Mill Hill and its surrounding districts. By using our services or website, you acknowledge and agree to the terms described within this Privacy Policy.

What Data We Collect

When you place an order or interact with our services, we may collect the following categories of personal data:

• Identity Data: Your full name, and (if applicable) the recipient’s name.
• Contact Data: Billing and delivery addresses, telephone numbers, and delivery instructions.
• Order Information: Products purchased, messages to recipients, date and time of orders.
• Payment Data: Card or bank details (processed by secure third-party payment processors).
• Technical Data: IP address, browser type, operating system, and usage information collected through cookies and analytics tools when you visit our website.
• Correspondence: Records of your communications with our customer service (excluding any sensitive personal data).

Lawful Basis for Processing Your Data

Under GDPR, we process your personal data only when there is a valid legal reason to do so. The lawful bases under which we process your information include:

• Contractual Necessity: Processing is necessary to fulfill your order and deliver our services.
• Legitimate Interests: To operate, improve, and secure our business; to respond to your inquiries; and for fraud prevention, provided these interests do not override your individual rights.
• Legal Obligations: Where we are required to comply with lawful requests, tax, or accounting purposes.
• Consent: Where you have actively given permission, such as subscribing to our marketing communications. You can withdraw consent at any time.

How We Use Your Information

Your data may be used for the following purposes:

• Processing and fulfilling flower delivery orders.
• Managing payments and sending order confirmations and updates.
• Contacting you regarding your order or responding to your customer service inquiries.
• Improving our website, product offerings, and services.
• Sending you promotional offers or newsletters (only if you have provided explicit consent).
• Fulfilling legal and regulatory obligations.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Typically, order-related data will be stored for up to seven years to comply with tax and business record-keeping regulations. If you have registered an account or subscribed to newsletters, we will retain your details until you request deletion or unsubscribe, unless otherwise required by law.

Data Processors and Third-Party Sharing

Your personal data may be shared with selected third parties who act as data processors on our behalf. These include:

• Payment Processors: Secure third-party providers manage your card and banking information.
• Delivery Partners: Couriers or delivery drivers responsible for fulfilling orders.
• IT Service Providers: Entities providing hosting, website maintenance, and email services.
• Analytics Providers: Services that analyze website usage to help us improve our user experience and security.

All processors are required to handle your data securely and only as instructed by us. We will never sell your data to third parties for marketing purposes. Data may be disclosed where required by law, public authority request, or court order.

International Transfers

Your personal data is generally processed within the United Kingdom or European Economic Area (EEA). If we ever need to transfer data outside these regions, we ensure appropriate protection measures are in place, including adequacy decisions or contractual clauses recognized by the UK and EU data protection authorities.

Your Data Protection Rights

Under GDPR, you have the following rights with respect to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain circumstances.
• Right to Restrict Processing: Request limitation of how your data is processed.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Revoke your consent at any time where processing depends on consent.
• Right to Lodge a Complaint: You may lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

To exercise any of your rights, please contact us using the details provided in our website's contact information section.

Data Security

We implement appropriate technical and organizational measures to safeguard your personal data and protect it against unauthorized access, loss, or destruction. These may include encrypted transmission of data, secure servers, and restricted access to personal information.

Cookies and Website Analytics

Our website uses cookies and analytics to enhance user experience and analyze website traffic. Cookies are small text files stored on your device. You can adjust your browser settings to refuse cookies; however, this may affect certain functionalities of our website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The revised policy will be effective when posted on our website. We recommend reviewing this policy regularly to stay informed.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us via the contact details listed on our website.