Flower Delivery Cobham Privacy Policy – Data Protection Information
Privacy Policy Overview
This Privacy Policy describes how Flower Delivery Cobham ("we", "us", or "our") collects, uses, stores, and protects your personal data when you place flower delivery orders in Cobham and its surrounding districts. Your privacy is important to us, and we are committed to handling your data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Who This Policy Applies To
This policy applies to all customers and users who place flower delivery orders with Flower Delivery Cobham from Cobham and nearby areas. By using our services, you acknowledge and agree to the practices described in this policy.
What Personal Data We Collect
When you use our website or place an order for flower delivery, we may collect and process the following categories of personal data:
- Identity Data: Your full name, and if sending flowers to another person, the recipient’s name.
- Contact Data: Your address, recipient’s address, email addresses, and phone numbers related to the delivery.
- Order Details: The products you purchase, order messages, and delivery instructions.
- Payment Data: Payment transaction details (excluding full payment card details, which are processed securely by our payment providers).
- Technical Data: IP address, device information, browser type, and usage data collected via cookies and similar technologies, where applicable.
- Correspondence: Records of communication you may have with our customer service team regarding your order or our services.
Lawful Basis for Processing Your Data
We process your personal data based on the following lawful grounds as specified under GDPR:
- Contractual Necessity: We require your personal information to fulfil your order, process payment, arrange delivery, and provide customer support (Article 6(1)(b) GDPR).
- Legal Obligations: Certain data must be retained to comply with accounting, tax, and other legal requirements (Article 6(1)(c) GDPR).
- Legitimate Interests: We may use your data for quality assurance, improving our services, and business analytics, provided these interests do not override your fundamental rights and freedoms (Article 6(1)(f) GDPR).
- Consent: Where necessary, we will obtain your explicit consent for activities such as sending marketing communications. You may withdraw your consent at any time.
How We Use Your Information
Your personal data is used only for the purposes for which it was collected:
- Processing and fulfilling your order, including delivery and payment collection.
- Communicating with you about your order status, delivery, and any issues.
- Providing customer support and handling complaints.
- Keeping internal records for auditing and tax purposes.
- Improving our website, products, and services.
- Sending important service updates or, with your consent, marketing communications.
Personal Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, your order information will be kept for a period of up to 7 years to comply with tax and financial record-keeping laws. Data used for marketing purposes is retained until you withdraw your consent or unsubscribe.
Use of Data Processors
We may engage third-party processors to help deliver our services and manage your data appropriately. These may include:
- Payment Processors: Securely handling payments and refunds. We do not store full payment card numbers or security codes on our systems.
- Delivery Partners: Trusted couriers and drivers who receive only the data necessary to fulfil your delivery.
- IT Service Providers: Supporting our website hosting, security, and technical operations.
- Analytics Services: Aggregating website usage and performance data in anonymised or pseudonymised forms.
All such processors are contractually obliged to act only on our instructions and to protect your personal data as required by GDPR.
How We Protect Your Data
We have implemented suitable technical and organisational measures to safeguard your personal data. These measures include secure server storage, encryption in transit, access controls, and regular security reviews. Only employees and partners who need your information to provide our services will have access to it.
Your Rights Under GDPR
You have various rights regarding your personal data under GDPR, including:
- The right to access: Request a copy of the personal data we hold about you.
- The right to rectification: Request correction of any incomplete or inaccurate data.
- The right to erasure: Ask us to delete your personal data in certain circumstances.
- The right to restrict processing: Request that we limit how we use your data.
- The right to data portability: Request that we transfer your data to another provider, where technically feasible.
- The right to object: Object to certain types of processing, such as direct marketing.
- The right to withdraw consent: Where processing is based on consent, you may withdraw this at any time.
To exercise any of these rights, you may contact us using the methods provided on our website. We will respond to your request within the timelines required under GDPR.
International Transfers
Your data may be processed within the UK or European Economic Area (EEA). If we ever need to transfer your personal data outside the EEA, we will ensure appropriate safeguards are in place to protect your information and that the transfer is compliant with data protection laws.
Policy Updates
We keep our Privacy Policy under regular review and may update it from time to time to ensure ongoing compliance with applicable laws. Any updates will be published on our website, and significant changes will be communicated where appropriate.
Contacting Us
If you have questions about this Privacy Policy, your data, or how to exercise your rights, please refer to the contact information provided on our website, and we will be happy to assist you.
