Flower Delivery Teddington Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Teddington manages and processes your personal data when you place an order for flower delivery in Teddington and nearby districts. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable UK data protection laws. The policy outlines the information we collect, the legal basis for processing, how long your data is retained, who processes your data, and your rights as a customer.

Scope of Policy

This Privacy Policy applies to all individuals who place orders with Flower Delivery Teddington for delivery within Teddington and its surrounding areas. By placing an order or interacting with our service, you acknowledge and agree to the terms outlined below.

What Data We Collect

When you place an order with Flower Delivery Teddington, we collect and process the following types of personal data:

  • Contact Information: Name, delivery address, billing address, and contact preferences.
  • Order Details: Information regarding your order, including flower selection, delivery dates, and messages attached to the order.
  • Payment Information: Transaction details provided for payment processing, such as partial card details (processed securely by payment processors).
  • Communication Data: Details of communications you have with us, such as interactions made through our website or customer service channels.
  • Technical Information: IP address, device type, browser type, and information obtained via cookies when you visit our website.

Lawful Basis for Processing Data

We process your personal data under the following lawful bases as provided by Article 6 of the GDPR:

  • Contractual Necessity: Processing your data is essential for entering into and fulfilling our contract with you, such as taking, processing, and delivering your order.
  • Legal Obligation: We must retain some data to comply with accounting, tax, and legal requirements.
  • Legitimate Interests: We process certain data to improve and secure our services, communicate with you regarding your order, or carry out internal analysis and reporting, provided this does not override your privacy rights.
  • Consent: Where required, for example for direct marketing or optional cookies, we will seek your explicit consent before processing your data for these purposes.

How We Use Your Information

Your personal data is used to:

  • Process flower delivery orders and payments
  • Verify your identity and address
  • Contact you regarding your order when necessary
  • Respond to your queries or requests
  • Improve our customer services and website functionality
  • Comply with legal and regulatory requirements
  • Send direct marketing communications (only with your consent)

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Typically, your order information and contact details are retained for up to six years after your order to comply with statutory and accounting obligations. After this retention period, data is securely deleted or anonymised.

Data retained for marketing purposes will be held until you withdraw your consent or request deletion.

Data Processors and Third Parties

To provide our services effectively, we may share your information with trusted third parties, known as data processors. These include:

  • Payment Service Providers: For secure payment processing. Your full card details are not stored by us, but by our PCI-compliant payment partners.
  • Courier/Delivery Services: To ensure your order is delivered as requested.
  • IT Support Providers: Who maintain our website and IT systems.
  • Marketing Platforms: Used only with your consent for sending promotional communications.

We ensure our data processors are GDPR-compliant, operate under contractual agreements, and do not use your data for purposes other than those specified by Flower Delivery Teddington. We do not sell your personal data to any third parties.

International Data Transfers

Your data is primarily processed within the UK. Should it be necessary to transfer data internationally (for example, for website hosting or IT services), we ensure it is safeguarded by appropriate contractual, legal, and technical measures as required under GDPR.

Protecting Your Data

We take the security of your personal information seriously. Our website uses secure protocols, and we implement physical, technical, and organisational measures to protect your data against loss, theft, unauthorised access, and disclosure.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Have your information corrected if it is inaccurate or incomplete.
  • Right to Erasure: Request deletion of your personal data when it is no longer necessary or if you withdraw consent (subject to legal obligations for retention).
  • Right to Restriction: Ask us to restrict processing of your data in certain circumstances.
  • Right to Data Portability: Receive personal data you have provided to us in a structured, commonly used format and, where feasible, to have it transmitted to another controller.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
  • Right to Lodge a Complaint: If you believe your data protection rights have been breached, you can lodge a complaint with the Information Commissioner’s Office (ICO) or your local data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on our website, and where appropriate, notified to you. Please review this page regularly to stay informed on how we protect and use your data.

Contact and Further Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us via our website contact form or customer service channels. We take your privacy seriously and are committed to addressing your concerns in a timely manner.