Flower Delivery Tufnell Park Privacy Policy

Scope and Purpose of this Privacy Policy

This Privacy Policy explains how Flower Delivery Tufnell Park collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing orders with Flower Delivery Tufnell Park, whether based in Tufnell Park or the surrounding districts.

What Data We Collect

When you place an order with Flower Delivery Tufnell Park, we collect personal data needed to process your order and provide our services. The types of data we may collect include:

• Identification Data: Your full name.
• Contact Information: Address for delivery, billing address, and phone number.
• Email Address: To send order confirmations, delivery notifications, and updates about your order.
• Order Details: Items ordered, recipient information, personal messages, and any special instructions related to the delivery.
• Payment Information: We may collect payment details (such as cardholder name and payment references). Note that all card transactions are processed through secure, third-party payment providers; we do not store full card numbers or security codes.
• Technical Data: IP address, browser type, device information, and cookies related to website browsing and order placement.

Lawful Basis for Processing Your Personal Data

We process your personal data under the following lawful bases as specified in the GDPR:

• Contractual Necessity: Data is processed to fulfil our contractual obligations to you in relation to your flower delivery order, such as processing payments and arranging delivery.
• Legal Obligation: In certain cases, we are required by law to retain transaction records for financial and tax purposes.
• Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, customer support, and fraud prevention, provided these interests do not override your fundamental rights and freedoms.
• Consent: If we wish to use your data for marketing or promotional purposes, we will seek your explicit consent, which can be withdrawn at any time.

How We Use Your Personal Data

Your personal data is used for the following specific purposes:

• Processing and fulfilling your flower delivery order, including arranging delivery and contacting you regarding delivery updates.
• Managing your customer account and providing customer support.
• Communicating with you regarding your orders, appointments, or inquiries.
• Complying with legal and regulatory requirements.
• Improving our services and website functionality.
• Sending marketing communications if you have provided explicit consent.

Data Retention: How Long We Hold Your Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Typically, we keep order and transaction information for up to seven years, in line with tax and accounting regulations. Other types of personal data, such as contact details used for marketing purposes, will be retained until you withdraw your consent or request removal.

Data Processors and Third Parties

To operate and deliver flower orders efficiently, we may share your data with trusted third-party service providers, known as data processors. These may include:

• Delivery couriers and logistics partners for fulfilling your flower delivery.
• Payment processing providers to securely handle financial transactions.
• IT hosting and maintenance providers for secure website management and data storage.
• Customer support solutions to assist you with inquiries or complaints.

All data processors have been carefully selected and are required to process data only in accordance with our instructions while ensuring GDPR-level security. Your data will not be sold or shared with any third parties for unrelated marketing or commercial purposes.

International Data Transfers

In instances where your data is processed by third parties outside the United Kingdom or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses, to maintain adequate data protection standards as mandated by the GDPR.

Your Data Protection Rights

Under GDPR, you are entitled to exercise the following rights in relation to your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request erasure of your data under certain circumstances (commonly referred to as the "right to be forgotten").
• Right to Restrict Processing: Request restriction of processing your data in specific situations.
• Right to Data Portability: Request transmission of your data to you or a third party of your choice.
• Right to Object: Object to our processing of your personal data, including for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: Lodge a complaint with the Information Commissioner's Office or another supervisory authority if you have concerns about how your data is processed.

Data Security

Flower Delivery Tufnell Park employs appropriate technical and organisational security measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. We regularly review our data collection, storage, and processing practices to ensure continued compliance with applicable data protection laws.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing or legal obligations. Substantial changes will be highlighted on our website. We encourage you to revisit this policy periodically for the latest information.

Contact and Concerns

If you have any questions or concerns regarding this Privacy Policy or your personal data, please refer to our published customer service channels for further assistance.