Flower Delivery Chelmsford Privacy Policy

Introduction

At Flower Delivery Chelmsford, we are committed to safeguarding the privacy and security of our customers' personal data. This Privacy Policy explains how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR). It applies to all customers placing orders with Flower Delivery Chelmsford from Chelmsford and the surrounding districts. Please review this policy to understand your rights and our data practices.

What Data We Collect

When you place a flower delivery order with Flower Delivery Chelmsford, we may collect the following types of personal data:

  • Identity Information: Full name, delivery recipient name
  • Contact Information: Delivery address, billing address, phone number
  • Order Details: Items ordered, delivery instructions, preferred delivery date and time
  • Payment Information: Details required to process payments (handled securely by payment processors; we do not store full payment details)
  • Communication Records: Customer service correspondence, order confirmations, delivery updates
  • Technical Data: IP address, browser type and version, cookies, and usage data necessary for website functionality and security

We do not intentionally collect any sensitive personal data (e.g., race, religion, or health data).

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. Flower Delivery Chelmsford relies on the following lawful bases:

  • Contractual Necessity: We process your data to manage and fulfill your order, such as arranging delivery and processing payments.
  • Legal Obligations: We may process data required by UK law for accounting, tax, or regulatory compliance.
  • Legitimate Interests: We may use your information for our legitimate business interests, such as improving our services, provided these do not override your rights.
  • Consent: Where required, such as for marketing communications, we will seek your explicit consent before processing your data for those purposes.

How We Use Your Data

We use your personal data to:

  • Process and deliver your flower orders accurately
  • Manage payments and invoicing securely
  • Communicate important updates about your order or our services
  • Respond to customer inquiries and provide support
  • Comply with legal requirements and resolve disputes
  • Improve the performance and usability of our website

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, as outlined in this policy. Typically, order-related data is held for a period of six years from the order date to comply with legal and financial recordkeeping obligations. Data used for customer support and communications may be retained for a shorter period unless otherwise required by law.

Once your data is no longer required for these purposes, it will be securely deleted or anonymised in a manner that prevents its reconstruction or retrieval.

Data Processors and Sharing

We may share your personal data with third-party service providers (processors) who assist in delivering our services. These processors may include:

  • Payment processing companies (for secure transaction handling)
  • Delivery and courier services (to deliver flowers to your requested address)
  • IT providers supporting our website and communication systems
  • Professional advisers, such as accountants or legal advisors, where required

All processors are contractually obligated to adhere to GDPR standards, use your data solely for the specified purpose, and secure it against unauthorized access.

We do not sell your personal data to third parties. Data transfers outside the UK or European Economic Area, if any, are protected by appropriate safeguards required by GDPR.

Your Rights Under GDPR

As a customer of Flower Delivery Chelmsford, you have several rights with respect to your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You can request correction of any inaccurate or incomplete personal data.
  • Right to Erasure: Also known as the “right to be forgotten,” you may request the deletion of your data under certain circumstances, for example, if it is no longer necessary for the purpose for which it was collected.
  • Right to Restrict Processing: You may ask us to restrict or suppress the processing of your personal data in specific situations.
  • Right to Data Portability: You have the right to request the transfer of your data to another organization, where practical.
  • Right to Object: You may object to the processing of your data if the lawful basis is legitimate interests or direct marketing.
  • Right to Withdraw Consent: If we rely on your consent to process data (e.g., marketing), you are free to withdraw your consent at any time.

You may exercise these rights by contacting us with your request. We will respond to all legitimate requests within one month and in accordance with applicable laws. Proof of identity may be required to process your request.

Security of Your Data

We take the security of your personal information seriously. Appropriate technical and organisational measures are in place to protect your data from loss, misuse, unauthorised access, disclosure, alteration, and destruction. These measures are regularly reviewed and updated in line with technological advances and regulatory requirements.

Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices or legal obligations. The updated version will always be available to view before placing an order. We recommend reviewing this policy periodically to stay informed of how we protect your data.

Contact and Complaints

If you have any questions or concerns regarding this Privacy Policy or the way your data is handled, you may contact us through the available contact methods on our website. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom.

Thank you for trusting Flower Delivery Chelmsford with your personal data. We value your privacy and are dedicated to handling your information with care and transparency.