Privacy Notice for Customers of Flower Delivery Leytonstone

Introduction

This Privacy Policy explains how Flower Delivery Leytonstone collects, uses, and secures personal data from customers placing flower delivery orders in Leytonstone and the surrounding districts. We are committed to handling your personal data with transparency and in full compliance with the UK General Data Protection Regulation (GDPR).

Scope and Applicability

This Privacy Policy applies to all individuals who place or receive flower delivery orders through Flower Delivery Leytonstone. It covers orders made via our website, over the phone, or in person, and applies to customers located in Leytonstone and neighbouring districts served by our business.

What Personal Data We Collect

We collect a range of personal data in order to complete your order and provide an excellent service. The types of data we may collect include:

• Identity Data: Your name, the recipient’s name, and, where provided, the relationship between sender and recipient.
• Contact Details: Address, postcode, and telephone number for both sender and recipient, when relevant.
• Order and Transaction Data: Details of the products ordered, delivery date and time, special delivery instructions, payment method (note: we do not store full card details), and transaction history.
• Correspondence Data: Written or electronic communications (such as messages attached to orders or feedback submitted).
• Usage Data: Information regarding how you interact with our website and ordering system, such as IP address, device type, browser version, and cookie identifiers.

Lawful Basis for Processing Personal Data

We process your personal data based on the following lawful grounds under GDPR:

• Performance of Contract: Most of the data we collect is necessary to fulfil our contract with you—specifically, to process, pay for, deliver, and manage your flower order.
• Legal Obligation: We may need to retain certain order and transaction data to comply with tax, accounting, and regulatory requirements.
• Legitimate Interests: Where appropriate, we may process data to enhance our service, prevent fraud, or respond to feedback in a way that does not override your rights.
• Consent: Where you specifically agree (for example, to receive marketing materials), we rely on your consent, which you can withdraw at any time.

How We Use Your Data

Your data is used for the following purposes:

• Processing and fulfilling your flower order
• Contacting you about your order or delivery
• Managing payment and fraud prevention
• Complying with legal and financial obligations
• Improving our services and customer support
• Sending marketing communications if you have opted in (which you may opt out of at any time)

Retention of Your Data

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, data related to a flower order (identity, contact, and transaction data) is retained for up to seven years to comply with accounting and tax laws. Correspondence or feedback you provide may be stored for up to two years. After these periods, data is securely deleted or anonymised.

Processors and Data Sharing

To fulfil your orders and run our business operations, we may securely share your data with the following categories of third parties ("processors"):

• Payment processors for securely handling your transactions
• IT service providers for hosting and maintaining our website and databases
• Delivery partners or couriers involved in transporting your flowers
• Professional service providers such as accountants or consultants, where necessary for our business compliance

All processors are contractually obliged under GDPR to protect your data, act only on our instructions, and assist us in maintaining the privacy and security of your information. Your data is not sold, rented, or shared with external entities for their marketing purposes.

Your Rights under GDPR

As a customer, you have the following rights regarding your personal data:

• Right to Access: Request confirmation as to whether your data is held and access to a copy of that data.
• Right to Rectification: Ask for incorrect or incomplete data to be corrected or updated.
• Right to Erasure: Request deletion of personal data that is no longer necessary, unless we are required to retain it by law.
• Right to Restrict Processing: Ask us to restrict the use of your data in certain circumstances.
• Right to Data Portability: Obtain a copy of your data in a commonly used, machine-readable format or request us to transmit it to another provider.
• Right to Object: Object to certain processing activities, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to Complain: If you believe your data protection rights have been breached, you have the right to contact the Information Commissioner’s Office (ICO).

We will respond to your requests in accordance with GDPR timeframes. Some rights may be subject to legal or contractual exceptions.

Data Security Measures

We implement appropriate technical and organisational measures to safeguard your data from unauthorised access, alteration, disclosure, or destruction. These include secure servers, data encryption in transit, access controls, and regular review of our security procedures.

Policy Updates

We may update this Privacy Policy in response to changes in the law or our business practices. When significant changes are made, we will communicate these updates to customers as appropriate. The current version of the policy will always be accessible to customers placing orders with Flower Delivery Leytonstone.

Contacting Us

If you have any questions or wish to exercise your privacy rights, please reach out to our team via our official contact channels. We take your privacy seriously and will handle your request promptly and in accordance with applicable law.