Flower Delivery Sands End Privacy Policy
  Scope of This Privacy Policy
This Privacy Policy applies to all customers placing orders with Flower Delivery Sands End from Sands End and the surrounding districts. It explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR). By placing an order with us, you consent to the practices described herein.
What Data We Collect
When you use our flower delivery services, we collect information that is necessary to process and fulfill your order. We may collect the following types of personal data:
  - Personal Details: Name, delivery address, billing address, and contact details such as telephone number.
- Order Information: Products purchased, order amounts, and delivery instructions.
- Payment Details: Payment method and transaction details (note: we do not store full payment card details; these are processed securely via payment processors).
- Communication Data: Information contained in correspondence with us, whether via forms, phone, or other means.
- Technical Data: IP address, browser type, device identifiers, and cookies when you visit our website, to help improve user experience and security.
Lawful Bases for Data Processing
We process your personal data under several legal bases as required by GDPR:
  - Performance of Contract: Most data is processed to perform our contract with you, including processing your orders, making deliveries, and handling payments.
- Legal Obligations: Some data is processed to comply with legal requirements, such as tax and accounting regulations.
- Legitimate Interests: We may process data to improve our services, send relevant communications, maintain security, or prevent fraud, so long as these interests are not overridden by your rights.
- Consent: Where required, we seek your consent for non-essential data processing, such as direct marketing choices.
How We Use Your Data
Your personal data is used for the following purposes:
  - Processing and fulfilling your flower orders, including delivery logistics.
- Maintaining contact regarding order status or issues.
- Managing payments, refunds, or billing queries.
- Enhancing our services and website functionality.
- Complying with our legal and regulatory obligations.
- Addressing inquiries, complaints, or customer service interactions.
- Sending updates or offers relevant to your interests where permitted.
Data Retention
We retain your personal data only as long as is necessary for the purposes for which it was collected, or as required by law. The retention periods are as follows:
  - Order Data: Generally kept for up to six years to meet accounting, tax, and legal obligations.
- Communication Records: Retained for up to two years to assist with follow-up queries or related customer service.
- Marketing Preferences: Retained until you opt out.
- One-off Orders: Data associated with orders is deleted once fulfillment and statutory requirements are completed, as detailed above.
Processors and Data Sharing
To deliver our services efficiently, we may share your personal data with trusted external entities, strictly for the purposes outlined in this Privacy Policy. These entities act as data processors and include:
  - Payment Processors: Secure services that handle payment transactions safely.
- Delivery Partners: Couriers and logistics providers that need specific details to fulfill your order delivery.
- IT and Hosting Providers: Companies that provide, operate, and support our ordering platform and databases.
- Professional Advisors: For compliance with legal, regulatory, or accounting obligations.
All such processors are required by contract to keep your personal information confidential and to process it only according to our instructions. We do not sell or rent your personal data to third parties for marketing purposes.
Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data held by Flower Delivery Sands End:
  - Right to Access: You may request access to a copy of the personal data we hold about you.
- Right to Rectification: You may ask for corrections to incomplete or inaccurate information.
- Right to Erasure: In certain circumstances, you may request we delete your personal data.
- Right to Restrict Processing: You can request we limit the use of your data in specific situations.
- Right to Data Portability: You may request your data in a structured, commonly used electronic format for transfer to another provider.
- Right to Object: You can object to processing for direct marketing or when processing relies on legitimate interests.
- Right to Withdraw Consent: Where consent is the basis for processing, you have a right to withdraw your consent at any time.
- Right to Lodge a Complaint: You have the right to contact a supervisory authority if you believe your data has been handled unlawfully.
We respond to all valid requests within one month, or inform you if additional time is needed due to complexity or volume of requests.
How We Protect Your Data
We take the security of your personal information seriously. Appropriate technical and organizational measures are in place to prevent unauthorized access, loss, or misuse of your data. These include restricting access to authorized staff, secure storage technologies, regular review of data security practices, and the use of encryption where feasible.
Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or service offerings. Any updates will be posted within this document, with the effective date marked clearly.
Contact and Further Information
If you have questions about this Privacy Policy or wish to exercise your rights under GDPR, you may contact us using the methods provided on our ordering platform or written correspondence to our registered address.