Flower Delivery Shepperton Privacy Policy

Scope of this Privacy Policy

This Privacy Policy sets out how Flower Delivery Shepperton collects, uses, stores, and protects your personal information. It applies to all customers placing orders for flower delivery from Flower Delivery Shepperton, including customers in Shepperton and the surrounding districts. Protecting your privacy and respecting your rights under applicable law, including the General Data Protection Regulation (GDPR), is important to us.

Personal Data We Collect

When you use Flower Delivery Shepperton services—via our website, by telephone, or in person—we may collect the following categories of personal data:

  • Contact Information: Name, address, telephone number, and (if provided) email address of the customer and recipient.
  • Order Details: Products ordered, delivery instructions, preferred date and times.
  • Payment Information: Details required to process your payment. Please note that payment card details are processed securely by our payment processor and not stored by us.
  • Communication Records: Details of any inquiries, feedback, and communication between you and Flower Delivery Shepperton.
  • Website Usage Data: Information such as IP address, browser type, device identifiers, and usage analytics collected via cookies and similar technologies to help enhance your user experience.

Purposes and Lawful Bases for Processing Your Data

Flower Delivery Shepperton collects and uses your personal data only where the law allows us to. The lawful bases for processing your data under GDPR typically include the following:

  • Contractual Necessity: To process and deliver your order, communicate with you about your purchase, and provide related customer service.
  • Legal Obligation: To comply with applicable laws, including tax and accounting regulations.
  • Legitimate Interests: To improve our services, understand customer preferences, and ensure our website runs smoothly and securely (provided these interests do not override your rights and freedoms).
  • Consent: Where processing is based on consent (such as for direct marketing), you can withdraw your consent at any time.

How We Use Your Personal Data

Your data may be used for the following purposes:

  • Processing and delivering flower orders.
  • Updating you about the status of your order and delivery.
  • Handling customer service requests and communications.
  • Improving our website and services based on aggregated analytics.
  • Managing business accounting and compliance with the law.
  • Sending marketing communications, only if you have given your consent.

Personal Data Sharing and Processors

We only share your personal data when necessary and with trusted third-party service providers ("processors") who perform services on our behalf and in accordance with GDPR. These processors may include:

  • Payment Service Providers: To handle your online or card payments securely. Your payment card data is not stored by us.
  • Delivery Partners: To ensure your floral gift reaches the right recipient and address.
  • IT Service Providers: For hosting, supporting, and maintaining our website and order management systems.
  • Communication Platforms: To send order confirmations and necessary communications.

Contractual arrangements are in place with each processor to ensure they protect your data, process it only as instructed, and comply with GDPR at all times. We do not sell your personal data to third parties.

Data Retention Policy

We retain your personal details only for as long as necessary to fulfill the purposes for which the data was collected, including for satisfying any legal, accounting, or reporting requirements. Typically, data associated with orders is retained for up to six years to meet legal and business requirements.

After the retention period has expired, your data will be securely deleted or, if technically possible, anonymised so that you can no longer be identified.

Your Rights under GDPR

Under the GDPR, you have several important rights regarding the personal data we hold about you:

  • Right of Access: You can request a copy of your personal data held by us.
  • Right to Rectification: You may request that we correct or update inaccurate or incomplete data.
  • Right to Erasure: You can ask for your data to be deleted, subject to statutory retention requirements.
  • Right to Restrict Processing: In certain circumstances, you can ask us to suspend the processing of your data.
  • Right to Data Portability: You have the right to request that we provide a copy of your data in a structured, machine-readable format where applicable.
  • Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
  • Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time.
  • Right to Lodge a Complaint: You can lodge a complaint with a supervisory authority if you believe your rights have been breached.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. This includes restricting data access to authorised staff and service providers only, using secure technologies, implementing security training, and reviewing our data processes regularly.

International Data Transfers

Your data is primarily stored and processed in the UK or European Economic Area (EEA). If we need to transfer your personal data outside these regions, it will only be done where adequate protections are in place in line with GDPR requirements.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law or our business practices. Please review this policy periodically for the latest information. If substantial changes occur, we will notify customers where required.

Contacting Flower Delivery Shepperton about Privacy

If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us directly through our usual business channels. We are committed to making sure your privacy is protected and your requests are addressed in a timely manner.