Privacy Policy for Customers of Flower Delivery Tooting

Name: CANDY CRUSH & TEDDY BEAR
Brand: Flower Delivery Tooting
Price: 70.00 GBP
Availability: InStock

Introduction

This Privacy Policy outlines how Flower Delivery Tooting ("we", "our", or "us") collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws. This policy applies to all individuals placing orders for flower delivery services provided by Flower Delivery Tooting within Tooting and the surrounding districts.

What Data We Collect

To provide our flower delivery services, we may collect the following categories of personal data from you:

Identity Data: Full name, title, and, if applicable, company name.
Contact Data: Billing address, delivery address, telephone number, and optionally, any other contact information you provide.
Order Information: Details about the products you order, delivery preferences, instructions, and messages to recipients.
Payment Data: Payment method details. Please note we do not directly store your full credit or debit card information – payment processing is handled by approved, secure payment processors.
Technical Data: IP address, browser type and version, device information, and usage data collected through website analytics tools.
Correspondence Data: Records of email or other communications when you contact us about your orders or our services.

Lawful Basis for Processing

Under the GDPR, we must have a lawful basis to process your personal data. Flower Delivery Tooting processes your information on one or more of the following grounds:

Performance of a Contract: To fulfill and deliver your orders, manage payment, and handle customer service inquiries.
Legal Obligation: To comply with legal and regulatory requirements, such as tax or accounting rules.
Legitimate Interests: To improve our products or services, enhance customer experiences, prevent fraud, and maintain security of our website and operations. We always respect your fundamental rights and interests in using this basis.
Consent: For specific uses, such as sending promotional communications (where consent is legally required), we will ask for your explicit agreement. You can withdraw consent at any time.

How We Use Your Data

Your personal data may be used for the following purposes:

Processing and delivering your orders, including communicating with you about your purchase.
Managing payments, refunds, and accounting records.
Contacting you for service-related communications or customer feedback.
Improving our website, services, and customer experience based on analytics and customer feedback.
Detecting and preventing fraudulent transactions and ensuring website security.
Where permitted, sending marketing communications or updates about our services, subject to your preferences.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our standard data retention periods are as follows:

Order-related data: Retained for up to 7 years to comply with legal and tax obligations.
Marketing data: Retained for as long as consent remains valid or until you unsubscribe.
Technical data: Retained in anonymised or aggregated forms for analytical purposes unless linked to an individual user, in which case it is retained in line with our general retention schedule.

After these periods, your personal information will be securely deleted or anonymised.

Processors and Data Sharing

We occasionally share your personal data with trusted third parties where necessary for delivering our services:

Payment Processors: To securely verify and complete transactions. Your full payment details are not stored by us, but by the payment services provider.
Delivery Partners: To deliver your order to the requested address. Only essential data (such as name, address, and any delivery instructions) is shared.
IT and Hosting Providers: For secure storage, website operation, and communication services.
Professional Advisors: Such as accountants or legal advisors, for compliance purposes.

All suppliers and partners are required to process your data in accordance with this policy, applicable laws, and under strict contractual terms. We do not sell or rent your personal data to any third party for marketing or any other purpose.

International Transfers

Your data is primarily stored and processed within the UK and European Economic Area (EEA). If any processing of your data takes place outside these areas, we will ensure appropriate safeguards, such as standard contractual clauses, are in place to ensure your data remains protected.

User Rights

Under the GDPR, you have key rights regarding your personal data. These include:

Right of Access: Request to see the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data where there is no legal reason for us to continue processing it.
Right to Restrict Processing: Ask us to temporarily pause processing your data in certain circumstances.
Right to Data Portability: Request a copy of your data in a structured, commonly-used, machine-readable format.
Right to Object: Object to our use of your data where processing is based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

If you wish to exercise any of these rights, please contact us via our website contact form or in writing. We will respond to your request within one calendar month, as required by law. We may request proof of identity before fulfilling your request.

Security Measures

We take appropriate technical and organisational measures to safeguard your personal data from unauthorised access, disclosure, alteration, or destruction. These include secure storage, data minimisation principles, access controls, and encryption where appropriate. While we do our utmost to protect your personal data, no data transmission over the internet can be fully guaranteed as secure.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal or regulatory requirements, our services, or our data processing activities. Any substantial changes will be highlighted on our website, and, where appropriate, notified to you directly.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us through our website’s contact form or by post. We are committed to responding promptly and to protecting your privacy.