Your Privacy at Flower Delivery Silvertown: Our Commitment to GDPR Compliance

Scope of the Privacy Policy

This Privacy Policy details how Flower Delivery Silvertown ("we", "our", or "us") collects, uses, protects, and manages your personal data when you place flower delivery orders in Silvertown and the surrounding districts. This policy applies to all customers who place orders with us, whether via our website, telephone, or in person. We are committed to handling your information responsibly, in strict compliance with the UK General Data Protection Regulation (GDPR) and all applicable data protection laws.

Personal Data We Collect

When you use our flower delivery services, we may collect the following categories of personal data:

  • Contact Information: Name, delivery address, phone number, and billing address.
  • Recipient Details: Name and delivery address of the recipient (where provided).
  • Order Information: Items ordered, order notes, messages to recipients, and delivery preferences.
  • Payment Details: Payment method (card type, last four digits), transaction IDs, though we do not store full card numbers.
  • Account Information: If you create an account, your login credentials and order history.
  • Correspondence: Communications with us regarding orders, queries, or feedback.
  • Technical Data: IP address, browser type, device information, and cookies related to your use of our website.

Legal Basis for Processing Personal Data

We process your personal data under the following lawful bases, as defined by the GDPR:

  • Contractual Necessity: Most data we collect is processed to fulfil your order or to provide requested services, such as delivering flowers to your chosen recipient.
  • Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, communicating delivery updates, and ensuring the security of our website. These interests do not override your fundamental rights and freedoms.
  • Legal Obligation: We may be required to process and retain certain data to comply with legal and regulatory obligations, including tax and accounting requirements.
  • Consent: For marketing communications and use of certain cookies, we rely on your explicit consent. You can withdraw your consent at any time.

Purpose of Data Use

Your personal data is used for the following purposes:

  • Processing and delivering your flower order to the specified address.
  • Notifying you and/or the recipient about order status, delivery details, or any issues.
  • Managing payments, refunds, and resolving billing enquiries.
  • Creating and maintaining your user account if you choose to register.
  • Improving our website, services, and customer experience.
  • Complying with our legal and regulatory responsibilities.
  • Sending you marketing communications, only with your consent.

Data Retention Policy

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain:

  • Order and transaction data for up to six years after your last order, to comply with tax and legal reporting requirements.
  • Account information for as long as your account remains active.
  • Correspondence and feedback for up to two years after resolution.

Once personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule.

Data Sharing and Processors

Your personal data may be shared with trusted third parties ("processors") who assist us in delivering your order and managing our services. This includes:

  • Payment processing providers to handle transactions securely.
  • Delivery partners and couriers for the fulfilment of your order.
  • IT service providers that help maintain our website and databases.
  • Professional advisors (such as accountants and legal advisors) for business compliance.

All processors are vetted to ensure they adhere to GDPR requirements, and we have data processing agreements in place to safeguard your data. We do not sell or rent your personal data to any third parties for marketing or any other purposes.

Your Rights Under GDPR

As a data subject under the GDPR, you have certain rights regarding your personal data:

  • The right to access: You can request a copy of the personal data we hold about you.
  • The right to rectification: You can request that we correct any inaccuracies in your data.
  • The right to erasure: You can request the deletion of your personal data, subject to legal or contractual restrictions.
  • The right to restrict processing: You can request that we limit the processing of your data in certain circumstances.
  • The right to data portability: You can request to receive your data in a commonly used, machine-readable format.
  • The right to object: You can object to the processing of your data based on legitimate interests or direct marketing.
  • The right to withdraw consent: Where we process data based on your consent, you may withdraw it at any time.
  • The right to lodge a complaint: If you believe your data has been processed unlawfully, you have the right to complain to the UK data protection authority.

To exercise any of these rights, please contact us through the official channels listed on our website. We will respond promptly in accordance with GDPR requirements.

Protecting Your Data

We are committed to safeguarding your personal data. We use a combination of appropriate technical and organisational measures to secure your information from unauthorized access, loss, misuse, or disclosure. This includes encrypted data transmission, regular security reviews, and limitations on employee access to customer data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for any other reason. If significant changes are made, we will notify you through prominent communication on our website. We encourage you to review this policy periodically for the latest information on our privacy practices.

Contact Details and Questions

If you have any questions about this Privacy Policy, your rights, or how we handle your personal data, please refer to the contact information provided on our website. Our data protection team is available to assist with any concerns or requests relating to your information.