Privacy Policy for Flower Delivery Poplar Services

Introduction

At Flower Delivery Poplar, safeguarding your privacy and managing your personal data responsibly are top priorities. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (GDPR). It is intended for all customers who place orders with Flower Delivery Poplar in Poplar and its surrounding districts, ensuring transparency around your data rights and our processing activities.

What Data We Collect

When you place an order or interact with Flower Delivery Poplar, we collect and process various types of personal data, including:

• Identification Data: such as your name, billing and delivery address, and contact details.
• Contact Information: including your phone number, mailing address, and any delivery instructions you provide.
• Order Details: records of flowers, gifts, notes, and occasion-specific instructions.
• Payment Information: such as partially masked credit or debit card details processed by our payment providers (note: we do not store full card details).
• Transactional Data: including order history, delivery records, and communications with customer service.
• Technical Data: such as browser type, device information, and cookies (where applicable and consented).

Lawful Basis for Processing

Flower Delivery Poplar only processes your personal data where we have a lawful basis under GDPR. Our main grounds include:

• Contractual Necessity: Processing your information is required to fulfil your flower delivery order and any services you request.
• Legal Obligation: We may need to retain and process certain information to comply with applicable legal and regulatory requirements.
• Legitimate Interests: We use your information to enhance our products and services, prevent fraud, and ensure the quality of the delivery process. Your interests and fundamental rights are always balanced against our legitimate interests.
• Consent: For certain processing, such as sending marketing communications or placing optional cookies, we will ask for your explicit consent. You can withdraw your consent at any time.

Data Retention

Your personal data is only retained for as long as necessary for the purposes for which it was collected, in accordance with our legal obligations and legitimate business needs. Our typical data retention periods are as follows:

• Order and delivery data: retained for up to seven years to comply with tax and accounting regulations and to handle any after-sales queries.
• Marketing data: retained until you opt out or withdraw consent, after which it is deleted or anonymised within a reasonable period.
• Technical and cookie data: retained as specified in our cookie management policy, in accordance with your preferences.

Once data retention periods expire or you request deletion (where applicable), your personal information will be securely deleted or rendered permanently anonymous.

Use of Data Processors and Third Parties

Flower Delivery Poplar works with carefully selected processors and third-party service providers who assist us in delivering orders, processing payments, managing our platform, and providing support. These may include:

• Payment processors: Secure third-party services to handle payments on our behalf.
• Delivery partners: Trusted couriers and drivers for the dispatch and delivery of your orders.
• IT and hosting providers: To ensure our website and order systems operate securely and efficiently.
• Marketing providers (with consent): When you opt in to receive special offers or updates.

All processors are required to act only on our instructions, comply with confidentiality agreements, and maintain appropriate security standards. We do not share your data outside of the UK or European Economic Area except where such transfers are permitted by law and protected by appropriate safeguards.

User Rights

As a Flower Delivery Poplar customer, you have a range of rights under the GDPR:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data where there is no longer a lawful basis for us to keep it.
• Right to Restrict Processing: You can ask us to suspend processing of your data under certain circumstances.
• Right to Data Portability: You may obtain your data for your own use across different services in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to processing if we are processing your data on the basis of legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise these rights, please contact us using the details in the "Contact" section of our website. We will respond to your requests in accordance with legal timeframes and may need to verify your identity before proceeding. Please note, there may be legal circumstances where some rights do not apply, but we will explain these reasons where relevant.

Data Security

We implement robust technical and organisational measures to protect your data against unauthorised access, loss, misuse, and disclosure. This includes encryption, access controls, secure data storage, regular reviews, and staff training on data privacy responsibilities.

Policy Scope and Updates

This Privacy Policy applies to all Flower Delivery Poplar customers located in Poplar and the surrounding districts whenever you interact with us, whether by ordering online, by phone, or through other channels. We may update this Policy from time to time to reflect changes in legal requirements or our data practices. The latest version will always be published on our website and will include the revision date.

Contact and Complaints

If you have any questions about this Privacy Policy or your data rights, please refer to the "Contact" section on our website. If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office or your local supervisory authority.