Your Data & Privacy at Flower Delivery Morden

Flower Delivery Morden Privacy Policy

Introduction

At Flower Delivery Morden, we value the privacy of our customers in Morden and the surrounding districts. This Privacy Policy explains how we collect, use, process, and protect your personal data in compliance with the General Data Protection Regulation (GDPR). It also outlines your rights regarding your personal data. This policy applies whenever you place an order with Flower Delivery Morden, either through our website, telephone, or other channels serving the Morden area and nearby districts.

What Information We Collect

When you place an order with Flower Delivery Morden, we may collect the following categories of data:

Identity Data: Your name, and if applicable, the recipient's name.
Contact Data: Delivery addresses, billing address, phone numbers, delivery instructions (where provided).
Order Details: Products and services you have purchased, including messages for gift cards and special instructions.
Payment Data: Payment method and transaction details (note: we do not store full card information, but may receive confirmation of payment, payment status, and a portion of card number for reference).
Profile Data: Preferences, order history, and any feedback or reviews you provide.
Technical Data: IP address, browser type, device information, and usage data when you interact with our online services.

Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. Our processing is based on:

Contractual Necessity: We process most of your data to fulfill our contract with you – for example, to process your order and arrange delivery.
Legal Obligation: We may need to retain certain data to comply with legal requirements (such as tax or accounting regulations).
Legitimate Interests: For purposes such as improving our services, communicating important information to you, and processing feedback, we rely on legitimate interests. We always balance our interests with your rights and freedoms.
Consent: In specific cases (such as electronic marketing, where applicable), we will ask for your explicit consent before processing your data.

How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfill your flower orders, including confirming your order, arranging delivery, and providing customer support.
To process payments and issue receipts or invoices.
To communicate with you about your order status or in response to your questions.
To personalise our services based on your preferences and feedback.
To comply with legal and regulatory obligations.
To improve our services and internal processes through analysis of feedback and order trends.
Where you have agreed, to send occasional marketing communications which you can unsubscribe from at any time.

Data Retention

We retain your personal data for no longer than is necessary for the purposes for which it was collected, including the purposes of fulfilling our legal, accounting, or reporting requirements. Specifically:

Basic order data (e.g., name, address, order contents) is kept for up to 7 years to comply with accounting and tax legislation.
Payment-related data is only kept as long as necessary for transaction confirmation and fraud prevention.
Marketing preferences are maintained until you opt out or withdraw consent.
Technical data may be retained for website security monitoring for up to 1 year.

After the expiration of relevant retention periods, your data will be securely deleted or anonymised.

Processors and Data Sharing

Your personal data may be shared with trusted third parties (processors) who perform services on our behalf, strictly following our instructions and GDPR requirements. These include:

Payment processors for handling secure transactions.
Delivery partners or couriers for the fulfilment of your flower delivery.
IT service providers that host and support our ordering systems.
Accountants or auditors for compliance with legal obligations.

All processors are required to implement appropriate security measures and comply with GDPR regulations. We do not sell or share your personal data with third parties for unrelated marketing purposes.

Your Rights Under GDPR

If you are a customer of Flower Delivery Morden, you benefit from certain rights under the GDPR. These include:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data.
Right to Erasure: In certain circumstances, you may request the deletion of your data (subject to our legal obligations).
Right to Restrict Processing: You may ask us to restrict or suspend our processing of your data.
Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format for transfer to another provider.
Right to Object: You can object to processing in some situations, such as direct marketing.
Right to Withdraw Consent: Where consent is the lawful basis, you can withdraw it at any time.
Right to Lodge a Complaint: You have the right to contact your local supervisory authority if you believe your data is not being processed lawfully.

How We Protect Your Information

We have put appropriate technical and organisational measures in place to safeguard your data against unauthorised access, loss, or misuse. These include encrypted connections, access controls, regular security audits of our systems, and staff training on data protection.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any significant changes will be communicated appropriately, and the most recent version will always be available on our website.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please get in touch using our published contact methods. We are committed to addressing your concerns promptly and transparently.