Privacy Policy for Flower Delivery Crawley

Our Commitment to Your Privacy

At Flower Delivery Crawley, we prioritise the protection of your personal data. This Privacy Policy details how we collect, use, share, and store your data when you place orders in Crawley and surrounding districts. We adhere strictly to the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Scope of This Policy

This policy applies to all individuals placing orders with Flower Delivery Crawley for delivery within Crawley and its surrounding districts. By placing an order, you agree to the practices described below.

What Data We Collect

We collect personal data necessary to process your orders efficiently and enhance your experience. The types of data we may collect include:

• Identification Data: Your full name and, if applicable, recipient’s name.
• Contact Details: Delivery address, billing address, and phone number used for delivery arrangements.
• Order Details: Details of your flower orders, delivery instructions, and any message cards included.
• Payment Information: Payment card details processed securely via our payment service providers. We do not retain your full card details.
• Communication Data: Any correspondence, such as queries, feedback, or complaints, submitted via our contact forms or by post.
• Technical Data: IP address, browser type, device identifiers, and other technical information collected automatically when you use our website for security and analytical purposes.

Lawful Basis for Processing Data

We process your personal data on the following lawful bases, as defined by GDPR:

• Contractual Necessity: To fulfil your orders, process payments, arrange delivery, and provide customer service.
• Legal Obligations: To meet accounting, tax, and regulatory requirements.
• Legitimate Interests: To maintain the security of our systems, improve our products and services, conduct analysis, and prevent fraud.
• Consent: Where required, such as for marketing communications (from which you may opt out at any time).

How We Use Your Personal Data

Your information is used for the following purposes:

• Processing and delivering your orders accurately and on time.
• Communicating with you regarding your order status or responding to your inquiries.
• Improving our website, products, and customer experience based on feedback and analytics.
• Complying with legal requirements, resolving disputes, and enforcing our terms.
• Sending you marketing information, only if you have given explicit consent.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including:

• Order and contract records: Kept for up to seven years for legal and accounting purposes.
• Marketing data: Retained until you withdraw your consent or request erasure.
• Customer service correspondence: Held for up to three years after resolution.
• Technical and analytical data: Held for a maximum of two years to maintain and improve website security and performance.

Once your data is no longer needed, it will be securely deleted or anonymised.

Third-Party Data Processors

To deliver our services, we may share your data with trusted third-party processors, including:

• Payment Providers: To process secure payment transactions.
• Delivery Partners: Engaged to fulfil and deliver your orders within Crawley and neighbouring districts.
• IT and Security Providers: Supporting our website, infrastructure, and data security systems.
• Marketing Services (with consent): Assisting with email communication if opted in by you.

All third-party processors are contractually required to handle your data only as instructed, maintain its security, and comply with GDPR.

Your Data Protection Rights

Under GDPR, you have important rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to certain conditions and legal requirements.
• Right to Restrict Processing: Ask us to limit how we process your data in certain circumstances.
• Right to Data Portability: Receive your information in a structured, commonly used format and transfer it to another controller.
• Right to Object: Object to certain processing, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.
• The Right to Lodge a Complaint: Complain to the UK Information Commissioner’s Office (ICO) if you have concerns about our data handling.

Security Measures

We take robust measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include secure data storage, encryption, and limited access permissions for our employees and processors.

International Transfers

Your data is primarily processed within the United Kingdom and European Economic Area. If data is transferred outside these regions, we ensure adequate levels of protection by relying on legally recognised transfer mechanisms.

Updates to This Policy

We review our Privacy Policy regularly and may update it from time to time to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated on our website. We encourage you to review this policy periodically to stay informed.

Contacting Us

If you have questions about this policy, your rights, or our handling of your personal data, please contact us using our online contact form or by post. We are committed to responding to privacy-related requests promptly and transparently.