Privacy Policy for Flower Delivery Chinatown Customers

Policy Overview

This Privacy Policy details how Flower Delivery Chinatown collects, uses, stores, and protects your personal data. It applies to all customers placing orders with Flower Delivery Chinatown in Chinatown and neighbouring districts. We are committed to upholding your privacy in compliance with the General Data Protection Regulation (GDPR) and other related legislation. Please take a moment to review the following information regarding your data.

What Data We Collect

When you interact with Flower Delivery Chinatown, we collect a variety of personal data necessary to provide our flower delivery services and enhance your customer experience. The types of information we typically collect include:

  • Identity Data: Name, title, and, if applicable, company name.
  • Contact Data: Delivery address, billing address, telephone number, and relevant contact details for recipients.
  • Order Data: Purchase histories, order details (such as product selections, date of order, and delivery instructions), and payment confirmation information (please note that full payment details like credit card numbers are processed securely by our payment partners and are not stored by us).
  • Communication Data: Records of communications with us, including customer service inquiries and feedback.
  • Technical Data: Where you use our website, we may collect information such as IP address, device information, browser type, and cookies (for more details, see our separate Cookie Policy).

We do not knowingly collect data from children under the age of 16. Our services are not intended for use by minors.

Lawful Basis for Data Processing

Under the GDPR, we process your data only where there is a lawful basis to do so, including:

  • Contractual Necessity: Processing is required to fulfil our contract with you, specifically to fulfil your order, deliver products, manage payments, and provide customer support.
  • Legitimate Interests: In some cases, we use your personal data to pursue legitimate business interests, balanced against your rights and expectations. This includes direct communications regarding your orders or enquiring about your satisfaction with our services.
  • Legal Obligation: We may process data if required to comply with a regulatory or legal requirement, such as tax or accounting laws.
  • Consent: In situations where your agreement is required (for example, marketing communications), we will request your explicit permission before processing data on this basis. You can withdraw your consent at any time.

How We Use Your Information

Your data is used for the following purposes and only as necessary to provide and improve our services:

  • Processing, packaging, and delivering your floristry orders.
  • Managing payments, refunds, and transactions.
  • Communicating with you regarding your orders or any issues that may arise.
  • Customer service and support, including resolving questions and complaints.
  • Internal business analysis and record keeping.
  • Compliance with legal requirements (for example, tax regulations).

Retention of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typical retention periods include:

  • Order and Transaction Data: Retained for up to seven years to comply with business and tax regulations.
  • Customer Relationship Data: Retained for the duration of your ongoing customer relationship with us, or until you request deletion, subject to legal constraints.
  • Marketing Data: Retained until you withdraw consent or opt out of communications.

At the end of the retention period, your data will be securely deleted or anonymized.

Data Processors and Sharing

To deliver a seamless and secure service, we may share your personal data with carefully selected third-party processors. These include:

  • Payment Service Providers: Process transaction information to complete purchases; we never store your full payment details.
  • Delivery Partners: Assist in delivering your purchase to the designated address.
  • IT and Hosting Providers: Store and safeguard your data, maintain website functionality, and provide technical support.
  • Accounting and Auditing Partners: Where required for financial, tax, or legal compliance purposes.

All data processors are contractually obliged to comply with GDPR requirements, use data only for agreed purposes, and maintain adequate security measures to protect your data. We do not sell or rent your personal information to third parties for marketing or any other purposes.

Your Rights Under GDPR

As a data subject in the European Union, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it.
  • Right to Restrict Processing: Ask us to suspend the processing of your personal data in certain circumstances.
  • Right to Data Portability: Request your data be provided in a structured, commonly used format and transferred to another data controller where technically feasible.
  • Right to Object: Object to the processing of your personal data under specific circumstances, such as for direct marketing.
  • Right to Withdraw Consent: Where data is processed on the basis of consent, you can withdraw this consent at any time without affecting the lawfulness of prior processing.

If you wish to exercise any of these rights, please contact us via the methods indicated on our website. We may request proof of your identity before fulfilling your request to protect your privacy and security.

Security Measures

We take the protection of your data seriously. All personal data is stored securely using appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse. This includes the use of secure servers, encryption, employee training, and regular security reviews.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in legislation, our business practices, or to clarify information. All updates take immediate effect upon posting. We recommend visiting this page regularly to remain informed about how your data is protected.

Contact and Further Information

If you have any questions about this Privacy Policy or how Flower Delivery Chinatown processes your personal data, please contact us using the details available on our website. We are committed to resolving any concerns promptly and transparently.