Flower Delivery Grove Park Privacy and Data Protection Statement

Introduction

This Privacy Policy explains how Flower Delivery Grove Park processes personal data collected from customers in Grove Park and the surrounding districts. We are committed to safeguarding your privacy, complying with the General Data Protection Regulation (GDPR), and ensuring transparency in the processing of your personal information. By placing a Flower Delivery Grove Park order, either via our website, by phone, or in-person, you acknowledge and accept the practices described in this policy.

What Data We Collect

To provide our services, Flower Delivery Grove Park may collect the following categories of personal data:

• Identity Information: Name, delivery recipient’s name, and, where relevant, company or organization details.
• Contact Information: Delivery address, billing address, phone number, and, if provided, email address.
• Order Details: Information about your floral arrangements, selected delivery dates and times, order notes to recipients, and payment method details (not card data itself, as card processing is handled securely by third-party processors).
• Technical Data: IP address, device and browser details, and website usage data collected through cookies and analytics tools, where permitted.
• Correspondence: Records of communications, feedback, and queries, if submitted.

Lawful Basis for Processing

Flower Delivery Grove Park processes personal data only when there is a lawful basis for doing so, including:

• Contractual Obligation: We collect and process your data to fulfill and deliver your flower order, contractual necessity forms the primary basis for most customer data processing.
• Legal Obligation: Certain personal data may be required for accounting, tax, or regulatory compliance purposes.
• Legitimate Interests: We may use your data for legitimate business purposes such as improving our services, fraud prevention, and internal record-keeping, provided your rights and freedoms are not overridden.
• Consent: Where required, for example to send you marketing communications (which you can withdraw at any time), we rely on your explicit consent.

How We Use Your Data

Your personal data is used in various ways in relation to your flower delivery order, including:

• Processing and confirming your order
• Arranging and completing your flower delivery
• Contacting you regarding your order or to respond to queries
• Maintaining accurate records for customer service and compliance
• Improving website functionality and user experience (where cookies are used)
• Sending marketing updates, when you have opted in

Data Retention

Your personal data will be stored only for as long as necessary to fulfill the purposes outlined in this policy, and to comply with legal and regulatory requirements. Typically, personal data related to orders is retained for seven (7) years to comply with accounting and tax obligations. Marketing consent data is retained until you withdraw your consent. Technical data used for analytics may be kept for a shorter duration unless otherwise required by law.

Third Party Processors

To deliver services efficiently, Flower Delivery Grove Park may share limited personal data with trusted third-party processors, strictly for the following functions:

• Payment Processing: Payment information (excluding full card numbers or CVV details) is securely processed by established payment service providers.
• Delivery Partners: Name, address, and phone numbers may be shared with trusted couriers or florists to ensure timely delivery of your order.
• IT and Hosting Services: Providers who host our website, manage our booking platforms, or ensure system security may have access to technical or pseudonymised data for maintenance purposes.
• Analytics Services: Aggregated and anonymised data may be assessed by analytics providers to help us improve service quality.

These third parties act only under our direct instructions, under relevant data processing agreements, and are required to adhere strictly to GDPR requirements.

Your Privacy Rights

Under the GDPR, customers of Flower Delivery Grove Park, including individuals ordering from Grove Park and surrounding districts, have the following rights regarding their personal data:

• Right of Access: You may request a copy of any personal data we hold about you.
• Right to Rectification: If your personal data is incomplete or inaccurate, you can request correction.
• Right to Erasure: You can request deletion of your personal data in certain circumstances, such as where processing is no longer necessary or you have withdrawn consent.
• Right to Restrict Processing: You may request the restriction of processing of your personal data in specific circumstances.
• Right to Data Portability: Where applicable, you can request that your data be transferred to another provider in a commonly used, machine-readable format.
• Right to Object: You may object to our processing of your data under certain lawful bases, particularly for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw this at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the contact form provided on our website or the options presented at the point of order. We may require verification of your identity to process such requests.

Data Security

We have implemented suitable technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, disclosure, misuse, or modification. Regular reviews of our security procedures are carried out to ensure ongoing data protection. Our staff and trusted partners are trained and bound to maintain the confidentiality of your information.

Children's Privacy

Flower Delivery Grove Park does not knowingly collect personal data from children under the age of 16 years. Customers must be of sufficient legal age to place orders or provide data for delivery purposes.

Updates to This Policy

This Privacy Policy may be updated as necessary to reflect changes in data protection laws, our practices, or services. We recommend checking this page periodically to review any updates. Significant changes will be communicated appropriately, typically via updates at the point of order or on our website.

Contact and Queries

If you have questions about your data, wish to exercise your rights, or have a privacy concern, please use the contact form available on our website or approach us in person at our Grove Park location. We are committed to resolving your issues and ensuring your privacy is protected at all times.