Privacy Policy for Flower Delivery Southend On Sea

Introduction

This Privacy Policy describes how Flower Delivery Southend On Sea ('we', 'us', 'our') collects, uses, shares, and protects the personal data of individuals who place flower delivery orders in Southend On Sea and surrounding districts. We comply with all requirements of the UK General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge and agree to the practices outlined in this policy.

Scope of this Policy

This Privacy Policy applies to personal data collected from all customers who place flower delivery orders with Flower Delivery Southend On Sea, whether the order is made through our website, over the phone, or in-person, and relates specifically to deliveries within Southend On Sea and its surrounding districts.

What Personal Data We Collect

We collect personal data necessary to process your order, provide delivery services, and comply with our legal obligations. The types of personal data we may collect include:

• Contact Information: Name, delivery address, billing address, telephone number
• Email Address: For order confirmation, notifications, and customer service
• Order Details: Purchase information such as flower selection, recipient name and address, delivery instructions, gift messages
• Payment Details: When placing an order online or by phone, payment information such as card details is processed securely via our payment processor (we do not store full payment card numbers ourselves)
• Communications: Records of your correspondence with us, including queries, complaints, or feedback
• Website Usage Data: Information collected automatically when using our website, such as IP address, browser type, pages accessed, and referral information

The Lawful Basis for Processing Your Data

Under the GDPR we must have a lawful basis to process your personal data. Our primary lawful bases are:

• Contract: Processing is necessary to fulfill your order and deliver flowers to you or your chosen recipient
• Legal Obligation: Compliance with legal requirements, such as tax and accounting regulations
• Legitimate Interests: Where necessary for running our business purposes in a way that does not materially impact your rights or interests, such as improving our products and services, preventing fraud, and handling customer queries
• Consent: For particular uses, such as when you choose to receive marketing communications (If you give us consent, you can withdraw it at any time)

How We Use Your Personal Data

Your personal data is used for the following purposes:

• Processing and delivering your flower order as per your instructions
• Communicating with you regarding your order, including confirmations, updates, and customer support
• Improving our services and website experience
• Meeting legal, regulatory, and tax obligations

Who Processes Your Data (Third-Party Processors)

We work with selected third-party service providers (processors) who process your data on our behalf to help us provide our services. These may include:

• Payment processing providers for handling transactions securely
• Courier and delivery partners to fulfill the delivery of your order
• IT and hosting services supporting our website and data storage
• Customer service and communication platform providers to handle correspondence

All third-party processors act only under our instructions and are required to adhere to high standards of data protection and security. We do not sell or rent your personal data to any other organisation.

Data Retention: How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Typically, we will keep order and transaction records for up to seven years for accounting and tax purposes. Other customer correspondence or data will be kept for as long as needed to manage our relationship with you or for the period required to resolve disputes or enforce our agreements. After this period, your personal data will be securely deleted or anonymised.

How We Protect Your Data

We are committed to ensuring that your information is secure. We implement technical and organisational measures to prevent unauthorised access, loss, or misuse of your personal data. These measures include secure storage systems, restricted access to data, data encryption in transit where required, and staff training in data protection responsibilities.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Ask for your data to be deleted where the lawful basis allows
• Right to Restrict Processing: Ask us to limit the processing of your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to certain Processing activities, such as direct marketing
• Right to Withdraw Consent: Where consent is the lawful basis, you may withdraw it at any time

To exercise any of these rights, please contact us using our website contact form or by post. We may require you to verify your identity to ensure your request is handled securely. We will respond to your requests without undue delay and in accordance with legal requirements.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we realise that information has been collected from a person under 16 without parental consent, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website, and significant changes will be communicated where appropriate.

Contact and Complaints

If you have any questions, concerns, or complaints regarding how we handle your personal data, please contact us through the methods provided on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are dissatisfied with our response to your data protection queries.