Effective Date: 13/12/2024

At www.yourperfectflowers.co.uk ("we," "us," or "our"), we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, www.yourperfectflowers.co.uk. It also informs you of your rights under UK data protection law.

1. Information We Collect

We may collect and process the following types of personal information:
Personal Identification Information: This includes your name, email address, postal address, phone number, or other details you provide when you fill out forms on our Website.
Usage Data: This includes information about how you interact with our Website, such as pages visited, links clicked, and other browsing activity.
Cookies and Tracking Data: We use cookies and similar tracking technologies to collect data about your interactions with our Website to improve functionality and personalize your experience.
Payment Information: If you make a purchase or donation on our Website, we may collect payment-related information, such as your credit/debit card details (however, these details are processed securely by third-party payment providers).

2. How We Use Your Information

We use the information we collect for the following purposes:
To provide and improve our services: We use your personal data to fulfil orders, provide customer support, and improve the functionality and user experience of our Website.
To send marketing communications: With your consent, we may send you promotional emails about our services, products, or updates. You can unsubscribe at any time.
To comply with legal obligations: We may process your personal data to comply with applicable laws, such as tax, accounting, or legal requirements.
To enhance security and prevent fraud: We use personal data to monitor for fraudulent activities and ensure the security of our Website and systems.

3. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following legal grounds:
Consent: Where you have provided consent, for example, when subscribing to marketing communications.
Contractual Necessity: To fulfil a contract with you, such as processing an order or providing a service you have requested.
Legitimate Interests: To pursue our legitimate business interests, such as improving our Website, marketing, and fraud prevention.
Legal Obligation: To comply with legal obligations, such as tax or record-keeping requirements.

4. Sharing Your Information

We may share your personal data with third parties in the following circumstances:
Service Providers: We may share your information with trusted third-party service providers who help us operate our Website, process payments, or provide customer support.
Legal Compliance: We may disclose your personal data if required to do so by law or if we believe in good faith that such action is necessary to comply with a legal obligation or protect our rights.
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner as part of that transaction.

5. International Transfers of Personal Data

We do not transfer your personal data outside the UK or European Economic Area (EEA) unless required for processing by our service providers. In such cases, we ensure that appropriate safeguards are in place, such as the use of standard contractual clauses or other legal mechanisms, to protect your data.

6. How We Protect Your Information

We implement a variety of technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, and destruction. These include encryption, firewalls, secure servers, and regular security assessments.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
Right to Restrict Processing: You can request that we limit the processing of your personal data under certain conditions.
Right to Data Portability: You can request a copy of your personal data in a structured, commonly used format to transfer to another controller.
Right to Object: You have the right to object to the processing of your personal data, including for direct marketing purposes.
If you wish to exercise any of these rights, please contact us using the contact details provided below.

8. How Long We Retain Your Data

We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. For example, we may retain transaction records for tax or legal purposes.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. For more information on how we use cookies and how you can manage your preferences, please refer to our Cookies Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any updates will be posted on this page with an updated effective date.