Flower Delivery Ardleigh Green Privacy Policy

Introduction

This Privacy Policy outlines how Flower Delivery Ardleigh Green ('we', 'our', or 'us') collects, stores, uses, and protects your personal data during the ordering, processing, and delivery of flower arrangements throughout Ardleigh Green and the neighbouring districts. We are committed to safeguarding your privacy and treating your data in accordance with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws.

Who This Policy Applies To

This policy applies to every customer who places an order for flower delivery through Flower Delivery Ardleigh Green, whether directly or via our associated agents, websites, or in person. If you are a recipient of flowers or have your data supplied by another individual (e.g., as the recipient of a gift), your data will be handled as described within this policy.

Personal Data We Collect

When you place an order or interact with Flower Delivery Ardleigh Green, we may collect the following information:

  • Identification and Contact Data: Name, delivery address, billing address, phone number, and occasionally, email address.
  • Order and Transaction Data: Order details, notes or messages for recipients, payment confirmation (but not your card details), and delivery records.
  • Recipient Data: Name and delivery address of the intended recipient. Where required, a contact phone number for delivery purposes.
  • Communications: Any correspondence (in writing or otherwise) relating to your order, queries, or complaints.
  • Technical Data: Device type, cookies, and purchase browsing activity on our website where relevant.

Lawful Basis for Processing

We only process your personal data when we have a lawful basis under GDPR. These include:

  • Contractual necessity: To process and fulfil your orders, manage delivery, and handle payment.
  • Legal obligations: To retain transaction data for accounting or tax purposes, and comply with record-keeping laws.
  • Legitimate interests: For reviewing order history, enhancing our services, and handling customer complaints or queries. We ensure our interests do not override your fundamental rights.
  • Consent: Where you choose to sign up for marketing updates or provide feedback. Consent can be withdrawn at any time.

How We Use Your Personal Data

We use your personal data to:

  • Process, confirm, and deliver your flower orders to the specified recipient and location.
  • Communicate with you about your order status, issues, or delivery clarifications.
  • Ensure the safe delivery of products, accommodate delivery preferences, or handle changes to the order.
  • Comply with accounting, tax, or legal obligations.
  • Resolve complaints, manage customer feedback, and improve our service quality.
  • Where agreed, send you promotional offers or updates about our services.

Data Sharing and Processors

We do not sell your data to third parties. Your data may be shared with:

  • Internal staff or delivery partners to ensure successful order completion.
  • Payment processing service providers, solely for verification and payment handling (we do not store your card details).
  • Technology and systems support providers (e.g., website or cloud hosting companies) assisting our business operations and data storage in the UK or EEA.
  • Professional advisers, accounting, or legal consultants where the law requires.

All third parties are legally bound to comply with data protection regulations and security requirements. Data will never be used by any processor for their own independent purposes.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined above, or where specific legal or tax obligations require longer retention. Typically:

  • Order details and associated personal information: retained for a maximum of 7 years in line with UK accounting standards.
  • Marketing information: retained until you withdraw consent or unsubscribe.
  • Complaint records: retained for up to 6 years to comply with statutory limitation periods.

All personal data is securely stored, and access is strictly limited.

Your Rights Under GDPR

You have a number of key rights regarding your personal information, including:

  • Right to Access: You can request a copy of the data we hold about you at any time.
  • Right to Rectification: If any of your information is incorrect or incomplete, you can ask us to update it.
  • Right to Erasure: In certain circumstances, you can request the deletion of your data from our systems.
  • Right to Restrict Processing: You may ask us to pause the use of your information if you believe it is incorrect or being used unlawfully.
  • Right to Object: You may object to the processing of your data on grounds relating to your particular situation, and you have the absolute right to object to direct marketing.
  • Right to Data Portability: Where processing is carried out automatically and based on consent or contract, you can request your data in a commonly used electronic format.

To exercise your rights, or if you have questions about how your data is handled, please contact us using our website’s contact form or by writing to our designated postal address.

Data Security

We use physical, technical, and organisational safeguards to keep your data secure. These include secure servers, encryption where applicable, strict access controls, and regular staff training. If a personal data breach is likely to result in a risk to your rights or freedoms, we will inform you as soon as possible and report to the relevant supervisory authority where required by law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our processes, legal requirements, or for other operational reasons. The updated policy will always be published on our website. We encourage you to review this page regularly to stay informed of how we handle your data.

Contacting Us

For any questions, concerns, or requests relating to your personal data, please use the contact form on our website or write to us at our listed postal address. We are committed to responding to your enquiry promptly and in line with GDPR obligations.