Privacy Policy for Flower Delivery Bloomsbury

Scope of This Privacy Policy

This Privacy Policy explains how Flower Delivery Bloomsbury ('we', 'us', or 'our') collects, processes, stores, and protects your personal data when you place an order for flower delivery in Bloomsbury and the surrounding districts. We are committed to complying with the General Data Protection Regulation (GDPR) and to being transparent about how we handle your information.

What Data We Collect

When you interact with Flower Delivery Bloomsbury, we may collect and process the following types of personal data:

• Contact Information: Name, address, telephone number, and any other details you provide when placing an order or contacting us.
• Order Details: Information about the products and services you order, including delivery address, recipient details, and special instructions.
• Payment Information: Payment card details and transaction information, processed securely through third-party payment processors.
• Communication Data: Records of any correspondence with us, including queries, feedback, and complaints.
• Website Usage Data: IP address, browser type, device information, and usage data (collected via cookies and similar technologies) to enhance your experience and improve our services.

Lawful Basis for Processing Your Data

Under GDPR, we rely on one or more of the following lawful bases to process your personal data:

• Contractual Necessity: Processing necessary for the performance of a contract with you (for instance, to fulfill your flower delivery order and communicate its status).
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these interests are not overridden by your rights (such as improving our services, maintaining security, or handling customer enquiries).
• Legal Obligation: Processing required for compliance with our legal obligations (including tax records and anti-fraud measures).
• Consent: For certain activities such as direct marketing, we may rely on your consent; you can withdraw consent at any time.

How We Use Your Information

We use your personal data for the following purposes:

• To process and deliver flower orders as requested by you.
• To communicate with you regarding your order or any requested information.
• To process payments and detect or prevent fraudulent activity.
• To comply with applicable legal and regulatory requirements.
• To improve our products, services, and website experience.
• For customer service support and to respond to enquiries.
• For sending marketing communications where you have agreed to receive them.

Disclosure and Data Processors

We do not share your personal information with third parties except as necessary to provide our services or as required by law. Your data may be disclosed in the following circumstances:

• Payment Processors: Accredited third-party payment providers process your payment securely on our behalf; we do not store your full payment card details.
• Delivery Partners: Trusted courier partners or agents may receive recipient details to facilitate delivery of your order.
• IT and Support Providers: We may use service providers for website hosting, customer support, or IT maintenance, all of whom are contractually bound to process your data securely and comply with GDPR requirements.
• Legal Requirements: We may disclose your data if compelled to do so by law or regulatory obligation.

All third-party processors are carefully selected and required to uphold the confidentiality and security of your personal data. They may not use your information for their own purposes.

International Data Transfers

Generally, your data is stored within the United Kingdom or European Economic Area (EEA). If we ever transfer personal data outside these regions, we ensure that adequate safeguards are in place to protect your privacy and legal rights, in accordance with GDPR.

Data Retention

We will retain your personal data only as long as is necessary for the purposes set out in this policy, including fulfilling your orders, complying with legal obligations, and resolving disputes. In most cases, data relating to completed orders will be retained for up to six years in line with statutory accounting and tax reporting requirements, unless a longer or shorter retention period is required by law. After this period, your personal information will be securely deleted or anonymised.

Your Rights Under GDPR

You have a range of rights concerning your personal data, including:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete information we hold about you.
• Right to Erasure: Request deletion of your personal data where there is no longer a lawful reason for us to hold it.
• Right to Restrict Processing: Request us to limit how we process your data in certain situations.
• Right to Object: Object to specific types of processing (such as direct marketing).
• Right to Data Portability: Request the transfer of your data to another provider in a structured, commonly used format.
• Right to Withdraw Consent: If we process your data on the basis of consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the details provided on our website. We will respond to your request within one month as required by law, although this may be extended in complex cases. Requests are free of charge unless manifestly unfounded or excessive.

Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or destruction. Such measures include secure servers, encryption, regular security reviews, and staff training. While we strive to safeguard your information, no system is completely immune to threats, and by placing orders, you acknowledge this risk.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will be published on our website, and significant changes will be communicated where appropriate. We encourage you to periodically review this policy for the latest information on how we handle your data.

Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the contact form or details on our website. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

This Privacy Policy applies to all Flower Delivery Bloomsbury customers placing orders from Bloomsbury and surrounding districts. Your trust is important to us, and we are committed to protecting your privacy and personal data.