Flower Delivery Bromley Common Privacy Policy

Our Commitment to Your Privacy

At Flower Delivery Bromley Common, we are dedicated to safeguarding your personal information and uphold the highest standards of data protection. This Privacy Policy explains how we collect, use, store, and share your data when you order flower delivery services from Bromley Common and the surrounding districts.

Applicability of This Privacy Policy

This Privacy Policy applies to all customers placing orders for flower delivery with Flower Delivery Bromley Common, whether via our website, telephone, or in-person, covering Bromley Common and its neighbouring areas. By engaging our services, you consent to the data practices specified in this Privacy Policy.

Personal Data We Collect

To provide our flower delivery services and ensure a seamless customer experience, we collect various types of personal data. Depending on the nature of your interaction with us, this may include:

• Contact Details: Such as your full name, address (delivery and billing), and contact information (phone number, where applicable).
• Order Information: Details of your flower order, instructions, messages for recipients, and special requests.
• Payment Details: Payment card information and transaction history (handled securely via our payment processors; we do not store full card details).
• Recipient Details: Name, address, and contact information of any recipient specified for delivery.
• Correspondence: Record of any communications between you and us (for customer service, complaints, or queries).
• Technical Data: When placing orders online, we may collect IP addresses, browser type, device information, and cookies for website functionality and analytics.

Lawful Bases for Processing Your Data

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis to process your personal data. Flower Delivery Bromley Common relies on the following bases:

• Performance of a Contract: So we can process, fulfill, and deliver your flower order.
• Legitimate Interests: To manage and improve our services, respond to your enquiries, and maintain business operations, provided these interests are not overridden by your own rights and interests.
• Legal Obligation: For compliance with applicable laws and regulations, such as record-keeping for tax purposes.
• Consent: Where you have provided explicit consent, e.g., to receive marketing communications (you may withdraw consent at any time).

How Your Data is Used

Your personal information is used strictly for purposes connected to fulfilling your flower delivery orders and enhancing your experience, such as:

• Processing and delivering your order
• Handling payments and refunds
• Contacting you about your order
• Responding to customer enquiries or complaints
• Improving our website and services
• Meeting legal and regulatory obligations

Data Retention Policy

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including for satisfying legal, accounting, or reporting requirements. In general:

• Order and transaction data: retained for a maximum of six years from the date of the transaction, for tax and contractual necessities
• Correspondence: retained for up to two years after your last interaction with us, unless longer retention is required for dispute resolution
• Marketing data: retained until you withdraw your consent or unsubscribe from communications

Once data is no longer required, it will be securely deleted or anonymised.

Processors and Sharing of Your Data

To effectively deliver our services, certain third-party processors may handle your data on our behalf. These processors act under strict contractual agreements and may include:

• Payment Processors: Securely handle payments and process refunds. We never store your full card details on our servers.
• Delivery Partners/Couriers: Access delivery details necessary to deliver your order to you or your recipient.
• IT and Cloud Service Providers: Deliver technical infrastructure and store our customer database.
• Customer Service Platforms: Manage correspondence records and facilitate efficient customer support.

We never sell your data. Your data may only be disclosed to external parties if required by law or as necessary to fulfil the contractual service to you.

International Transfers

In rare cases where your data is transferred outside of the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your rights and your information, in line with GDPR requirements.

Security Measures

We take security seriously and implement appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include encryption, regular data access reviews, staff training, and limited access controls.

Your Data Protection Rights

Under GDPR, you have rights regarding your personal data processed by Flower Delivery Bromley Common. You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct or complete inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to certain legal obligations.
• Restriction: Request restriction of processing under certain circumstances.
• Objection: Object to processing carried out on the basis of legitimate interests.
• Portability: Request to receive your data in a structured, machine-readable format or to have it transferred to another controller.
• Withdrawal of Consent: If processing is based on consent, you can withdraw this at any time.

To exercise your rights, please contact us using the contact details provided on our website or in your order confirmation.

Children's Privacy

Our flower delivery services are not directed at children under the age of 16. We do not knowingly collect data from children under this age. If you believe we have improperly collected such information, please contact us so we can delete it promptly.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as our business or legal obligations change. Updates will be posted on our website and will take effect immediately upon posting. We encourage you to review this policy each time you use our services.

Contact and Further Information

If you have questions about this Privacy Policy or your personal information, please refer to the contact information available on our website or your order documents. We are committed to responding to your enquiries and upholding your rights regarding your data.