Privacy Policy for FlowerDeliverExpress.com

1. Introduction

At FlowerDeliverExpress.com (“we”, “us”, or “our”), we are committed to safeguarding the privacy and personal data of our customers, users, and visitors (“you”, “your”). We recognize the importance of transparency, accountability, and data protection in operating a trusted online flower delivery platform. This Privacy Policy outlines how we collect, use, share, and protect your personal information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable data protection laws.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through our website, flowerdeliverexpress.com, and related services. We act as the “data controller” with respect to the personal data we collect, meaning we determine the purposes and means of processing that data.

By accessing our website or using our services, you acknowledge and agree to the practices described in this policy.

3. Categories of Data Processed

We collect and process the following categories of personal data:

a. Usage Data

Information about your interaction with our website, including IP address, browser type, language settings, time zone, referring URLs, clickstream data, access times, and session duration. This data helps us analyze traffic patterns and improve user experience.

b. Account Data

Personal identifiers provided at account registration or checkout, such as your full name, billing and delivery address, email address, and telephone number.

c. Profile Data

Information related to your order history, preferences, preferences for flower types or colors, saved addresses, and behavioral insights gathered through your activity on flowerdeliverexpress.com.

d. Communication Data

Records of your interaction with us, including customer support messages, submitted forms, reviews, and any documentation or correspondence sent through email or our contact forms.

e. Technical Data

Device-specific data such as your operating system, hardware model, mobile network information, and browser settings.

f. Transaction Data

Details necessary for order fulfillment including purchased products, payment method (note: we do not store full credit card numbers), delivery dates, tracking numbers, and order status.

g. Preference Data

Your consent selections regarding marketing communications, product updates, and promotional content, as well as your expressed interests and preferences during interactions with services on flowerdeliverexpress.com.

4. Legal Bases for Processing

We process your personal data on the following legal grounds:

– Contractual Necessity: To fulfill orders, provide customer service, and administer your account.
– Legitimate Interests: To enhance our services, improve performance, and prevent fraud.
– Consent: For sending marketing communications or collecting cookies beyond the strictly necessary type, where required by law.
– Legal Obligation: To comply with laws, regulations, and lawful requests from authorities.

5. Your Rights

Under applicable data protection laws, you have the following rights concerning your personal data:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You can correct inaccurate or incomplete personal information.
– Right to Erasure: Also known as the ‘Right to be Forgotten’, you can request deletion of your data.
– Right to Restriction: You may limit our processing of your data under certain conditions.
– Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller, where technically feasible.

To exercise these rights, contact us at [email protected].

6. Security Measures

We implement robust technical and organizational security measures to protect your data, including:

– End-to-end encryption for sensitive data transmissions (e.g., HTTPS SSL/TLS encryption).
– Strict access controls and authentication protocols for data access.
– Regular data backups, integrity checks, and redundancy procedures.
– Staff training programs on data protection and cyber hygiene.

While we strive to use commercially acceptable methods to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

7. International Transfers

Personal data we process may be transferred to and stored in jurisdictions outside your own, including to countries that may not provide the same level of data protection. Where such transfers occur, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or other lawful mechanisms to ensure adequate protection of your personal data.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including:

– Usage Data: Up to 2 years for analytics purposes.
– Account Data: Retained while your account remains active and no longer than 5 years after closure unless required for legal obligations.
– Profile & Preference Data: Retained for up to 3 years from last activity.
– Transaction Data: Retained for 7 years for accounting and compliance.
– Communication Data: Retained for 3 years after resolution.
– Technical Data: As long as reasonably necessary for diagnostics and operations.

Data may be anonymized or securely deleted once retention periods expire.

9. Cookie Policy

We use cookies and similar technologies on flowerdeliverexpress.com, categorized as follows:

– Essential Cookies: Required for core website functionality such as cart management and checkout process.
– Functional Cookies: Enhance usability, including remembering preferences and settings.
– Analytics Cookies: Collect aggregated data on site usage; we use third-party tools such as Google Analytics.
– Performance Cookies: Monitor uptime, load speeds, and responsiveness to improve service delivery.

We do not use cookies to collect sensitive data or for undisclosed third-party profiling.

10. Cookie Management and Compliance

When accessing flowerdeliverexpress.com, you are presented with a cookie banner offering clear, affirmative options to accept, reject, or customize cookie usage, in compliance with GDPR and CCPA requirements.

You can withdraw your consent at any time via our Cookie Settings interface, and you may adjust browser settings to block or delete cookies independently.

We honor Do Not Track signals and provide users with the ability to opt out of personal data sales (as defined by the CCPA).

11. Children’s Privacy

Our website and services are not directed to or intended for children under the age of 13. We do not knowingly collect personal information from individuals in this demographic. If we learn that we have inadvertently received such data, we will promptly delete it.

12. Policy Updates & Notifications

We reserve the right to amend this Privacy Policy at any time to reflect changes in our practices, applicable law, or operations. Material changes will be communicated through updates on this page and, where appropriate, by email notification or website banners.

By continuing to use flowerdeliverexpress.com after such changes are posted, you accept the modified policy.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our handling of your personal data, please contact us at:

Email: [email protected]

We are committed to protecting your privacy and complying with applicable data protection requirements. You may also contact your local data protection authority if you believe your rights under GDPR or CCPA have been violated.