Privacy Policy for Flower Delivery Chertsey Orders

Name: LIKE A ROYAL
Brand: Flower Delivery Chertsey
Price: 85.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Flower Delivery Chertsey collects, uses, protects, and shares your personal data when you place an order with us. It applies to all customers placing orders for flower delivery services from Chertsey and surrounding districts. Ensuring your privacy and complying with data protection laws, especially the General Data Protection Regulation (GDPR), is central to our commitment to you.

What Data We Collect

When you use our flower delivery service, we collect the following categories of personal data:

Identity Information: Your name and, if you are placing an order on behalf of someone else, the recipient’s name.
Contact Information: Address for delivery, billing address, and telephone number as required to fulfill your order.
Order Details: Order contents, special instructions for delivery, and delivery dates.
Payment Information: Limited payment card details (processed securely by our payment provider; we do not store full card details).
Correspondence: Any communications or feedback you send us regarding your order or our services.

We do not collect sensitive personal data unless explicitly provided to fulfil special requests, such as for specific event deliveries.

Lawful Basis for Processing

Our collection and use of your personal data is grounded in the following lawful bases as defined by GDPR:

Contractual Necessity: We process your data to enter into and fulfill our contract with you, such as delivering flowers to the correct address on your chosen date.
Legitimate Interests: We may use your data to improve our services, prevent fraud, and handle queries or complaints, provided these interests are not overridden by your rights.
Legal Obligation: We may retain transaction data to comply with laws, such as those relating to accounting and tax.
Consent: Where you have given explicit permission, such as signing up for marketing updates, we rely on your consent. You can withdraw your consent at any time.

How We Use Your Data

Your personal data is used to:

Process and deliver your flower order, including communicating with you about your order’s status.
Take payments and process refunds where necessary.
Provide customer support and respond to your queries or feedback.
Maintain accurate accounting and records for legal purposes.
Improve our flower delivery services, including quality control and staff training.

Retention of Your Personal Data

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, including:

Order and transaction data are retained for up to seven years to meet accounting and legal requirements.
Customer correspondence is kept for two years for quality assurance and complaint resolution.
Payment details are stored only by third-party providers for the minimum necessary period.
Data used for marketing purposes will be kept until you withdraw your consent or unsubscribe.

At the end of the retention period, your data is securely erased or anonymised.

Third-Party Processors

We may share your data with reliable third-party companies that help us deliver our services. These processors act strictly on our instructions and under agreements that require them to safeguard your data in line with GDPR. Examples include:

Delivery Partners: Couriers and drivers who require delivery addresses and recipient names to ensure your flowers arrive accurately and on time.
Payment Service Providers: Secure payment gateways used to process transactions.
IT Service Providers: Companies that host our website and manage our order processing system.

We do not sell or rent your data to third parties. If required by law, we may also share data with public authorities or regulators.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Ask us to correct inaccurate or incomplete information.
Right to Erasure: Request deletion of your data where it is no longer necessary or where you withdraw consent (subject to legal requirements).
Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances.
Right to Object: Object to the processing of your data on grounds related to your particular situation or for direct marketing.
Right to Data Portability: Request we provide your data to you or another service provider in a structured, commonly used electronic format.

If you wish to exercise any of your rights, please contact us using the methods provided on our website or by post. We may need to verify your identity before fulfilling your request and will respond within one month.

Data Security

We take reasonable physical, technical, and organisational measures to safeguard your personal data against loss, theft, or unauthorised access. Our systems are regularly reviewed and updated in line with best practices to help ensure ongoing data security.

Changes to this Policy

We may update this Privacy Policy from time to time, and will inform you of significant changes where appropriate. The most recent version will always be available on our website. Continued use of our service will constitute your acceptance of the revised terms.

Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details found on our website. If you are not satisfied with our response, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO).