Your Data Rights with Flower Delivery Milton Keynes

Privacy Policy – Flower Delivery Milton Keynes

Introduction

This Privacy Policy explains how Flower Delivery Milton Keynes collects, uses, stores, and protects your personal data when you place orders with us. This policy applies to all customers placing orders for flower delivery in Milton Keynes and surrounding districts, in accordance with our obligations under the General Data Protection Regulation (GDPR).

The Personal Data We Collect

When you place an order with Flower Delivery Milton Keynes, we may collect and process the following types of personal data:

Identity Data: such as your full name.
Contact Data: including your address, delivery address, telephone number, and other relevant contact details.
Order Data: such as details of your purchases, transaction history, and delivery instructions.
Payment Data: although we do not store full card details, payment information may be processed through secure third-party payment processors.
Communication Data: such as emails, order notes, or telephone correspondence with our customer service team.
Technical Data: including your IP address, device type, browser type, and other technical information collected through cookies or similar technologies when using our website.

Lawful Basis for Processing Your Data

We only process your personal data when we have a lawful basis for doing so, as required under the GDPR. The lawful bases applicable to our operations include:

Contractual Necessity: Processing is necessary in order to fulfil your order, including confirming your order, delivering flowers, and communicating with you about your purchase.
Legal Obligations: To comply with any legal requirements, such as maintaining financial records for tax and accounting purposes.
Legitimate Interests: Processing data for our business interests, such as improving our services, fraud prevention, or answering your queries, provided these interests are not overridden by your rights and interests.
Consent: For sending marketing or promotional materials, where you have explicitly opted in. You may withdraw consent at any time.

How We Use Your Personal Information

Your personal data is used for the following purposes:

To process and fulfil your flower delivery order, including communicating updates and handling deliveries.
To manage customer support enquiries or resolve complaints.
To process payments securely via approved payment processors.
To maintain records for internal administration and statutory obligations.
To personalise your customer experience and enhance our services.
To send marketing communications, where you have given explicit consent.
To detect and prevent fraud or misuse of our services.

Who Processes Your Data

Flower Delivery Milton Keynes works with several data processors to provide our services. Data processors are trusted third-party companies that may process your data strictly under our instructions and for designated purposes only, such as:

Payment Service Providers: To securely process your payment transactions.
Delivery Partners: To fulfil and deliver your floral order to the specified address.
IT Service Providers: To host, support, and maintain our website and systems.
Marketing Platforms: To send communications or process customer preferences, when you consent.

All processors are required to maintain strict confidentiality and to adhere to the requirements of the GDPR. We do not sell, rent, or trade your personal data to third parties.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy and comply with our legal and regulatory obligations. Typically, this means:

Order and payment data will be kept for up to seven years for accounting or legal requirements.
Customer support and communication records are retained for up to three years after the closure of your enquiry.
For marketing purposes, we retain your details until you withdraw your consent or unsubscribe.

Once data is no longer required, we will securely delete or anonymise it.

Your Data Rights

You have several rights under the GDPR regarding your personal data. These include:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You can request that inaccurate or incomplete data be corrected.
Right to Erasure: In certain circumstances, you may request deletion of your data.
Right to Restrict Processing: You can request that we temporarily limit the way we use your data.
Right to Data Portability: You may receive your data in a structured, commonly used format and transfer it to another provider.
Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where consent is the lawful basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact us using the information on our website. For your protection, we may request proof of identity before responding to any request.

Transfers Outside the UK or EEA

Your personal data is generally processed within the UK and European Economic Area (EEA). If data must be transferred outside the UK or EEA, we ensure that appropriate safeguards are in place in accordance with the GDPR to protect your data.

Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, theft, alteration, or disclosure. This includes secure servers, encrypted communications, and restricted staff access based on operational necessity.

Updates to This Policy

This Privacy Policy is reviewed regularly and may be updated from time to time to reflect changes in our practices or changes in applicable law. Updates to the policy will be documented here and you should review this page periodically for the latest information.

Contacting Us

If you have any queries about this policy or about how your data is handled, please refer to the contact or privacy information available on our website. We are committed to promptly addressing your concerns and upholding your data rights.