Privacy Policy for Flower Delivery Welling Customers

Introduction and Scope

This Privacy Policy describes how Flower Delivery Welling collects, uses, and protects your personal data when you place orders for flower delivery in Welling and the surrounding districts. We are committed to upholding your privacy and complying with the highest standards of data protection, specifically the UK General Data Protection Regulation (GDPR). This policy applies to all customers who use our services for flower delivery from or to Welling and neighbouring areas.

What Personal Data We Collect

To provide our flower delivery services efficiently, Flower Delivery Welling may collect the following categories of personal data:

• Identity Data: Name, title, and contact details, such as delivery address, billing address, and recipient names.
• Contact Data: Telephone number (optional), physical address, and occasionally email address if provided for communications regarding your order.
• Order Details: Purchase history, transaction details, flower selections, and any personalised notes or instructions attached to an order.
• Payment Data: Payment details required to process transactions (e.g., card type, partial card number if processed directly, or confirmation from payment processors).
• Technical Data: IP address, browser type, and website usage patterns if you order through our website, which are collected via cookies for functionality and security purposes.

Lawful Basis for Processing Personal Data

Under the GDPR, we must have a lawful basis for collecting and processing your personal data. Flower Delivery Welling relies on the following lawful bases:

• Contractual Necessity: Processing your personal data is necessary to deliver our service—taking, processing, and fulfilling your flower delivery orders.
• Legal Obligation: Some data may be processed to comply with tax, accounting, or legal reporting requirements.
• Legitimate Interests: We process data to enhance user experience, improve service delivery, manage our website’s security, and for limited marketing relating to similar services. We always balance these interests against your rights and freedoms.
• Consent: Any direct marketing outside the scope of your past purchases or any optional data sharing will only be done with your explicit consent, which can be withdrawn at any time.

How We Use Your Data

Flower Delivery Welling uses your data to:

• Process and deliver your orders accurately and timely.
• Communicate order confirmations, delivery updates, and requested information.
• Manage payments, fees, and charges associated with the services provided.
• Comply with legal, accounting, and regulatory requirements.
• Improve our products, customer service, and website functionality.
• Send you relevant updates or marketing on similar flower delivery services, where legally permissible.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order-related data (except payment information, where not required by law) will be retained for six years to comply with tax and contractual obligations. Once this period expires or your data is no longer required, it will be securely deleted or anonymised.

Processors and Third-Party Service Providers

To operate efficiently, Flower Delivery Welling uses third-party service providers to process payments, deliver flowers, manage website hosting, and operate IT infrastructure. All our processors are selected with care and regularly reviewed to ensure GDPR compliance. These providers may have access to limited elements of your personal data strictly as necessary to provide their services. They are contractually obliged to keep this information confidential and use it exclusively for providing the agreed services.

Where required, data may also be communicated to governmental authorities or law enforcement in accordance with legal obligations.

Your Rights Under the GDPR

You have the following rights under data protection law with respect to your personal data held by Flower Delivery Welling:

• Right to Access: You may request access to your personal data and obtain information on how it is processed.
• Right to Rectification: You can ask for incorrect or incomplete personal data to be corrected or updated.
• Right to Erasure: Also known as the ‘right to be forgotten’, you can ask for your data to be deleted when it is no longer required, subject to legal constraints.
• Right to Restrict Processing: You may request restrictions on how we process your personal data under certain circumstances.
• Right to Data Portability: Subject to certain limitations, you can obtain and reuse your data for your own purposes across different services.
• Right to Object: You can object to certain types of processing, such as direct marketing or processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the UK supervisory authority (Information Commissioner’s Office).

Data Security

We implement appropriate physical, technical, and organisational measures to ensure your personal data is kept safe from accidental loss, unauthorised access or disclosure, and other risks. Our staff and processors are trained and contractually obliged to protect the confidentiality and integrity of your data.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes to our business practices or legal requirements. Updates will be communicated through our website or services. Please review this policy regularly to stay informed about how we protect your privacy.

Contact and Further Information

If you require further information about how your data is managed at Flower Delivery Welling, or wish to exercise any of your data subject rights, please use our designated customer enquiry channels found on our website or ordering platform.