Privacy Policy for Orders in Stevenage and Nearby
Introduction
This Privacy Policy describes how Flower Delivery Stevenage ("we", "our", "us") collects, uses, stores, and protects your personal information when you place orders in Stevenage and surrounding districts. We are committed to ensuring that your privacy is protected and that we handle your data responsibly, in compliance with the General Data Protection Regulation (GDPR).
Scope of this Policy
This policy applies to all individuals who place flower delivery orders with us in Stevenage and the neighbouring districts. It covers information collected through our website, phone orders, or any other means of communication related to our flower delivery services.
What Data We Collect
Depending on how you interact with us, we collect the following categories of data:
- Identity data: First and last name.
- Contact data: Delivery address, billing address, phone number (if provided), and postcode.
- Order data: Details of products and services you order, messages for the recipient, delivery instructions, and transaction history.
- Payment data: Payment confirmation information (processed by third-party payment providers; we do not store full card or bank details).
- Technical data: IP address, browser type, and device information collected when you use our website.
- Correspondence: Any communication such as emails, feedback, or queries regarding your order or our services.
Lawful Basis for Processing Your Data
We collect and process your data for several lawful purposes under GDPR:
- Contractual necessity: To process your order, manage payments, and deliver products and services you request.
- Legal obligation: To comply with legal and regulatory requirements, such as record-keeping or fraud prevention.
- Legitimate interests: For purposes such as improving our services, handling customer queries, or ensuring website security, unless your rights override these interests.
- Consent: Where required, for example, if you opt into receiving marketing communications (which are always optional and can be withdrawn at any time).
How We Use Your Information
We use your personal data for the following purposes:
- To process flower delivery orders, including billing, payment, and delivery.
- To provide customer support, address queries, and resolve complaints.
- To keep internal records of transactions and service history.
- To improve our products, services, and user experience.
- To meet our legal and regulatory obligations.
- With your consent, to send service updates or marketing communications (you can opt out at any time).
How We Share and Disclose Your Data
We treat your data with confidentiality and only share it when necessary for order fulfillment, legal reasons, or with trusted partners, as outlined below:
- Third-party service providers: Such as payment processors and couriers, strictly for completing your transactions and deliveries.
- Professional advisers: Such as legal or accounting professionals, when required.
- Regulatory and law enforcement bodies: Where legally required or to safeguard our business or users.
We do not sell or rent your data to any third parties.
Data Processors We Use
For certain activities, we engage third-party processors who assist in payment processing, website hosting, technical support, and delivery logistics. These processors are carefully selected and required to protect your data under strict contractual agreements and security measures.
International Data Transfers
Your information is primarily processed within the United Kingdom. If your data is transferred outside the UK or the European Economic Area (EEA), we ensure adequate safeguards are in place, such as standard contractual clauses, to protect your privacy rights.
How Long We Keep Your Data
We only retain your personal information for as long as is necessary for the purposes set out in this policy, or as required by law. Generally, this means:
- Order and transaction records are kept for up to seven years to comply with legal and financial regulations.
- Customer support information is retained for up to two years after your last interaction.
- Any marketing preferences are kept until you withdraw your consent.
Once the relevant retention period has expired, your data will be securely deleted or anonymised.
User Rights Under GDPR
You have several rights regarding your personal data, subject to certain conditions. These include:
- Right of access: You may request a copy of the personal information we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete data.
- Right to erasure: You have the right to request the deletion of your data where there is no lawful reason for us to continue processing it.
- Right to restrict processing: You can ask us to restrict the processing of your data in certain circumstances.
- Right to data portability: Where applicable, you can request that your data be transferred to you or another service provider.
- Right to object: You can object to the use of your data for certain purposes, especially direct marketing.
- Right to withdraw consent: Where we rely on consent to process data, you may withdraw it at any time.
If you wish to exercise any of these rights, please contact us using the details provided on our website.
How We Protect Your Data
We take your data security seriously. Your personal information is protected by appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse. Regular reviews and staff training help ensure your data stays secure.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website with the date of the latest revision.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please get in touch through the contact details listed on our website. We are committed to addressing your enquiry in a timely and transparent manner.
