Flower Delivery Westminster Privacy Policy

Scope of This Privacy Policy

This Privacy Policy explains how Flower Delivery Westminster collects, processes, stores, and protects your personal information. This policy applies to all customers placing Flower Delivery Westminster orders from Westminster and surrounding districts. We are committed to upholding your privacy rights in accordance with the General Data Protection Regulation (GDPR).

Personal Data We Collect

When you place an order with Flower Delivery Westminster, we may collect the following types of personal data:

• Identity Data: Your full name and, in some cases, the name of your recipient.
• Contact Data: Delivery address, billing address, and other location information.
• Communication Data: Telephone number (if provided), and correspondence details for customer support.
• Order Data: Order history, specific product choices, instructions related to your order, and delivery preferences.
• Payment Data: Limited payment information; we do not store full card numbers but may process payment status or transaction references via third-party payment processors.
• Technical Data: IP address, device identifiers, browser type, and interaction data with our platform (where applicable).

Lawful Basis for Processing Data

Under Article 6 of the GDPR, there are several lawful bases on which we process your personal data. These include:

• Contractual Necessity: Processing your data is necessary for us to administer and deliver your flower order, including communication and delivery arrangements.
• Legal Compliance: We may process personal data to comply with legal obligations, such as tax or accounting regulations.
• Legitimate Interests: Where processing is required to enhance our services, protect against fraud, or improve customer experience, provided such interests are not overridden by your rights.
• Consent: For certain marketing communications or use of cookies, we rely on your clear and specific consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is processed for the following purposes:

• To manage the ordering and delivery of your purchases.
• To communicate order confirmations, delivery notifications, and respond to enquiries.
• To improve and monitor the performance of our delivery service.
• To satisfy legal, accounting, and regulatory obligations.
• If expressly permitted, to send marketing updates or offers relevant to Flower Delivery Westminster.

How We Store and Protect Your Data

We implement technical and organisational security measures to safeguard your personal data against unauthorized access, loss, or misuse. Data is stored on secure platforms, with restricted access granted only to personnel or authorized processors who require it for business purposes. We regularly review and enhance our data security procedures.

Data Retention

Your personal data is retained only as long as necessary for the purposes outlined in this policy, or as required to comply with legal or contractual obligations. In most cases, we retain purchase and transaction data for up to seven years to comply with accounting and tax regulations. Non-essential data, such as correspondence or marketing consents, is held only for as long as necessary and securely deleted when no longer needed.

Data Processors and Third Parties

To fulfill our services, we may share your personal data with selected data processors or third-party service providers, including:

• Payment Processors: For handling electronic transaction processing securely and efficiently.
• Delivery Partners: Couriers and logistics providers may receive contact and delivery details to effect safe and timely delivery.
• IT and Cloud Providers: For data hosting, platform maintenance, and secure storage.

All third-party processors act under our instructions and are contractually bound to maintain GDPR-compliant privacy and security standards. We do not sell or otherwise share your data with third parties for unrelated marketing purposes.

Your GDPR Rights

As a data subject, you have the following privacy rights under the GDPR:

• Right to Access: Request a copy of your personal data held by us.
• Right to Rectification: Request that we correct any incomplete or inaccurate data about you.
• Right to Erasure: Request your data be deleted, provided there are no overriding legal reasons for its continued processing.
• Right to Restriction: Request the restriction of processing under certain conditions.
• Right to Data Portability: Obtain and reuse your data across different services in a commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or to direct marketing.
• Right to Withdraw Consent: Where consent is our lawful basis, you may withdraw it at any time without affecting prior processing.

To exercise your rights or for questions regarding this policy, please contact us through the means provided on our website. We respond promptly to all legitimate requests and are committed to transparency and support concerning your data.

International Transfers

Your data is generally processed within the United Kingdom or European Economic Area (EEA). Should data be transferred outside of these jurisdictions, we ensure that adequate safeguards are in place as required by GDPR, such as standard contractual clauses or other legally recognized data transfer mechanisms.

Changes to Our Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. Please check this policy periodically to stay informed about how we are protecting your information.

Contact and Queries

If you have questions or concerns regarding this Privacy Policy or your personal data, you can reach out to us using the contact methods outlined on our website. We are committed to resolving your queries promptly and ensuring your privacy rights are upheld.