GDPR-Compliant Privacy Policy for Flower Delivery Camden

Privacy Policy Overview

This Privacy Policy explains how Flower Delivery Camden ('we', 'us', 'our') collects, uses, stores, and protects personal data when you place an order for flower delivery in Camden and its surrounding districts. This policy adheres to the General Data Protection Regulation (GDPR) and is designed to give you confidence in how your information is handled, as well as outlining your data rights.

Who This Policy Applies To

This Privacy Policy applies to all individuals placing flower delivery orders with Flower Delivery Camden from within Camden and the nearby districts. By engaging our services, you acknowledge and agree to the terms set forth in this document.

What Data We Collect

When placing an order or interacting with Flower Delivery Camden, the following categories of personal data may be collected:

  • Contact Information: Full name, delivery address, billing address, phone number, and any additional contact details provided for order fulfillment.
  • Payment Details: Information required to process your payment, such as card type, last four digits of your card, and transaction reference numbers. We do not store full card numbers or security codes.
  • Order Details: Details about your flower selection, delivery instructions, messages to recipients, preferred delivery dates and times, and purchase history.
  • Device and Usage Data: IP address, browser type, operating system, and how you use our website. This is collected through cookies and site analytics tools for service improvement and security monitoring.
  • Customer Service Communications: Any correspondences you share with us, such as feedback, queries, or complaints.

Lawful Basis for Processing Your Data

We only process your personal data when permitted by law. The principal lawful bases for data processing under GDPR include:

  • Contractual Necessity: We require certain personal data to process and deliver your flower order, take payment, and provide customer service.
  • Legal Obligation: We are required by law to retain certain transaction records for taxation and accounting purposes.
  • Legitimate Interests: We may use your data to improve our services, prevent fraud, or protect the security of our business, provided that these interests do not override your rights and freedoms.
  • Consent: In scenarios where we rely on your consent (e.g., marketing), you can withdraw consent at any time.

How We Use Your Data

Your personal data is used for the following purposes:

  • Processing orders and managing deliveries
  • Communicating order updates or responding to your inquiries
  • Processing payments and refunds
  • Fulfilling legal and regulatory obligations
  • Improving website functionality and customer service
  • Sending marketing communications (only if you have opted in)
  • Protecting against fraud and maintaining the security of our systems

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements. Specifically, order information and related data are generally retained for up to seven years from the date of your transaction, in line with accounting and tax regulations. After this period, personal data is securely deleted or anonymized unless ongoing retention is required by law or for legal claims.

Third-Party Processors

We use reputable third-party service providers (processors) to assist in managing our business efficiently. These may include:

  • Payment Processors: For secure payment handling and fraud prevention
  • Certain IT Infrastructure and Hosting Services: For website hosting, data security, and backup
  • Delivery Partners: For fulfilling and tracking deliveries as necessary
  • Analytics Providers: For monitoring website usage and enhancing user experience

All third-party processors are thoroughly vetted and contractually obliged to keep your data secure, process it only for specified purposes, and act in compliance with GDPR requirements.

Protecting Your Data

We use industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes encryption, access controls, secure data storage, and regular monitoring of our IT systems. While we strive to safeguard your information, no method of data transmission over the Internet or electronic storage is 100% secure.

Your Rights Under GDPR

Under the GDPR, you have the following rights over your personal data held by us:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of any inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your data, subject to certain legal obligations.
  • Right to Restrict Processing: Request that we limit how we use your data.
  • Right to Data Portability: Receive your personal data in a commonly used format and transmit it to another controller.
  • Right to Object: Object to our processing of your data where we rely on legitimate interests or direct marketing.
  • Rights Related to Automated Decision-Making: You will not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Should you wish to exercise any of these rights, please reach out to us using the contact information provided on our website. Verification of your identity may be required to ensure your request is handled securely and appropriately.

Children's Data

Flower Delivery Camden does not knowingly collect personal information from children under the age of 16. If you become aware that a child has provided us with personal information, please notify us so that we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. Any updates will be posted on our website, and continued use of our services constitutes your acceptance of those changes.

Contacting Us

For any questions or concerns regarding this Privacy Policy, your data, or your rights, please use the contact information provided on our website. We are committed to addressing your concerns promptly and transparently.