Privacy Policy - Flower Delivery Isleworth

Name: WAIKIKI SUNSET
Brand: Flower Delivery Isleworth
Price: 69.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Flower Delivery Isleworth ("we", "us", or "our") collects, uses, shares, and protects your personal data. It applies to all customers who place flower delivery orders with Flower Delivery Isleworth from Isleworth and surrounding districts. Our commitment is to process your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

What Personal Data We Collect

When you place an order with Flower Delivery Isleworth, we collect and process certain categories of personal data. The types of data we may collect include:

Contact Information: Your name, delivery address, billing address, and telephone number.
Order Details: Details about the flowers or products you purchase, delivery instructions, and gift messages.
Recipient Information: Name, address, and contact number of the intended recipient.
Payment Information: Payment card details or transaction details (processed securely by our payment processor).
Communication Data: Records of communications with our customer service team, including feedback, queries, and complaints.
Technical Data: IP address, browser type, device information, and usage statistics collected through cookies for website security and analytics.

We only collect the information necessary to process your order and to ensure high standards of customer service.

Lawful Basis for Processing Your Data

Under the GDPR, we are required to identify a lawful basis for collecting and processing your personal data. We rely on the following bases:

Contractual Necessity: Processing your data is necessary to fulfill your flower delivery order, respond to your requests, or provide customer service.
Legal Obligation: We may need to process certain data to comply with legal and tax obligations, such as record-keeping and fraud prevention.
Legitimate Interests: We have a legitimate interest in maintaining accurate customer records, improving our services, and ensuring website security. These interests do not override your rights and freedoms.
Consent: Where required, we may ask for your explicit consent, for example, to send you marketing communications. You can withdraw your consent at any time.

How We Use Your Data

We process your personal data for the following purposes:

To process and deliver your flower orders efficiently.
To communicate order status, delivery updates, or any issues related to your purchase.
To handle customer service interactions, including queries, feedback, and complaints.
To improve our products, services, and customer experiences.
To comply with applicable laws and regulatory obligations.
For internal business management, such as auditing and record-keeping.
For website maintenance and security.

Data Retention

We retain your personal data only for as long as necessary to achieve the purposes outlined in this Privacy Policy and to comply with legal, accounting, or reporting obligations. The retention periods depend on the nature of the data and the processing purpose, including factors such as:

Order Records: Retained for up to 6 years to comply with tax and accounting requirements.
Communication Records: Retained for a maximum of 24 months after resolution of your query or complaint.
Marketing Data: Retained for as long as you consent to receive such communications or until you withdraw consent.

After these periods, your data will be securely deleted or anonymised.

Data Processors and Third Parties

We engage certain third-party service providers who process personal data on our behalf. These may include:

Payment processors (to handle secure payment transactions).
IT and website hosting providers.
Delivery partners (for the physical delivery of your orders).
Customer service support platforms.

All third-party processors are bound by contractual obligations to keep your data confidential and use it only for the specified purposes. We do not sell your personal data to any third parties. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses.

Your Rights Under GDPR

As a resident of the United Kingdom or the European Union, you have specific rights regarding your personal data. These include:

Right to Access: You can request confirmation of whether we hold your personal data and request a copy of the data.
Right to Rectification: You may ask us to correct any inaccurate or incomplete data about you.
Right to Erasure: You can request deletion of your personal data in circumstances permitted by law.
Right to Restriction: You can ask us to restrict processing of your information under certain conditions.
Right to Data Portability: You can request that we transfer your data to you or another organization in a structured, machine-readable format, where applicable.
Right to Object: You may object to our processing of your data where we rely on legitimate interests, especially regarding direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw that consent at any time.
Right to Lodge a Complaint: If you are unhappy with how we handle your data, you have the right to contact your local data protection authority.

To exercise your rights, please contact us through the methods specified on our website. We may require proof of identity before fulfilling certain requests.

Data Security

We take the protection of your personal data seriously and implement appropriate technical and organizational measures to safeguard against unauthorized access, loss, destruction, or alteration. Our measures include encryption, access controls, regular security assessments, and staff training on data protection obligations.

Policy Updates

We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or for other operational reasons. Any significant changes will be posted on our website with an updated revision date. We encourage you to review this policy regularly to stay informed of how we protect your information.

Contact and Further Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please refer to the contact options provided on our website. We are committed to responding to queries and resolving any concerns regarding your privacy and data protection rights.