Our Approach to Your Privacy at Flower Delivery Tolworth

Privacy Policy for Flower Delivery Tolworth Customers

This Privacy Policy explains how Flower Delivery Tolworth collects, uses, processes, and protects your personal data in compliance with the UK General Data Protection Regulation (GDPR). It applies to all customers placing orders for flower deliveries in Tolworth and the surrounding districts. By using our services, you acknowledge the terms set out in this policy and your related data protection rights.

What Personal Data We Collect

To provide our flower delivery services efficiently and reliably, we collect the following types of personal information:

  • Contact Data: Name, billing address, delivery address, and phone number.
  • Order Information: Details of your flower order, delivery instructions, and special requests.
  • Payment Details: Payment card information and transaction data (processed via secure third-party payment processors; we do not store full payment card details).
  • Communication Records: Emails or messages relating to your order, feedback, or queries.
  • Website Usage Data: Information such as IP address, browser type, device details, and browsing activity on our website, typically collected through cookies and analytics tools.

Lawful Basis for Processing Personal Data

Our processing of your personal data is justified by one or more of the following lawful bases laid out under GDPR:

  • Contractual Necessity: Processing is required to fulfil our contract with you when you place an order for flower delivery.
  • Legal Obligations: Data may be processed to comply with legal and regulatory requirements, such as tax or audit responsibilities.
  • Legitimate Interests: We may process data for the legitimate interest of ensuring the proper administration and delivery of services, customer support, enhancement of user experience, and prevention of fraud—without overriding your fundamental rights.
  • Consent: For activities not covered by the above, we will seek your explicit consent (for example, direct marketing communications where relevant).

How Your Data is Used

We use your data solely for the purposes described below:

  • Processing and delivering your flower orders, including communicating order status and fulfilment.
  • Managing payment and verifying transaction validity via secure third-party processors.
  • Handling queries, customer service requests, and resolving any service issues.
  • Improving our products, services, and website experience through anonymised analytics.
  • Meeting our legal and regulatory obligations.

Retention of Your Personal Data

Your personal information is retained only for as long as necessary for the purposes outlined above, including for satisfying our legal, accounting, or reporting requirements. We normally retain:

  • Order and transaction information for up to seven years to comply with tax law.
  • Contact and communication records for no more than three years from your last interaction, unless required otherwise.
  • Website usage data for analytics purposes is anonymised or deleted within two years.

When retention periods expire, your data will be securely deleted or anonymised to prevent identification.

Use of Data Processors and Third Parties

Your personal data may be processed by trusted third parties solely for the provision of our services. Our main categories of data processors include:

  • Payment service providers for processing financial transactions.
  • Courier companies for order fulfilment and delivery.
  • IT service providers, including web hosting and data security services.
  • Cookies and analytics service providers (which process usage data in aggregate form).

All third-party processors are selected for their high standards of security and data protection, and they are contractually bound to process your data only in accordance with our instructions and the law. Your data is not sold, rented, or traded to external parties for marketing purposes. Data transfers outside the UK or EEA will only take place where adequate safeguards are in place.

Your Data Protection Rights

As a data subject under GDPR, you have the following rights regarding your personal information:

  • Access: You have the right to request a copy of the personal data we hold about you.
  • Rectification: You can ask us to correct inaccurate or incomplete data held about you.
  • Erasure: You may request the deletion of your personal data where there is no lawful basis for its ongoing retention.
  • Restriction: You can request that we restrict the processing of your data under certain circumstances.
  • Portability: You have the right to request that data you have provided to us be transferred to another organisation, where feasible.
  • Objection: You may object to our processing of your personal data when it is based on our legitimate interests or for direct marketing purposes.
  • Withdraw Consent: Where we process your data based on your consent, you may withdraw this consent at any time.

To exercise your rights or to obtain more information about your data, you may contact us using the details on our website. We will respond to your request within one month, subject to identification checks and applicable law.

Data Security

We employ rigorous physical, technical, and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure. Access to customer data is restricted to authorised personnel and trusted data processors only.

Updates to This Policy

This Privacy Policy will be reviewed periodically and updated as necessary to reflect changes in our practices or legal requirements. Material changes will be prominently communicated via our website so that you remain informed about how your personal data is collected and managed.

Contact and Queries

If you have any questions or concerns regarding this Privacy Policy or the way your personal data is processed by Flower Delivery Tolworth, please refer to the contact section of our website for the appropriate communication methods.

This policy is effective as of 1st June 2024 and applies to all orders placed for delivery within Tolworth and the surrounding districts.