Flower Delivery Berkhamsted Privacy Policy

Introduction

At Flower Delivery Berkhamsted, we are fully committed to protecting your personal data and maintaining your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information in accordance with the General Data Protection Regulation (GDPR) and related UK and EU data privacy laws. This document applies to all customers placing orders with Flower Delivery Berkhamsted for deliveries made in Berkhamsted and its surrounding districts.

What Data We Collect

To provide a seamless flower ordering and delivery service, Flower Delivery Berkhamsted collects the following categories of personal data from our customers:

• Contact Information: Your name, delivery address, billing address, and contact details (phone number and/or postal address).
• Order Details: Information about your floral purchases, delivery instructions, recipient details, and special requests.
• Payment Information: Payment card details or payment transaction records when you make a purchase.
• Account Data: If you create an account, we collect your login details and order history.
• Communication Data: Correspondence you may have with us regarding your orders or general enquiries.
• Technical Data: IP address, browser type, device identifiers, and information about your interactions with our website (such as pages viewed and dates/times of visits).

We do not intentionally collect or process sensitive personal data (such as health, ethnicity, or biometric data) as part of our service.

Lawful Basis for Processing

We process your personal data only as permitted under the GDPR. Our primary lawful bases include:

• Contractual Necessity: To process and fulfil your flower order, deliver your items, handle payments, and provide related customer services.
• Legitimate Interests: For our internal record-keeping, customer support, fraud prevention, and to improve our services, provided these interests do not override your rights.
• Legal Obligations: To comply with applicable laws, such as local tax requirements.
  
• Consent: Where required, and in limited circumstances (such as for optional email marketing, if applicable), we will request your explicit consent for data processing.

How We Use Your Data

Your personal data enables us to fulfil and deliver your orders, process payments, respond to your queries, keep internal records, and notify you of important service or policy updates. We may also use data, where permitted, for analytical and business improvement purposes to better serve our customers across Berkhamsted and nearby districts.

Data Retention

Flower Delivery Berkhamsted retains personal information only for as long as necessary to fulfill the purposes described in this policy, including meeting legal, accounting, or regulatory requirements. In most cases, your personal data related to orders will be retained for a maximum of six years after your last interaction with our service, unless law requires a longer retention period. Technical and analytical data may be kept for shorter periods, as required for business analytics and to ensure our website’s performance and security.

Data Processors and Third Parties

In order to provide our services, we may share or process your data using trusted third-party processors who act on our behalf, including but not limited to:

• Payment Processors: Securely process card and electronic payments.
• Delivery Partners: Handle the logistics of delivering flowers to the correct recipient and address.
• IT and Hosting Providers: Provide hosting, storage, maintenance, and information technology services that support our website and business operations.
• Customer Support Tools: Enable effective communication with our team for service requests and support.

These service providers are only granted access to your personal data as necessary and under contractual obligations to keep your information confidential and secure. We do not sell your personal data to third parties under any circumstance.

Your Rights Under GDPR

You have clear rights regarding your personal information as provided under the GDPR, including the following:

• Right to Access: You may request confirmation and a copy of personal data we hold about you.
• Right to Rectification: You are entitled to request correction of inaccurate or incomplete information.
• Right to Erasure: You may request we delete your data where it is no longer necessary, unless prevented by a legal obligation.
• Right to Restrict Processing: You can request we suspend processing of your data in certain circumstances.
• Right to Data Portability: You may obtain and reuse your personal data for your own purposes across different services.
• Right to Object: You may object to processing that is based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time (this does not affect processing conducted before withdrawal).

To exercise any of these rights, please contact us through your preferred communication method. We will respond to your request within one month, as required by law.

Data Security

We take security very seriously. Appropriate technical and organisational measures are used to safeguard your data from accidental loss, theft, or unauthorised access. This includes the use of secure servers, encrypted payment processing, regular staff training, and restricted access to personal data.

International Data Transfers

Your data is predominantly stored and processed within the UK or European Economic Area (EEA). Should we need to transfer your data outside the UK or EEA, such transfers are made in compliance with data protection laws, ensuring adequate protection is in place through appropriate safeguards.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices, legal obligations, or services. We will inform you of substantive changes where required, and the latest version will always be available through our website or on request.

Contact and Further Information

If you have questions about this Privacy Policy or need more information about how your data is handled by Flower Delivery Berkhamsted, please contact us using your preferred method. We will do our utmost to address your concerns promptly and transparently.