Privacy Policy for Flower Delivery Castelnau Customers

Introduction

This Privacy Policy explains how Flower Delivery Castelnau collects, uses, stores, and protects your personal data when you place orders with us, either directly or through our website. This policy is designed to ensure compliance with the UK General Data Protection Regulation (GDPR) and applies to all customers placing Flower Delivery Castelnau orders within Castelnau and its surrounding districts.

Scope of this Policy

This Privacy Policy covers the collection and processing of personal data from customers located in Castelnau and the neighbouring areas when they order products or services from Flower Delivery Castelnau. This includes both in-person and online orders. The policy applies to our full range of services and all points where we collect your data.

What Personal Data We Collect

Flower Delivery Castelnau collects and processes the following types of personal data when you place an order:

  • Identity Information: Your full name.
  • Contact Details: Delivery address, billing address, and postcode, as well as telephone number (where provided).
  • Order Information: Details of the products ordered, preferred delivery date and time, and special instructions or messages for recipients.
  • Payment Information: Payment confirmation from chosen payment processors (we do not store full credit or debit card details but may store a transaction ID for reference).
  • Recipient Details: Name, address, and contact details of recipients, for successful delivery.
  • Communication Records: Communications you send to us, such as queries, feedback, or complaints.
  • Technical Data: Information relating to your use of our website, including IP address, device information, and cookies, where applicable.

Lawful Basis for Processing Personal Data

Under the UK GDPR, we are required to have a lawful basis to process your personal data. Flower Delivery Castelnau operates under the following legal grounds:

  • Contract: Processing is necessary for the performance of a contract with you, such as fulfilling your flower delivery order.
  • Legitimate Interest: We may process your data to pursue legitimate interests that do not override your rights and freedoms, such as improving our service, handling queries, or preventing fraud.
  • Legal Obligation: We may process personal data when required to comply with legal or regulatory obligations.
  • Consent: Where none of the other grounds applies, we will seek your explicit consent, for example, for marketing emails (if applicable, and only where permitted by law).

How We Use Your Personal Data

Your data is used for the following purposes:

  • Processing and delivering your flower orders, including arranging delivery to your chosen recipient.
  • Taking payment and processing refunds if required.
  • Communicating with you about order status, customer support, or any issues that may affect your order.
  • Improving our website, services, and customer experience.
  • Fulfilling legal and regulatory duties and resolving disputes.

Retention of Personal Data

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typical retention periods are:

  • Order and Transaction Data: Retained for up to 6 years to comply with tax and transaction record requirements.
  • Communication Records: Retained for 2 years unless required for the resolution of ongoing disputes or complaints.
  • Marketing Preferences: Retained until you withdraw your consent or request that your data be removed from marketing lists.
  • Website Analytics: Retained for up to 2 years in anonymous or aggregated form where possible.

After these periods, data will be securely deleted or anonymised so that it can no longer be associated with you.

Processors and Data Sharing

We engage trusted third-party service providers (data processors) to perform specific business functions on our behalf. These include:

  • Payment Processors: Handling secure card and online payments.
  • Delivery Partners: Assisting in delivering your flower orders to recipients in Castelnau and surrounding districts.
  • IT and Hosting Providers: Maintaining our website and IT infrastructure.
  • Analytics Providers: Supplying information to help us improve our services (using aggregated, anonymous data where possible).

All service providers are required to comply with data protection laws and only use your personal data for specified purposes according to our instructions. We do not sell your personal data or share it for any unrelated third-party marketing purposes.

If legally required, we may disclose your information to public authorities or law enforcement agencies.

User Rights Under GDPR

You have important rights under the GDPR regarding your personal data, including:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of any inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, in certain circumstances.
  • Right to Restrict Processing: Request restriction of how we process your personal data.
  • Right to Data Portability: Request transfer of your personal data to another provider, where applicable.
  • Right to Object: Object to processing of your data based on legitimate interests, or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.
  • Right to Complain: Lodge a complaint with a data protection supervisory authority if you believe your data rights have been infringed.

If you wish to exercise any of these rights, please submit a written request. We may need to verify your identity before responding and will provide a prompt response as required by law.

Security of Your Personal Data

We are committed to protecting your personal data. We take appropriate technical and organisational measures to safeguard your data from unauthorised access, disclosure, alteration, or destruction. These protections include access controls, encryption where appropriate, secure payment processing, and regular review of our data handling policies and practices.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changes in legal, regulatory, or operational requirements. Any updates will be made available to customers via our website or upon request. We encourage you to review this policy periodically to remain informed about how your personal data is processed and protected.

Contact and Further Information

If you have any questions or concerns about this Privacy Policy, or would like more information on how we process your personal data, please contact us via the methods outlined on our website or through our customer service team. We are committed to responding to your privacy-related enquiries promptly and transparently.