Our Commitment to Customer Privacy at Flower Delivery Lewisham

Introduction

This Privacy Policy outlines how Flower Delivery Lewisham ("we", "our", or "us") processes and protects your personal data when you place an order with us. We are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This policy applies to all individuals placing flower orders with Flower Delivery Lewisham from Lewisham and surrounding districts, whether orders are placed online, by phone, or in person.

Personal Data We Collect

When you interact with Flower Delivery Lewisham, we collect the following categories of personal data:

• Identification Data: Name, title, and contact details (including delivery address, billing address, phone number, and, where relevant, email address).
• Order Information: Details regarding your flower selections, delivery instructions, recipient details (such as their name, delivery address, and optional message), and order notes you provide.
• Payment Details: Limited payment data (such as payment method and transaction reference) as processed securely by our payment providers. We do not store your full card or bank details.
• Communication Data: Records of any correspondence with you, such as customer service inquiries or feedback.
• Technical Data: When you use our website, limited technical data (such as device, browser type, IP address, and cookie data) may be collected to support site functionality and security.

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract: To process and deliver your flower orders, communicate with you about your purchase, and provide related customer service.
• Legal obligations: To comply with UK laws and regulations relevant to business record keeping and financial transactions.
• Legitimate interests: To enhance our services, prevent fraud, maintain security, and improve our customer experience, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: We may request your explicit consent to send you marketing communications. You are free to withdraw your consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

• Processing and delivering your flower order, including communicating order status and resolving queries.
• Carrying out payments securely via approved payment processors.
• Managing customer accounts and preferences, where applicable.
• Fulfilling our legal and regulatory obligations.
• Analysing usage patterns to enhance service quality and website performance.
• Providing information about our services, with your permission, via marketing communications.
• Improving our security standards and protecting against fraud or misuse.

Data Sharing and Processors

We share your data strictly on a need-to-know basis and only when necessary to deliver our services. Your personal data may be shared with:

• Payment service providers: To securely process your payments.
• Delivery partners or couriers: To deliver your flowers and related orders efficiently.
• IT and website hosting providers: To support the operation and security of our booking systems and website.
• Legal or regulatory authorities: If required to comply with the law or protect your or our rights, property, or safety.

We require all third-party processors to respect the security and confidentiality of your data and process it only on our instructions and in line with this Privacy Policy and GDPR requirements.

International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we use any suppliers or processors located outside the UK or EEA, we ensure that your data is protected to the same standards required by UK law, using approved safeguards such as adequacy decisions or standard contractual clauses.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. Generally, order-related data is retained for up to six years after the end of your relationship with us, as required for tax and business record purposes. Communication data and marketing preferences may be kept until you withdraw consent or request deletion, subject to legal limitations. Once retention periods expire or you request erasure (where applicable), your data will be securely deleted or anonymised.

Your Data Subject Rights

Under GDPR, you have the following rights in relation to your personal data:

• Right of access – To request a copy of the personal data we hold about you.
• Right to rectification – To have incomplete or inaccurate data corrected.
• Right to erasure – To ask for your data to be deleted, subject to certain legal exceptions.
• Right to restriction – To limit how we are using your personal data in certain circumstances.
• Right to data portability – To request that we transfer your data to another provider, where technically feasible.
• Right to object – To object to processing based on our legitimate interests or direct marketing.
• Right to withdraw consent – Where our processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided on our website. Please be aware that we may require proof of your identity before fulfilling certain requests and that, in some cases, specific legal obligations or legitimate interests may limit your rights.

Security Measures

We take the security of your personal data seriously. We use appropriate organisational and technical measures to safeguard your information against loss, theft, and unauthorised access or disclosure. Access to your information is strictly limited to those who need it for the specified purposes detailed in this policy.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. We encourage you to review this policy regularly whenever you place an order or use our services. The latest effective date will always be displayed at the top of the policy.

Contact and Complaints

If you have questions, concerns, or wish to exercise your data rights in relation to this Privacy Policy and our data processing practices, please contact us through the channels provided on our website. Should you remain dissatisfied, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority.

Thank you for trusting Flower Delivery Lewisham with your personal data. Your privacy and confidence are important to us, and we are committed to handling your information fairly and lawfully.