GDPR-Compliant Privacy Policy for Flower Delivery Farnborough

Privacy Policy Statement

This Privacy Policy explains how Flower Delivery Farnborough collects, uses, stores, and protects the personal data of all customers placing flower orders from Farnborough and the surrounding districts. We are committed to maintaining the privacy and security of your personal data and ensuring our practices comply with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Personal Data We Collect

When you place an order or interact with us, we may collect the following types of personal data:

  • Identity Data: Name, delivery recipient’s name.
  • Contact Data: Address, delivery address, telephone number (if provided at checkout).
  • Order Information: Order details, delivery instructions, product preferences, messages for recipients.
  • Payment Data: Payment confirmation from our secure payment partners. We do not store or process your full payment card details ourselves.
  • Technical Data: IP address, device type, browser type, and browsing actions when you interact with our website.
  • Communication Data: Your queries, feedback, reviews, or complaints made through our website or other communication channels.

Lawful Bases for Processing

We process your personal data only when there is a lawful basis to do so according to Article 6 of the GDPR. Our main lawful bases are:

  • Performance of a Contract: To process and fulfil your flower delivery order, including communicating updates and providing customer service.
  • Legal Obligation: Where we are legally required to maintain records or share data with authorities in compliance with law.
  • Legitimate Interests: For purposes such as improving our services, preventing fraud, and ensuring network and information security, provided your rights do not override these interests.
  • Consent: For optional marketing communications, if you have clearly opted in. Consent can be withdrawn at any time.

How We Use Your Data

Your data is used for the following purposes:

  • To process, confirm, and deliver your flower orders in Farnborough and the surrounding areas.
  • To provide customer support and respond to your requests or enquiries.
  • To communicate essential information about your order status, such as confirmation and dispatch updates.
  • To process payments via secure third-party payment processors.
  • To improve our service, website functionality, and user experience.
  • To comply with legal and regulatory obligations.
  • With your consent, to send you exclusive offers or updates regarding our services.

Personal Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:

  • Order details, delivery, and billing data are retained for up to 6 years in line with HMRC and tax obligations.
  • Technical and browsing data is retained for a shorter period, usually up to 14 months, for analytics and troubleshooting.
  • Marketing data is kept until you withdraw your consent or unsubscribe, whichever occurs first.

After the expiry of the retention period, your personal data will be securely deleted or anonymised.

Our Data Processors

We may engage trusted third-party service providers (data processors) to perform certain business functions. These may include:

  • Payment processing providers (for securely handling payments).
  • IT hosting and maintenance providers (for secure website operation and data storage).
  • Order management systems and delivery partners (for organising and delivering your flowers).
  • Marketing and analytics services (for understanding website performance and service improvement, only with your consent for marketing).

All processors are carefully selected to ensure compliance with GDPR. They are contractually obligated to protect your data, use it only for specified purposes, and process it according to our instructions.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request erasure of your personal data in certain circumstances (also known as the "right to be forgotten").
  • Right to Restrict Processing: Request restriction of processing in specific cases.
  • Right to Data Portability: Request to receive your data in a structured, commonly used format and have it transmitted to another controller where technically feasible.
  • Right to Object: Object to processing where the lawful basis is our legitimate interests, especially for direct marketing.
  • Right to Withdraw Consent: Where you have provided consent for processing (such as for marketing), you may withdraw it at any time.
  • Right to Complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been processed unlawfully.

Data Security Measures

We are committed to protecting your personal data. We implement industry-standard physical, technical, and organisational measures to prevent unauthorized processing, loss, or misuse. These include secure server environments, encrypted data transfers, regular staff training, and strict data access policies. Nevertheless, no online transmission can be entirely secure, so we encourage you to safeguard your own devices and passwords.

International Data Transfers

Personal data is processed primarily within the United Kingdom and European Economic Area (EEA). If it is necessary to transfer data outside the EEA, we ensure it is protected by appropriate safeguards, such as approved Standard Contractual Clauses or adequacy decisions, in accordance with GDPR requirements.

Policy Scope and Changes

This Privacy Policy applies to all customers and recipients placing or receiving Flower Delivery Farnborough orders originating from Farnborough and neighbouring districts. We may update this policy periodically to reflect changes in legal requirements or business practices. The latest version will always be available on our website. We encourage you to review it regularly.

Contacting Us About Your Data

If you have questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us using the details provided on our website or through your preferred method of communication. We are committed to responding promptly and addressing your queries.