Flower Delivery Tring Privacy Policy

Introduction

This Privacy Policy explains how Flower Delivery Tring ('we', 'us', 'our') collects, uses, stores, and protects your personal information when you place orders with us from Tring and the surrounding districts. We are fully committed to complying with the General Data Protection Regulation (GDPR) and aim to be transparent about our data practices. By placing an order with Flower Delivery Tring, you agree to the terms described in this Privacy Policy.

Information We Collect

When you place an order with Flower Delivery Tring, we collect the following types of personal data to process your request:

• Contact Information: This includes your name, delivery address, billing address, and any further information necessary for delivery.
• Order Details: The product(s) you order, purchase date, and delivery instructions.
• Payment Information: Credit/debit card details, payment transaction ID, or other related payment data (handled securely by our payment processor).
• Communication: Any messages or special instructions you leave when ordering, or any correspondence you have with us regarding your order.
• Device and Usage Information: Internet protocol (IP) address, browser type, operating system, and ordering activity, collected through cookies or other tracking technologies for website functionality.

Lawful Basis for Processing

We process your personal data on the following lawful bases under GDPR:

• Contractual necessity: Most of the data we collect is necessary to enter into or perform our contract with you—specifically, processing, fulfilling, and delivering your order.
• Legal obligations: Certain data may be processed as required by law, such as to comply with tax and accounting requirements.
• Legitimate interests: Sometimes, we process your data to pursue our legitimate interests, such as improving our services and ensuring the security of our website, provided these interests do not override your rights and freedoms.
• Consent: If and when you opt into marketing communications, we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used for purposes strictly related to processing your order and providing a seamless purchasing experience, including:

• Processing and fulfilling your flower delivery orders.
• Keeping you updated on the status of your order.
• Managing payments and refunds.
• Responding to your enquiries, feedback, or complaints.
• Improving our website functionality and customer service.
• Complying with legal and regulatory requirements.

Who Processes Your Data

We only share your personal data with trusted third-party service providers as necessary to process your order. Examples of data processors we engage include:

• Payment Processing Providers: Securely handle your payment transactions on our behalf. We do not store your full payment details on our servers.
• Delivery Partners and Couriers: Receive the necessary delivery information to fulfil your flower delivery accurately and on schedule.
• IT and Website Maintenance Providers: Support and maintain the security and functionality of our website.

All third-party processors are contractually obligated to comply with GDPR, act only on our instructions, and maintain appropriate data security standards.

Data Retention Policy

We retain your personal data only as long as necessary for the purposes for which it was collected, including fulfilling orders, complying with legal requirements, resolving disputes, and enforcing agreements. Typically, your order and delivery data are retained for up to six years post-transaction to comply with tax and accounting obligations. After this period, your information is anonymised or securely erased.

If you have registered an account or consented to marketing communications, we will retain your profile and contact data until you request deletion or withdraw consent.

Your Rights Under GDPR

As a customer placing orders with Flower Delivery Tring, you have the following data protection rights under GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no legal reason for us to continue processing it.
• Right to Restriction: Request limiting the processing of your data in certain circumstances.
• Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to certain types of processing, such as direct marketing or processing based on legitimate interests.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise your rights, please contact us using the methods provided on our website. We take all requests seriously and aim to respond within one month.

Data Security

We implement suitable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include secure payment gateways, encrypted data storage, and access controls for our team members and processors.

Changes to This Policy

We reserve the right to update this Privacy Policy as necessary to reflect legal requirements or changes in our operations. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy regularly.

Applicability

This Privacy Policy applies to all customers placing Flower Delivery Tring orders from Tring and the surrounding districts. By placing an order, you confirm your understanding and acceptance of the terms set out in this policy.