GDPR Privacy Policy for Flower Delivery Ware Customers

Introduction

This Privacy Policy explains how Flower Delivery Ware (the "Company", "we", "our", or "us") collects, uses, retains, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). This policy applies to all customers placing Flower Delivery Ware orders in Ware and surrounding districts. Please read this document carefully to understand your rights and our obligations regarding your personal data.

What Data We Collect

To provide our flower delivery services and fulfill your orders efficiently, we may collect the following types of personal data:

• Contact Information: Name, address (delivery and billing), telephone number(s), and, where applicable, other contact details.
• Order Details: Items ordered, delivery instructions, gift messages, and information about the recipient (if different from the customer).
• Payment Information: Payment card details or other transaction information (handled securely through payment processors).
• Communication Data: Records of correspondence with you, feedback, complaints, or queries.
• Technical Data: IP address, browser type, device identifier, and limited log information if you use our website or any online platform.

We do not seek to collect sensitive personal data unless it is required for the explicit purposes of handling an order or as required by law.

The Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to process your personal data. Our activities rely on the following:

• Contractual Necessity: Processing data for the performance of a contract with you, for example, fulfilling a flower delivery order.
• Legitimate Interests: To improve our services, prevent fraud, and communicate relevant updates about your order or service offerings, where such interests do not override your rights.
• Legal Obligations: To comply with applicable accounting, legal, or regulatory requirements, such as record-keeping obligations.
• Consent: Where appropriate, such as sending marketing communication, we will seek your clear consent, and you may withdraw your consent at any time.

How We Use Your Data

Your data is used only for purposes relevant to providing and improving our services, including:

• Processing and delivering your orders
• Managing payments and refunds
• Providing customer support
• Communicating with you regarding your order status or any queries
• Improving our website, service quality, and customer experience
• Fulfilling our legal and regulatory requirements

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including providing services to you, complying with legal or regulatory retention periods, resolving disputes, and upholding our agreements. Specifically:

• Order and Transaction Records: Kept for up to 7 years to comply with tax and accounting obligations.
• Customer Correspondence: Retained for up to 2 years after the last contact, unless required for legal obligations.
• Marketing Data: If you have consented, we will keep your contact data for marketing purposes until you withdraw your consent or opt out.

After the retention period ends, we will securely delete, anonymize, or destroy your data unless a further retention obligation applies.

Use of Data Processors

To ensure the efficient processing of your orders and service delivery, we may use third-party service providers (processors) for certain operations, including:

• Payment processing vendors for secure transaction management
• Delivery partners handling logistics and delivery of your order
• Cloud-based software providers supporting our order management
• Professional advisors such as accountants or legal counsel when required

All data processors are bound by contracts to uphold data protection standards equivalent to those outlined in this policy and the GDPR. We do not permit any processors to use your data for their own purposes.

Sharing and Disclosure

Your personal data is treated as confidential. We will only share your information when necessary to provide our services (such as sharing a recipient's address with our delivery partner), fulfil our legal obligations, protect our rights or in the event of a business reorganization, merger or sale. We do not sell your personal data to third parties.

Transfers Outside the European Economic Area (EEA)

If any processing of your personal data requires transfer outside the EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or data protection agreements as required by GDPR, to ensure your data remains protected at all times.

Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no overriding legal requirement for retention.
• Right to Restrict Processing: Request we restrict the processing of your data in certain circumstances.
• Right to Data Portability: Request transfer of your data to another provider in a structured format.
• Right to Object: Object to processing based on our legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on your consent.

To exercise your rights, please contact us using the details provided on our website. We will respond to your request in line with statutory timeframes and requirements.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. We regularly review our data security procedures to ensure ongoing protection for your information.

Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. Any substantial changes will be communicated to you appropriately. The version date will always be visible at the end of the policy.

Contact and Further Information

If you have questions about this Privacy Policy or require further information about how we handle your data, please refer to our official website for ways to contact us. We are committed to protecting your privacy and upholding your rights under the GDPR.

This policy was last updated on 1 June 2024.