Our Commitment to Your Privacy at Flower Delivery Elm Park

Introduction

This Privacy Policy sets out how Flower Delivery Elm Park collects and processes personal data for customers ordering floral products and delivery services in Elm Park and surrounding districts. We are dedicated to maintaining the privacy and security of your personal information and ensuring compliance with the General Data Protection Regulation (GDPR).

Scope of This Policy

This Privacy Policy applies to all individuals placing Flower Delivery Elm Park orders, whether online, by phone, or in person, for delivery to locations within Elm Park and the surrounding districts. By placing an order with us, you agree to the collection and processing of your personal data as outlined in this policy.

What Data We Collect

We collect the minimum necessary personal information to process your order and deliver our services. The types of data we typically collect include:

• Contact Information: Name, delivery address, phone number, and other contact details provided when placing an order.
• Order Details: Product selections, special instructions, delivery date, payment method (note: we do not store full payment card details, only the necessary transaction information for processing).
• Recipient Information: Name, address, and any message included with the delivery.
• Communication Records: Records of your communications with us, such as queries, feedback, or complaints.
• Technical Data: IP address, browser type, and interaction data collected via our website for the purposes of analytics and improving our services.

Lawful Basis for Processing Personal Data

We rely on the following lawful bases under the GDPR for processing your personal data:

• Contractual Necessity: Most of the data we collect is necessary for the performance of a contract with you, primarily to process and deliver your order.
• Legitimate Interests: Some processing is required for our legitimate business interests, such as fraud prevention, customer service improvement, and ensuring network and information security. This will never override your rights and interests.
• Legal Obligations: We may be required to process data to comply with our legal and regulatory obligations, such as record-keeping for tax or accounting purposes.
• Consent: In specific circumstances, such as sending marketing communications (if any), we rely on your explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used only for the purposes for which it was collected, including:

• Processing and fulfilling your orders, including delivery and payment arrangements.
• Responding to your requests, questions, or concerns.
• Sending order updates and relevant notifications.
• Improving our products and services.
• Complying with applicable legal requirements.

Data Retention

We retain your personal data for only as long as necessary to fulfill the purposes for which it was collected or as required by law. Typically, personal data related to your order will be retained for up to six years to comply with legal and tax obligations. After this period, data will be securely deleted or anonymized unless a longer retention period is required for legitimate business or legal purposes.

Data Sharing and Processors

Personal data is shared only with third parties necessary to provide, manage, and improve our services, or as required by law. These may include:

• Payment Processors: Secure third-party providers managing transaction processing on our behalf. We do not store full payment card details on our systems.
• Delivery Partners: Trusted couriers or delivery personnel who require recipient information to deliver your order.
• IT Service Providers: Companies providing website, hosting, and technical support services necessary for service functioning and security.
• Professional Advisors: Accountants, legal advisers, or tax consultants as necessary for our operations and compliance.

All processors acting on our behalf are required to comply with the same strict data protection standards and are subject to contractual obligations prohibiting them from using your data for any other purposes.

Data Security

We use a combination of physical, technical, and organizational measures to safeguard your personal data against unauthorized access, theft, and loss. These measures include secure servers, encrypted transactions, access controls, and regular staff training. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that could affect your rights and freedoms, we will notify you and the appropriate authorities as required.

User Rights

As a data subject under GDPR, you have the following rights concerning your personal data:

• Right of Access: Request access to the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Ask for your personal data to be deleted under certain circumstances ("right to be forgotten").
• Right to Restrict Processing: Request that we limit the processing of your personal data.
• Right to Object: Object to processing based on our legitimate interests, or for direct marketing purposes (if used).
• Right to Data Portability: Receive your personal data in a commonly used, machine-readable format and transmit it to another controller.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

If you wish to exercise these rights, please contact us using the details provided in your order confirmation or on our website. We will respond to all legitimate requests within one month unless an extension is necessary due to complexity or number of requests.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing or legal obligations. Any significant changes will be communicated to you as appropriate, whether via our website or during your next interaction with us. Please review this policy periodically for the most current information.

Contact and Complaints

If you have questions about this Privacy Policy or are concerned about how your personal data has been handled, you may contact us for further information. You also have the right to lodge a complaint with the Data Protection Authority if you believe your data has not been processed lawfully.