Privacy Policy for Flower Delivery West Ham

Introduction

Flower Delivery West Ham ("we", "our", "us") is committed to safeguarding your privacy and protecting your personal data in line with the General Data Protection Regulation (GDPR). This Privacy Policy explains in detail how we collect, use, store, and protect your information when you place flower delivery orders in West Ham and the surrounding districts. The policy applies to all our customers and website users within these areas.

Scope of the Privacy Policy

This Privacy Policy covers all personal information processed during the provision of flower delivery services to customers ordering from West Ham and neighbouring districts. It extends to information collected via our website, by telephone, in-store, or by other means directly related to our flower delivery activities.

Personal Data Collected

We collect and process only the data necessary to fulfill your flower delivery orders, process your payments, and provide customer support. The types of personal data we collect may include:

• Contact Details: Name, phone number, delivery address, and (where provided) email address
• Order Information: Details of products ordered, purchase amounts, dates and delivery instructions
• Recipient’s Information: Name, delivery address, and (if provided) any contact details of the recipient
• Payment Details: Payment method and transaction information (note: we do not store full credit/debit card numbers)
• Correspondence: Messages, queries, feedback, or complaints you send to us
• Technical Data: IP address, device type, and browsing activity (from website and digital services)

Lawful Basis for Processing

Our processing of your personal data is grounded in one or more of the following lawful bases as required by the GDPR:

• Performance of a Contract: We process data mainly to fulfill your flower delivery orders and provide customer service as part of our contractual obligation to you.
• Legal Obligations: We may process data to comply with legal requirements, such as tax or accounting regulations.
• Legitimate Interests: Where necessary, we process data to pursue our legitimate business interests—for instance, to enhance our services or prevent fraud—while respecting your privacy rights.
• Consent: In situations where we require your consent (such as for marketing communications), we will only process your data for those purposes after you have provided your clear agreement. You can withdraw consent at any time.

Data Processors and Third Parties

We may share your personal data with selected third parties who provide services essential to our business operations, for instance:

• Payment Processors: To securely process payments on our behalf
• Delivery Partners: For arranging and fulfilling your flower deliveries
• IT and Hosting Providers: To maintain our website and store customer data securely

All our data processors are contractually obliged to handle your data in compliance with the GDPR and to use it solely for purposes instructed by us. We do not sell your personal data to third parties. Where we use service providers based outside the United Kingdom or European Economic Area, we implement appropriate safeguards to ensure your data is adequately protected.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for the duration required to deliver your flowers, resolve any follow-up queries, comply with legal requirements, and maintain records for accounting or audit purposes. Typically, personal data linked to transactions will be kept for up to 6 years, in accordance with statutory accounting rules. Data used exclusively for marketing or consent-based activities will be retained until you withdraw your consent or request deletion, whichever occurs sooner.

Data Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised processing, accidental loss, destruction, or damage. These may include secure server storage, encrypted transactions, regular access controls, and restricted access to sensitive information by staff and partners only as necessary to deliver our services. While we take every reasonable step to protect your data, please note that no method of data transmission or storage can be guaranteed as 100% secure.

Your Rights under GDPR

You have certain rights regarding your personal data under the UK GDPR, which include:

• Access: To obtain confirmation of whether we process your personal data and to request a copy of the information we hold
• Rectification: To request that inaccurate or incomplete data be corrected or updated
• Erasure ("Right to be Forgotten"): To request deletion of your personal data where it is no longer necessary for us to retain it, subject to legal and commercial constraints
• Restriction: To request that we limit processing of your data in certain cases
• Objection: To object to certain types of processing, such as marketing
• Portability: To request that we transfer your data to you or a third party in a structured, commonly used format
• Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time

If you wish to exercise any of your rights, please contact us using the means specified on our website or as previously communicated to you. We will respond to all valid requests within one month, as required by law.

Children’s Privacy

Our services are not directed at children. We do not knowingly collect or process data relating to individuals under the age of 16 without appropriate parental or guardian consent.

Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our data practices or applicable legal requirements. The latest version of the Privacy Policy will always be available on our website. We encourage customers to review this policy regularly.

Contact and Queries

If you have any questions about this Privacy Policy, your rights as a data subject, or our approach to data protection, please contact us through our designated channels as outlined on our website. We are committed to addressing your queries and resolving concerns efficiently and transparently.