Understanding Your Privacy: Flower Delivery Keston’s Approach

Flower Delivery Keston Privacy Policy Overview

Introduction

This Privacy Policy explains how Flower Delivery Keston collects, uses, protects, and shares the personal data you provide when placing orders for flower delivery services in Keston and the surrounding districts. We are committed to safeguarding your privacy in line with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Who This Policy Applies To

This policy applies to all customers who use Flower Delivery Keston’s services, whether placing an order online, by phone, or through other accepted channels, for deliveries within Keston and neighboring areas.

What Data We Collect

When you place an order with Flower Delivery Keston, we may collect the following categories of personal data:

Contact Information: Your name, phone number, and postal address.
Order Details: Information about the products you order, any delivery instructions, and gift messages.
Recipient Information: Name, address, and contact information of the person receiving the delivery.
Payment Information: Card details and billing address (processed only by approved payment processors; no card details are retained by Flower Delivery Keston).
Communication Records: Records of your interactions with us, such as order confirmation communications or customer service queries.
Technical Data: For those ordering online, we may collect IP addresses, browser type, and cookie data for purposes of website functionality and security.

Lawful Basis for Processing Personal Data

Flower Delivery Keston processes your personal data under the following lawful bases as required by Article 6 of the GDPR:

Contractual necessity: We collect and process your data to fulfill our contract with you when you place an order, including processing payment and arranging delivery.
Legitimate interests: We may process data to improve our services, manage customer relationships, and ensure the security of our systems, provided these interests are not overridden by your fundamental rights.
Legal obligation: In certain situations, we may be required to process data for compliance with legal and regulatory obligations, such as accounting or tax law.
Consent: Where required, we will seek your explicit consent, such as for marketing or promotional communications; you may withdraw such consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

To process and deliver your flower orders accurately and efficiently.
To communicate essential information about your order, including confirmations, updates, and delivery notifications.
To manage customer support queries and resolve any issues related to your order or our services.
To maintain internal records in compliance with legal requirements.
To improve our products and services based on feedback and usage patterns.
To prevent and detect fraud or misuse of our services.

Data Retention

Your personal data is retained only for as long as necessary for the purposes described above:

Order Records: Details pertaining to orders are typically retained for up to seven years to comply with accounting and legal requirements.
Communication Data: Customer support communications are kept as long as needed to resolve queries and maintain service records, usually up to two years.
Marketing Preferences: Where consent has been given for marketing, this will be reviewed every two years or until you withdraw your consent.

Once data is no longer necessary, it is securely deleted or anonymised.

Third-Party Data Processors

We may share your personal data with trusted third parties who perform services on our behalf. These processors act under our instructions and are contractually bound to comply with data protection laws:

Payment Processors: Secure payment gateways process your payment details; we do not store your card data.
Delivery Partners: Our selected couriers use recipient and delivery address data solely for delivering your order.
IT and Website Service Providers: Data may be processed by companies providing website hosting, cloud storage, and IT security services.
Professional Advisors: Accountants, legal advisors, or consultants may access necessary data for regulatory or advisory purposes.

We do not sell, rent, or trade your personal data. If required by law, data may be shared with law enforcement or regulatory bodies.

Your Rights Under GDPR

In accordance with GDPR, you have the following rights concerning your personal data:

The right to be informed: You have the right to clear information about what data we collect, how it is used, and under what lawful basis.
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: If your data is inaccurate or incomplete, you can ask us to correct it.
Right to erasure: Under certain circumstances, you can request the deletion of your data (‘right to be forgotten’).
Right to restrict processing: You may ask us to restrict the processing of your data in certain situations.
Right to object: You may object to data processing based on legitimate interests or for direct marketing purposes.
Right to data portability: If applicable, you can request that your data be transferred to another organisation.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the legality of processing before consent was withdrawn.

Security of Your Data

We employ appropriate technical and organisational measures to safeguard your personal data against loss, theft, and unauthorised access. These measures include encryption, secure storage solutions, access controls, and staff training on data protection principles.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated via an update notice on our website. Please review this policy regularly to remain informed about how your information is protected.

Contact and Further Information

If you have any questions regarding this Privacy Policy or how your personal data is processed by Flower Delivery Keston, please refer to the contact section of our website for details of how to get in touch.