Privacy Notice for Customers of Flower Delivery Abbots Langley

Introduction

This Privacy Policy outlines how Flower Delivery Abbots Langley ("we", "us", or "our") collects, uses, shares, and safeguards your personal information when you place an order with us in Abbots Langley or the surrounding districts. We are strongly committed to protecting your privacy and handling your information in a transparent and lawful manner in accordance with the UK General Data Protection Regulation (UK GDPR).

Scope of this Policy

This policy applies to all individuals who place an order for flower delivery services from Flower Delivery Abbots Langley, whether as direct customers or as recipients of deliveries made within Abbots Langley and the adjacent areas. By using our services, you acknowledge and consent to the practices described in this Privacy Policy.

Personal Data We Collect

To provide our flower delivery services, we may collect, store, and process the following categories of personal data:

• Identity Data: Name (of both customer and recipient, if different)
• Contact Data: Delivery address, billing address, phone numbers, and any relevant instructions
• Order Data: Details of products ordered, order reference, and delivery preferences
• Payment Data: Payment method, transaction details (processed via our third-party payment processor), though we do not store complete payment card information on our servers
• Correspondence: Records of communications with our customer support (e.g., feedback, queries, complaints)
• Technical Data: IP address, browser type, and interaction with our website (if you order online)

Lawful Basis for Data Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• Performance of a Contract: Processing your data is necessary to fulfil your order and deliver our services.
• Legal Obligation: We may be required to process or retain certain data to comply with legal requirements, such as records for tax or regulatory reasons.
• Legitimate Interests: We may process data to improve our services, prevent fraud, or communicate important updates, provided this does not override your data protection rights.
• Consent: Where applicable, we seek your explicit consent, for example, for marketing communications.

How We Use Your Data

We use your personal data for the following purposes:

• To process and deliver your orders, including managing payments, fees, and charges
• To communicate order updates and delivery details
• To respond to customer service enquiries and resolve complaints
• To analyse and improve our products, services, and customer experience
• To comply with our legal obligations and safeguard our services against fraud and abuse
• To send marketing communications, where permitted by law and with your consent

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including for satisfying legal, accounting, or reporting requirements. The retention period depends on the nature of the information and the reasons for which it was collected. Typically, we retain order and transaction records for up to 7 years to comply with legal obligations. Contact data used for marketing will be retained until you opt-out or withdraw your consent.

Data Processors and Third Parties

We may share your personal data with trusted third parties ("processors") to enable the provision and delivery of our services. These include:

• Payment processing providers
• IT and website hosting service providers
• Delivery couriers or local florists assisting with order fulfilment
• Providers of customer relationship management and feedback systems
• Legal, regulatory, or accounting consultants as required

We ensure that all third-party processors comply with data protection laws and process your data only as necessary for their specific function. Our processors are not permitted to use your data for their own purposes and are required to provide adequate security measures.

Data Security

We take data security seriously and have implemented appropriate technical and organisational measures to protect your personal data. This includes encrypted communications, access controls, regular data protection training for our staff, and secure storage solutions. While we strive to use reasonable efforts to safeguard your information, no system can guarantee absolute security.

Your Data Protection Rights

As a customer of Flower Delivery Abbots Langley, you have the following data protection rights under the UK GDPR:

• Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of your information.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to Restriction: You can ask us to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where applicable, you can request your data in a portable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If we process your data based on consent, you can withdraw this at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data rights have been infringed.

To exercise any of these rights, please contact us using the details provided on our website or within your order confirmation.

Changes to this Privacy Policy

This policy may be updated from time to time to reflect legal, regulatory, or operational changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Changes will take effect immediately upon publication on our website.

Contact and Further Information

If you have questions about this Privacy Policy or wish to exercise your data subject rights, please refer to our website's contact methods. We are committed to responding promptly and professionally to any questions or requests regarding your personal data.