Flower Delivery Hitchin Privacy Policy

Name: ALLURING BLOOMS
Brand: Flower Delivery Hitchin
Price: 99.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Flower Delivery Hitchin ("we", "our", or "us") manages and protects the personal data of all customers placing flower delivery orders within Hitchin and surrounding districts. We are committed to complying with the UK General Data Protection Regulation (GDPR) and any applicable data protection laws. By using our services, you acknowledge you have read and understood the practices described in this policy.

Scope of This Policy

This Privacy Policy applies to all customers and users who place flower delivery orders with Flower Delivery Hitchin or otherwise interact with our offerings in Hitchin and its surrounding areas. By providing your personal data to us, either online, by phone, or in-person, you agree to this Privacy Policy.

What Personal Data We Collect

We collect and process different types of personal data, depending on the nature of your interaction with us. The main categories of data we collect include:

Identity Data: Name (first and last), and where applicable, recipient’s name.
Contact Data: Delivery address, billing address, phone number, and postal code.
Order Information: Details about the products or services you are ordering, order history, delivery instructions, preferences.
Payment Data: Transaction details, but we do not store your full card numbers or security codes as payments are processed via secure third-party payment processors.
Communication Data: Records of communications with us, such as order confirmations, queries, or complaints.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. The primary bases we use are:

Contractual Necessity: Processing your personal data is necessary to fulfil our contract with you, such as processing and delivering your flower order.
Legal Obligation: We may process data to meet legal and regulatory requirements, such as tax or accounting rules.
Legitimate Interests: We may process data for our legitimate interests, such as improving our services, provided these do not override your rights and freedoms.
Consent: In rare circumstances, we may request your consent for additional uses of data, which you can withdraw at any time.

How We Use Your Data

We use your personal data strictly for the following purposes:

To process and deliver your orders, including communicating with you about your order status.
To manage payments and prevent fraudulent transactions.
To handle your queries, requests, or complaints efficiently.
To comply with legal requirements, such as record-keeping for tax purposes.
To improve our products and customer experience through anonymised analysis and feedback collection.

Retention of Your Data

We retain your personal data only for as long as needed to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. The specific retention periods depend on the type of information and its intended use:

Order and contact data related to purchases are typically retained for up to six years, as required for accounting and tax legal obligations.
General queries and communications are held only as long as required to address your enquiry and for a short period afterwards to ensure satisfactory resolution.
After these retention periods, your personal data will be securely deleted or anonymised.

Data Processors and Third Parties

We only share your personal data with trusted third-party service providers ("processors") strictly necessary to provide our services. These typically include:

Payment processing partners who handle your credit/debit card transactions securely.
Couriers or delivery companies responsible for delivering your flower order to you or your recipient.
IT, cloud hosting, or communication service providers to help store or manage your data securely.
Professional advisers (e.g., accountants) where needed for legal or regulatory compliance.

These partners are required to process your data in line with this Privacy Policy and GDPR requirements, are not permitted to use your data for their own purposes, and must maintain its confidentiality and security.

Your Data Protection Rights

As a data subject under GDPR, you have the following rights in relation to your personal data:

Right to Access: Request access to your personal data and receive a copy of information we hold about you.
Right to Rectification: Request correction of incomplete or inaccurate information.
Right to Erasure: Request deletion of your personal data, where there is no lawful requirement for us to keep it.
Right to Restrict Processing: Request us to suspend processing of your personal data, e.g., if you want us to establish accuracy or the reason for processing it.
Right to Data Portability: Request to receive your personal data in a structured, commonly used format and to transmit it to another provider.
Right to Object: Object to processing of your data where we rely on legitimate interests, unless we have compelling legal grounds.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw at any time.

To exercise any of these rights, please contact us using the details available on our website or through the usual correspondence channels.

How We Keep Your Data Secure

We take the security of your data seriously. Appropriate technical and organisational measures are implemented to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures include secure servers, encryption where appropriate, controlled access, and staff training.

Transfers Outside the UK or EEA

Your personal data is generally processed and stored within the United Kingdom (UK). Where we use third-party partners that transfer your data outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as required to reflect changes to our practices or legal obligations. The current policy will always be available on our website, with the "Last updated" date indicated. We recommend reviewing it periodically.

Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch with us using the published details on our website. If you are unsatisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection authority.