Flower Delivery Whitechapel GDPR Privacy Policy

Introduction

At Flower Delivery Whitechapel, we are committed to protecting your privacy and managing your personal data responsibly. This Privacy Policy informs all customers who place orders from Whitechapel and surrounding districts about how we collect, process, retain, and store your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable UK data privacy laws.

Scope of Our Policy

This Privacy Policy applies to all users and customers of Flower Delivery Whitechapel, whether you order flowers directly, via our online store, or through third-party platforms, as long as your delivery address is within Whitechapel or nearby districts. By placing an order, you agree to the terms outlined herein regarding the management of your personal data.

What Data We Collect

When you place an order or interact with Flower Delivery Whitechapel, we may collect the following personal data:

Identification and Contact Information: e.g., your full name, delivery recipient’s name, delivery address, billing address, contact phone number, and other provided details.
Order Details: such as order contents, special delivery instructions, messages for recipients, and chosen delivery date and time.
Payment Information: including partial payment details (e.g., card type, last digits), payment confirmation, but not full card numbers—these are handled securely by approved payment processors.
Account Information: if you create an account with us, including user credentials and preferences.
Communications: records of communications between you and our team for customer service or support, including feedback or queries.
Technical Information: such as IP address, device type, browser information, and usage data when you visit our website. This may be collected through cookies and similar technologies, for which you will be provided a separate notice and choice.

Lawful Basis for Data Processing

In accordance with GDPR, we only process your personal data where a lawful basis exists:

Contractual Necessity: Most data we collect is necessary to process and deliver your order and fulfill our contract with you.
Legitimate Interest: We use your information for customer service, record-keeping, business analysis, and to improve our services, provided these interests do not override your fundamental rights.
Legal Obligation: In some cases, we must retain certain data to comply with UK tax, fraud prevention or other regulatory requirements.
Consent: Where required, for example, for marketing communications, we seek and rely on your explicit consent, which can be withdrawn at any time.

How We Use Your Data

We process your personal information for the following purposes:

Processing and fulfilling your flower delivery orders.
Managing payment transactions securely.
Communicating important order updates or queries.
Improving our products, services, and customer experience.
Meeting legal and regulatory requirements.
Sending marketing or promotional information, only with your explicit consent.

Sharing Your Data and Processors

Flower Delivery Whitechapel does not sell or share your personal data with third parties for their own use. We only share information with trusted service providers (data processors) that help us deliver our services, including:

Delivery Partners: Couriers and drivers who deliver your flowers and may need access to delivery names and addresses.
Payment Processors: Approved third-party payment services that securely handle your payment data.
IT and Support Providers: Companies that supply us with IT, hosting, and customer service infrastructure.

All processors are contractually bound to protect your information in accordance with applicable GDPR requirements, handle it only as instructed by us, and not use it for their own purposes.

Data Retention

Your personal data is stored only as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal, accounting, or reporting obligations. Generally:

Order data is retained for up to seven years after your last order to meet legal and tax requirements.
Customer account information is kept for as long as your account remains active. If you close your account, your information will be securely deleted or anonymised after statutory obligations expire.
Data used for marketing (with your consent) is retained until you withdraw your consent or unsubscribe from communications.

All retained data is subject to strict measures to ensure confidentiality and security throughout its lifecycle.

Your GDPR Rights

As a customer within Whitechapel and surrounding districts, you have the following data protection rights under GDPR:

Right of Access: You may request a copy of your personal data held by us.
Right of Rectification: You can request corrections to inaccurate or incomplete data.
Right to Erasure: Also known as 'the right to be forgotten,' you may request deletion of your data when it is no longer necessary for the original purpose.
Right to Object and Restrict: You can object to our processing or request restrictions, under certain circumstances.
Right to Data Portability: Where applicable, you can request a copy of your data in a structured and commonly used format.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time, affecting future processing.
Right to Complain: You may lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been mishandled.

Data Security Measures

We maintain appropriate technical and organisational measures to safeguard your personal data. This includes secure servers, encrypted communications, regular security audits, limited data access, and strict processor due diligence. While we strive to protect your information, no system can guarantee absolute security.

Policy Updates

We may update this Privacy Policy from time to time. If significant changes are made, customers will be notified by a visible notice on our website. We encourage all customers to review this page periodically to stay informed about how we protect your data.