Flower Delivery Soho Privacy Policy

Introduction

This privacy policy explains how Flower Delivery Soho collects, uses, stores, and protects your personal information when you place orders with us in Soho and the surrounding districts. Our commitment to safeguarding your privacy is central to the way we operate, and we fully comply with the General Data Protection Regulation (GDPR). This policy covers all customers who order flower delivery from Flower Delivery Soho for addresses in Soho and neighbouring areas.

What Personal Data We Collect

To process and deliver your orders efficiently, Flower Delivery Soho collects the following categories of personal data:

• Identity Data: Names of the sender and recipient.
• Contact Data: Delivery address, billing address, contact phone number, and email address of both the sender and the recipient.
• Transaction Data: Details of products ordered, payment method, transaction amounts (note: we do not store full card details), and order history.
• Communications Data: Any correspondence you send to us, special requests, or feedback forms completed.
• Technical Data: Partial IP addresses, browser type and version, device type, and usage patterns (if orders are placed online).

Lawful Basis for Processing

Flower Delivery Soho only processes your personal data when we have a lawful basis to do so, as set out by the GDPR. Our main lawful bases for processing include:

• Contractual Necessity: Data is processed where it is necessary to fulfill your order and deliver products to requested recipients.
• Legal Obligations: We retain certain information to comply with local and national regulations, such as accounting and tax legislation.
• Legitimate Interests: We may use your data to improve our services, ensure security, prevent fraud, or provide customer support, provided our interests do not override your rights.
• Consent: In specific cases, such as for direct marketing communications or collecting optional data, we will only process information with your explicit consent. You may withdraw your consent at any time.

How We Use Your Data

Your personal data is used solely for purposes such as processing orders, arranging deliveries, managing payments, sending order confirmations, and providing customer support. We may also contact you with updates related to your order or, with your permission, about future products and offers.

We will not sell or rent your data to third parties. We limit access to only those employees, contractors, and trusted third-party providers who require access to perform services for you.

Data Processors & Third Parties

To conduct our business, Flower Delivery Soho may engage carefully vetted third-party service providers (data processors) who process your data on our behalf for functions such as:

• Payment processing and fraud prevention
• Order and delivery management software
• Website hosting and IT maintenance
• Customer feedback tools

All our data processors are contractually obliged to conform to the requirements of GDPR and only process your data for specified purposes. We do not transfer your data outside of the UK or EEA unless adequate data protection measures are in place.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which we collected it—including satisfying any legal, accounting, or reporting requirements. Typically, your order data and communications will be retained for up to seven years to comply with tax and accounting practices. After this period, data is securely deleted or anonymised unless a legitimate business need or legal obligation requires extended retention.

User Rights Under GDPR

As a data subject under the GDPR, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your data, subject to certain legal obligations.
• Right to Restrict Processing: You may request limits on how we use your data in specific circumstances.
• Right to Object: You may object to the use of your data for certain purposes, including direct marketing.
• Right to Portability: You may receive your personal data in a structured format and request its transfer to another controller.
• Right to Withdraw Consent: Where processing is based on consent, this can be withdrawn at any time.

To exercise your rights, please contact our data protection representative. When you make a request, we may need information to verify your identity before providing access to your data or making requested changes.

Data Security

We take data security seriously and use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. This includes secure servers, encrypted transmissions, and restricted access policies for all staff.

Policy Updates

We may update this privacy policy from time to time to reflect changes in the law or the way we operate. Any changes will be posted on our website, and you are encouraged to review this policy periodically. Continued use of our services following updates indicates acceptance of the revised policy.

Contact & Complaints

If you have any questions about this privacy policy, how we handle your data, or wish to make a complaint, please contact our data protection representative. You are also entitled to contact the data protection supervisory authority in your country of residence within the UK or EEA if you are dissatisfied with our response.