GDPR Privacy Policy for Flower Delivery Dagenham Customers

Introduction and Scope

This Privacy Policy explains how Flower Delivery Dagenham ("we", "us", or "our") collects, uses, processes, and protects your personal data in accordance with the General Data Protection Regulation (“GDPR”). The policy applies to all customers who place flower delivery orders with Flower Delivery Dagenham from locations within Dagenham and the surrounding districts. We are committed to safeguarding your rights and ensuring the responsible processing of your personal information.

What Personal Data We Collect

When you place an order with Flower Delivery Dagenham, we collect certain information necessary to fulfil your order and provide reliable customer service. The types of personal data we may collect include:

• Identity Data: Your name and, if applicable, the recipient's name.
• Contact Data: Address for delivery, billing address, and contact details such as telephone number.
• Transaction Data: Information about the products you order, payment status (excluding full payment card data), order history, and any communications related to your order.
• Payment Data: Payment confirmation information from payment processors, but not your full payment card details, which are handled securely by our payment partners.
• Communications Data: Any correspondence you have with us, including order requests, instructions, compliments, complaints, or feedback.
• Technical Data: Limited technical details such as IP address and browser type in certain cases to improve the security and performance of our website.

Our Lawful Basis for Processing Personal Data

We only process personal data when we have a valid legal basis under GDPR. Our main lawful grounds for collecting and processing your information are:

• Contractual Necessity: To process and deliver your flower order, send order confirmations, and respond to your service enquiries or issues.
• Legal Obligations: To comply with laws and regulations applicable to our business, such as tax records and fraud prevention.
• Legitimate Interests: To improve our delivery service, prevent fraud, ensure the security of our services, and provide you with a positive customer experience. We only use your data based on legitimate interests when your rights and freedoms are not overridden.
• Consent: For certain communications (such as marketing), we seek your explicit consent where required.

How We Use Your Personal Information

Your data is used for the following purposes:

• Processing and delivering your orders.
• Communicating with you about your order and any related service matters.
• Maintaining our accounting and business records in compliance with applicable law.
• Improving our website, products, and services based on feedback and usage data.
• Preventing, detecting, and managing potential fraudulent activities.
• Where you have consented, sending periodic updates or promotions relevant to Flower Delivery Dagenham (you can withdraw consent at any time).

Data Retention: How Long We Keep Your Information

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically, we retain order and transaction records for up to seven years to comply with accounting and legal obligations. Contact and communication data may be kept for a shorter period, unless it pertains to a transaction or relates to a query that requires follow-up.

Once retention periods expire, your information will be securely deleted or anonymised, unless you have provided consent to retain it longer for specific purposes such as marketing.

Who Processes Your Data: Third-Party Processors

To facilitate our service, we use trusted third-party service providers (data processors) who may process your data strictly on our behalf and under our instructions. These may include:

• Payment Processors: For secure payment handling and transaction confirmation.
• Delivery Partners: To ensure your flowers are delivered promptly and safely.
• IT and Cloud Service Providers: For secure data storage, website hosting, and backup services.
• Accountancy and Legal Advisors: For compliance and regulatory reporting.

All processors are carefully selected and contractually bound to treat your data securely, confidentially, and in compliance with GDPR. Your data will never be sold to or shared with unrelated third parties for their own marketing purposes.

Your Data Protection Rights Under GDPR

As a customer of Flower Delivery Dagenham, you have the following rights:

• The Right to Access: You can request a copy of the personal data we hold about you.
• The Right to Rectification: You may ask us to correct or update any inaccurate or incomplete information.
• The Right to Erasure: Also known as the “right to be forgotten”, you may ask us to delete your personal data, subject to certain exceptions (for example, where we need to retain records for legal compliance).
• The Right to Restrict Processing: You can ask us to restrict the processing of your personal information in certain cases.
• The Right to Object: You may object to our processing of your data based on legitimate interests or direct marketing purposes.
• The Right to Data Portability: You can request a digital copy of your data in a structured, commonly used format.
• The Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time.

To exercise your rights, please contact us using the contact details provided on our website. We may require ID verification to process requests. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local Data Protection Authority if you believe your rights have been infringed.

How We Protect Your Personal Data

Flower Delivery Dagenham implements reasonable technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our measures include secure servers, encryption where appropriate, restricted access to information, and up-to-date cybersecurity practices. Only authorised staff and designated processors have access to your personal data as necessary to fulfil orders or our business obligations.

Policy Updates and Contact Information

We may periodically update this Privacy Policy to reflect changes in our services, data processing activities, or legal requirements. Any substantial changes will be posted on our website. Your continued use of our services indicates acceptance of the updated Policy.

For further information about this Privacy Policy or our personal data practices, please refer to the contact section on our website. We are committed to addressing any concerns or questions you may have regarding your data privacy.