Privacy Policy for Flowers Chinatown Customers
Introduction
This Privacy Policy outlines how Flowers Chinatown (“we”, “us”, or “our”) processes your personal information. It applies to all customers ordering from Flowers Chinatown located in Chinatown and the surrounding districts. We are committed to protecting your data and upholding your rights in line with the General Data Protection Regulation (GDPR).
What Data We Collect
When you place an order with Flowers Chinatown, we may collect the following categories of personal data:
- Identification Data: Name (first and last), delivery recipient’s name
- Contact Data: Delivery address, billing address, contact telephone number
- Order Data: Products ordered, delivery instructions, messages to recipients
- Transaction Data: Payment confirmation, date and time of order, purchase history
- Device & Technical Data: IP address, browser type, device information (if ordering online), and cookies as necessary for order processing
Lawful Basis for Processing Data
We process your personal data on the following lawful bases, as provided under the GDPR:
- Performance of a Contract: We require your data to fulfill and deliver your flower orders.
- Legal Requirements: Some data must be retained or provided to authorities as required by applicable law.
- Legitimate Interests: We use data to improve our products and services, ensure correct and timely delivery, and prevent fraud. All such usage is balanced against your rights and expectations.
- Consent: In cases where we wish to use your data for marketing, newsletters, or promotions, we will always seek your explicit consent, which you may withdraw at any time.
Use of Your Personal Data
Your personal data is used only for the purposes for which it was collected, including:
- Processing and delivering your flower orders
- Providing customer service and responding to your queries
- Managing payments and preventing fraudulent transactions
- Improving our website, services, and customer experience
- Sending notifications regarding your order and (only with your consent) updates or promotions
Data Retention
Your personal data will be stored only for as long as is necessary for the purposes for which it was collected. This typically means we retain:
- Order and transaction data for up to 6 years, in line with legal and accounting requirements
- Customer account data (if applicable) until you request deletion
- Cookies and technical data, according to our internal cookie retention policy and for no longer than necessary to fulfill the stated purposes
Once your data is no longer required, we will securely delete or anonymize it.
Processors and Sharing Data
We may share your data with trusted third-party processors only as necessary to fulfill your order and provide related services. These may include:
- Payment processing providers for handling payments and refunds
- Delivery partners or couriers to deliver your order to your chosen address
- IT service providers who support our website and order management system
All third-party processors are chosen carefully and are required to comply with the GDPR. They are not authorized to use your personal data for any other purpose than to provide the agreed-upon service.
Your data will not be sold or shared with unrelated third parties for commercial purposes.
Security of Your Data
We employ appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure storage, and regular internal reviews.
Your Rights Under GDPR
As a customer, you have the following rights with respect to your personal data:
- Right to Access: You can request information about the data we hold about you and how it is processed.
- Right to Rectification: You can ask us to correct or update your data if it is inaccurate or incomplete.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to any legal requirements for its retention.
- Right to Restriction: You may ask us to restrict the processing of your data in certain situations (for example, if you contest its accuracy).
- Right to Data Portability: You are entitled to obtain and reuse your personal data for your own purposes across different services.
- Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: Where we process data based on your consent (for example, promotional messages), you can withdraw your consent at any time.
To exercise any of these rights, please contact us using the method described on our website.
Policy Scope and Updates
This policy applies exclusively to customers placing orders with Flowers Chinatown in Chinatown and the surrounding districts. Any updates will be posted on our website, and we encourage you to review this policy regularly to stay informed on how we are protecting your personal data.
Contact Us
If you have any questions, concerns, or wish to exercise your GDPR rights in relation to your personal data, please refer to the contact information provided on our website. We are committed to responding promptly and respectfully to all privacy-related requests.