Privacy Policy for Flower Delivery Swiss Cottage Customers

Scope of this Privacy Policy

This Privacy Policy applies to all customers placing orders with Flower Delivery Swiss Cottage, whether for personal or business purposes, in Swiss Cottage and the surrounding districts. It explains how we collect, use, store, and keep your personal data secure, as well as your rights under the General Data Protection Regulation (GDPR).

What Personal Data We Collect

When you place an order with Flower Delivery Swiss Cottage, we collect the following categories of personal data to ensure efficient processing and delivery of your order:

• Identification Data: Your name, surname, and, if relevant, company name.
• Contact Information: Your address, phone number, and (where provided) email address.
• Delivery Information: Name, delivery address, and contact information for the recipient of your order.
• Order Details: Purchase history, specific instructions for delivery, order preferences, special messages, and payment amount.
• Payment Data: We collect payment information such as card details, though this is processed securely by our payment processors and not stored by us.
• Website Usage Data: Technical data including your IP address, browser type, device information, and cookies, collected when you use our website for analytics and security purposes.

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by the GDPR:

• Performance of a Contract: Processing your information is necessary to fulfil your order, deliver products, handle complaints, and provide customer service.
• Legal Obligations: Certain data may be processed and retained to comply with tax, accounting, or regulatory requirements.
• Legitimate Interests: We may process data to improve our services, monitor website security, prevent fraud, or handle business operations, provided these do not override your privacy rights.
• Consent: For marketing communications, we will obtain your explicit consent before sending you any promotional emails or newsletters. You may withdraw your consent at any time.

How Your Data is Used

Your information is used strictly for the following purposes:

• Processing and fulfilling your floral order, including confirming payment and arranging delivery.
• Contacting you regarding your order or responding to your queries.
• Managing accounts and providing aftercare.
• Complying with legal and regulatory obligations.
• Improving our website and the quality of service through aggregated, anonymised analytics.
• Sending service-related communications and, where applicable, marketing materials if you have given consent.

Data Retention

Personal data is retained only as long as necessary for the fulfillment of your order and for legal compliance. Typically, we retain order information and related correspondence for up to seven years, in line with tax and accounting obligations. After this period, data is securely deleted or anonymised. For website analytics data or feedback, we keep the information only as long as necessary to meet the stated purpose, after which it is deleted or anonymised.

Third Party Processors

To provide our services efficiently, Flower Delivery Swiss Cottage uses reputable third party service providers for:

• Payment Processing: Handling payments securely through PCI-compliant processors.
• Website Hosting and IT Services: Ensuring the safety and reliability of our online platform.
• Delivery Partners: Coordinating the successful and timely delivery of your order, which may require sharing the recipient’s contact details with local courier services in the Swiss Cottage area.
• Analytics Providers: Monitoring site traffic and usage trends (using aggregated and anonymised data where possible).

These processors act only on our instructions, process your data securely, and are bound by data protection obligations consistent with the GDPR.

Security of Your Personal Data

We have implemented appropriate organisational and technical measures to safeguard your personal data from loss, unauthorised access, alteration, misuse, or disclosure. These measures include encrypted processing of payment information, secure servers, restricted data access for staff, and regular staff training on privacy and data security.

Your Rights Under the GDPR

As a customer in Swiss Cottage or surrounding areas, you have the following rights regarding your personal information:

• Right of Access: Request a copy of your personal data that we hold.
• Right to Rectification: Ask us to update or correct inaccurate data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Ask us to limit processing of your data in certain circumstances.
• Right to Data Portability: Obtain your personal data in a commonly used, machine-readable format for transfer to another service provider where applicable.
• Right to Object: Object to processing of your personal data where we rely on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: At any time, if consent was required for specific processing (such as marketing).
• Right to Lodge a Complaint: You may lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been handled improperly.

Policy Updates

We may review and update this Privacy Policy periodically to reflect changes in law, data practices, or our business operations. When changes are made, we will note the updated date at the end of this Policy. We recommend you revisit this page from time to time to stay informed about how we use your information.

Contact and Queries

If you have questions about this Privacy Policy, how your data is handled, or wish to exercise any of your GDPR rights, please contact us using the contact form on our website or by post at our registered business address in Swiss Cottage. We aim to respond to all enquiries promptly and in accordance with GDPR requirements.

Last updated: June 2024