Flower Delivery Dartmouth Park Privacy Policy

Privacy Policy for Flower Delivery Dartmouth Park

This Privacy Policy describes how Flower Delivery Dartmouth Park ("we," "our," or "us") collects, uses, stores, and protects the personal information of customers who place flower delivery orders in Dartmouth Park and the surrounding districts. We are committed to safeguarding your data and upholding your rights in compliance with the UK General Data Protection Regulation (GDPR).

Scope of This Policy

This policy applies to all customers and visitors who place flower delivery orders with Flower Delivery Dartmouth Park for delivery in Dartmouth Park and the surrounding districts. By using our services, you acknowledge and consent to the practices described within this policy.

What Data We Collect

When you interact with Flower Delivery Dartmouth Park, we may collect and process the following categories of personal data:

• Contact Information: Name, delivery address, billing address, postcode, and contact details (such as phone number).
• Order Details: Details of your order, including flower preferences, delivery instructions, and recipient details (such as recipient name and address).
• Payment Information: Payment method details (note: payment processing is handled by third-party processors; we do not store full card details).
• Correspondence: Communications sent to us, such as inquiries or feedback regarding your order.
• Website Usage Data: When you use our website, we may collect standard website analytics data, such as IP address, device type, browser version, and browsing behaviour through cookies (subject to your preferences).

Lawful Basis for Processing Your Data

We process your personal data under the following legal bases as required by the GDPR:

• Contractual Necessity: To process and deliver your flower order, fulfil payment, respond to your inquiries, and provide related customer support or services.
• Legal Obligation: To comply with financial record-keeping requirements, regulatory, tax, and other legal obligations.
• Legitimate Interests: For the improvement of our services, managing customer relationships, ensuring website security, and preventing fraud. Our legitimate interests are balanced with your privacy rights.
• Consent: Where required, we may seek your consent for non-essential website cookies or for sending you direct marketing communications. Where consent is required, you can withdraw it at any time.

How We Use Your Data

Your personal information is used for the following purposes:

• Processing and fulfilling your flower delivery orders
• Communicating with you regarding your order status, payment, and delivery arrangements
• Answering your queries and providing after-sales support
• Sending order confirmations, receipts, and (where you have opted in) promotional material about our services
• Improving our website and customer experience through analytics
• Meeting our legal, regulatory, and tax obligations

Data Retention

We retain your personal information for only as long as is necessary for the purposes described in this policy or as required by applicable law. As a general principle:

• Order and contact details are kept for up to 7 years to comply with accounting and tax regulations, unless required to maintain records for a longer period due to legal reasons.
• Website usage data is retained for a shorter period, typically up to 24 months, unless further retention is needed for security or analytics purposes.
• If you contact us without placing an order, we will only retain your message for as long as needed to resolve your enquiry.

Data Sharing and Data Processors

We do not sell or rent your data to third parties. However, in order to provide our service, we may share your data with trusted third-party suppliers, acting as data processors, who process data on our behalf. These include:

• Payment Service Providers: To process customer payments securely.
• IT and Hosting Providers: To support website hosting, security, and data storage.
• Delivery Partners: For the delivery of flowers to recipients, where necessary.
• Accounting and Professional Advisors: To meet business and legal requirements.

All processors are subject to data protection agreements and are required to handle your personal data confidentially, securely, and only for the purposes specified by us.

Your Rights Under GDPR

Under the GDPR, you have several important rights in relation to the personal data we hold about you:

• Right to Access: You can request details of the data we hold about you.
• Right to Rectification: You can ask us to correct or update any incomplete or inaccurate data.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data.
• Right to Restrict Processing: You can ask us to limit how your data is processed in certain cases.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format and have it transferred to another controller where technically feasible.
• Right to Object: You have the right to object to certain processing, such as direct marketing or processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

If you wish to exercise any of these rights, please contact us via our website or in writing. We may require identification to protect your privacy and, where relevant, may need to retain certain information for legal reasons.

Data Security

We have implemented physical, technical, and organizational measures to ensure the security of your data. This includes secure data storage, encryption of payment details handled by our third-party providers, restricted access to sensitive information, and regular security reviews. Despite our best efforts, no system can be guaranteed 100% secure; thus, we cannot accept liability for unauthorised access beyond our reasonable control.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations or legal requirements. Any updates will become effective once posted on our website. We encourage you to review this policy periodically to stay informed.

Contacting Us

If you have questions about this Privacy Policy or our data practices, please contact us through our website's contact form. If you have concerns about how your data has been handled, you are also entitled to raise a complaint with the UK Information Commissioner's Office.