Flower Delivery Balham – Privacy Policy Overview

Introduction to Our Privacy Commitments

At Flower Delivery Balham, we prioritise the privacy and security of our customers' personal data. This Privacy Policy explains how and why we collect, store, use, and share your personal information whenever you place an order with us in Balham and the surrounding districts. Our policy is designed to be fully compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the UK.

Scope of This Privacy Policy

This policy applies to all individuals who place a flower delivery order with Flower Delivery Balham, whether online, over the phone, or in person. It covers our practices as they relate to customers residing in or placing orders for delivery within Balham and its surrounding districts.

What Data We Collect

During the process of arranging and delivering your flower orders, we may collect and process the following types of personal information:

• Contact details: such as your full name, delivery address, billing address, and telephone number.
• Order details: including items purchased, delivery preferences, and special instructions.
• Recipient information: name, delivery address, and contact (if other than the customer).
• Payment details: such as credit or debit card information (these are processed securely by our payment processors and are not stored by us).
• Correspondence: communications with our team in relation to your order, inquiries, or customer service requests.
• Technical data: including IP address, browser type, device information, and usage data collected via our website for analytics and operational purposes.

Lawful Basis for Processing

We process your personal data under the following lawful bases, as required by GDPR:

• Contractual necessity: To fulfil our contract with you by processing, confirming, and delivering your order.
• Legitimate interests: For communicating with you about your order, improving our services, and protecting our business from fraud or misuse.
• Legal obligations: To comply with legal requirements such as tax and accounting regulations.
• Consent: Where you have provided explicit consent, such as opting in to receive marketing communications. You may withdraw this consent at any time.

Data Retention: How Long We Keep Your Data

Your personal data is retained only for as long as is necessary for the purposes for which it was collected, including fulfilling your order, addressing any queries or issues, meeting legal and tax obligations, and ensuring effective business operations. Typically, we retain personal and order-related information for up to seven years in line with accounting and tax policy, unless a longer retention period is required or permitted by law or regulation. After this period, your data will be securely deleted or anonymised.

Data Processors and Third Parties

To deliver our services efficiently, we may share your information with selected third-party service providers, known as data processors. These include:

• Payment processors: for secure transaction handling and fraud prevention. Your payment information is not stored on our systems.
• Delivery partners and couriers: in order to fulfil the delivery of your floral arrangements.
• IT service providers: who support our website, communications, and data storage functions.
• Accountants or legal advisors: where required to comply with regulatory obligations.

All data processors act only on our instructions, are subject to strict contractual obligations, and implement appropriate security measures to keep your information safe. We do not sell or rent your data to third parties for marketing purposes.

Your Rights Under GDPR

As a customer, you have the following rights concerning your personal data:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your personal data where there is no legal or contractual reason for retention.
• Restriction: Request suspension of processing your personal data in certain circumstances.
• Objection: Object to the processing of your personal data, particularly for direct marketing.
• Portability: Request transfer of your personal information to you or a third party in a structured, commonly used format.
• Withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect any processing carried out prior to your withdrawal.
• Lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.

Data Security

We have rigorous physical, electronic, and managerial safeguards in place designed to protect your data against accidental loss, unauthorised access or disclosure, and unlawful processing. Access to your data is limited to staff and processors who have a legitimate need to know it for the purposes described in this policy.

International Data Transfers

Your personal information is primarily stored and processed within the UK. If we need to transfer data to service providers outside the United Kingdom, we ensure such transfers are made in compliance with data protection law and with appropriate safeguards in place.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We encourage you to review this policy periodically for the latest information on how we protect your personal data.

Contacting Us

If you have any questions regarding this privacy policy, your data rights, or wish to exercise any of your rights or raise a concern, please contact us by using the contact form on our website or by writing to our registered address. We will respond to your request as soon as reasonably possible and within the timeframes required by law.