Privacy Policy for Flower Delivery Knightsbridge

Introduction

This Privacy Policy outlines how Flower Delivery Knightsbridge collects, uses, stores, and protects your personal data when you place orders with us. Our commitment is to process your information in a secure and transparent manner, ensuring compliance with the UK General Data Protection Regulation (GDPR). This Policy applies to all customers placing flower delivery orders with Flower Delivery Knightsbridge from Knightsbridge and its surrounding districts.

What Personal Data We Collect

When you interact with Flower Delivery Knightsbridge, we may collect and process the following types of personal data:

• Identity Data: Name, title.
• Contact Data: Delivery address, billing address, phone number (if provided), and postal code.
• Order Information: Order history, delivery instruction details, recipient name, recipient address, and preferences relating to your order.
• Payment Data: Payment card information and billing details (handled securely via our payment processors).
• Technical Data: IP address, browser type and version, time zone setting, and operating system (collected via our website for security and analytics purposes).
• Communication Data: Correspondence with us (such as customer service communications and order confirmations).

Lawful Basis for Processing Your Data

We process your personal information based on one or more of the following lawful bases under GDPR:

• Contractual Necessity: When processing your data is necessary to fulfill your order and manage your account.
• Legal Obligation: When we must comply with legal obligations, such as maintaining records for tax purposes.
• Legitimate Interests: Where processing is required for our legitimate business interests, such as improving service quality and preventing fraud, provided these interests are not overridden by your rights.
• Consent: With your explicit consent, for instance, when you choose to receive marketing communications (note: consent can be withdrawn at any time).

How We Use Your Information

Your personal data may be used for the following specific purposes:

• Processing and delivering your flower orders effectively.
• Managing payments, fees, and charges securely.
• Communicating updates related to your order.
• Responding to customer service inquiries and requests for support.
• Complying with legal and regulatory requirements.
• Improving our services, website, and the overall customer experience.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, customer order information is retained for up to seven years in line with UK statutory requirements. At the end of the retention period, your data will either be securely deleted or anonymised.

Processors and Data Sharing

Your personal data may be shared with trusted third-party processors who assist us in providing goods and services. These may include:

• Payment processing providers for secure handling of card transactions.
• Delivery companies for fulfilling and tracking your flower orders.
• IT and system administration service providers.

We ensure all processors act in compliance with GDPR and process your data only according to our instructions, under confidentiality agreements. Your data will not be sold or shared with any unrelated third parties for marketing or any other purposes.

Where possible, your data is processed within the UK and European Economic Area (EEA). If there is a requirement to transfer your personal data outside of these regions, we ensure that appropriate safeguards are in place to protect your information to standards equivalent to those required by GDPR.

Your Rights under GDPR

Under the UK GDPR, you have a number of rights regarding your personal data. These include:

• Right of Access: You are entitled to request a copy of the personal data we hold about you and details of how we process it.
• Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data.
• Right to Restrict Processing: You can request a restriction on processing your data under specific conditions.
• Right to Data Portability: When applicable, you can ask us to transfer your data to another organisation or directly to you.
• Right to Object: You may object to the processing of your data on grounds relating to your specific situation, including for direct marketing purposes.
• Rights related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing, including profiling.

To exercise any of your rights, you may contact us using the details provided on our website or in your confirmation communications. For your security, we may require verification of your identity before fulfilling requests.

How We Protect Your Data

We implement a range of technical and organisational measures to ensure your personal data is safeguarded at all times. These include secure data storage facilities, regular security reviews, and restricted access to personal information on a need-to-know basis. All payment transactions are processed using encrypted connections. Our staff and selected partners are trained to handle your information securely and confidentially.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any significant changes will be communicated on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how we use your data, please get in touch using the contact page on our website. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data rights have been violated.