Kensal Green Florist Privacy Policy
Introduction
This Privacy Policy explains how Kensal Green Florist collects, uses, stores, and protects your personal information in accordance with the General Data Protection Regulation (GDPR). It applies to all customers placing flower orders with Kensal Green Florist, whether you are based in Kensal Green itself or surrounding districts. By using our services, you acknowledge and accept the terms of this Privacy Policy.
What Data We Collect
To provide our floral services, we may collect and process the following categories of data:
- Identity Data: Name, title, and recipient details.
- Contact Data: Delivery address, billing address, and telephone number.
- Transaction Data: Details of the orders you make, payment methods selected, and purchase history. (Note: We do not store or process your credit/debit card details. These are handled securely via our payment processors.)
- Correspondence: Any communications you send to us, such as queries or feedback.
- Technical Data: IP address, browser type/version, and usage data when you interact with our website for order placement (where applicable).
Lawful Basis for Processing Personal Data
We process your personal data based on legitimate and lawful grounds as set out by the GDPR, including:
- Contractual Necessity: We process data to fulfil our contract with you when you place an order—such as delivering flowers to the requested address.
- Legal Obligations: Certain transactions may require us to retain information for tax or record-keeping purposes.
- Legitimate Interests: We may use your data to improve our services, manage customer relationships, and prevent fraud, provided these interests are not overridden by your rights and interests.
- Consent: Where you have expressly permitted us, such as opting in to receive marketing updates or newsletters.
How We Use Your Personal Data
Your data is used to:
- Process and fulfil your orders, including delivery to recipients.
- Contact you regarding your purchase, any changes to our service, or to respond to your queries.
- Comply with our legal and regulatory obligations.
- Maintain business records necessary for accounting and audits.
- Improve our services and respond more effectively to future customer requests.
Data Retention
Your personal data is retained only for as long as necessary for the fulfilment of the purpose for which it was collected, including:
- Completion and delivery of your order or any related aftercare issues.
- Legal, taxation, and accounting requirements, where applicable.
- Record-keeping requirements to comply with regulatory authorities.
Typically, we retain your order-related data for up to seven years to comply with applicable legislation. Data used solely for marketing purposes will be retained until you withdraw consent or unsubscribe.
Data Processors and Sharing of Personal Data
To facilitate order processing and delivery, we may share your data with trusted third-parties, including:
- Payment Processors: These secure providers manage the financial transactions associated with your purchase. Kensal Green Florist does not store or process your payment card information directly.
- Flower Delivery Partners: Information necessary for delivery (recipient’s name, address, and contact number) may be shared securely with our delivery staff or partners in Kensal Green and surrounding districts.
- IT and Website Providers: Service providers who support our website, order management, and secure data storage.
We ensure all third-party processors are GDPR-compliant and process your data only according to our instructions. We never sell your personal data or allow it to be used for purposes unrelated to your order or dealings with Kensal Green Florist.
Your Rights Under GDPR
As a Kensal Green Florist customer, you have the following rights regarding your personal data under GDPR:
- Right of Access: You can request a copy of all personal data we hold about you.
- Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data.
- Right to Erasure: In certain circumstances, you may request the deletion of your personal data.
- Right to Restrict Processing: You can ask us to restrict processing (for example, whilst a correction is being made).
- Right to Data Portability: You may be entitled to receive the personal data you provided to us in a structured, commonly used, and machine-readable format for transfer to another provider.
- Right to Object: You may object to our processing of your data in certain circumstances, including direct marketing.
- Right to Withdraw Consent: If we process your data on the basis of consent, you may withdraw your consent at any time.
If you wish to exercise any of your GDPR rights, please contact us in writing. We may require proof of identity to safeguard your privacy and prevent unauthorised disclosures.
Security of Your Data
We are committed to ensuring the security of your information. Kensal Green Florist implements technical and organisational measures to protect your data from loss, misuse, unauthorised access, or disclosure. All computers, storage solutions, and communication channels are secured appropriately. Access to personal data is strictly limited to those who need it for service delivery.
International Transfers
Your data is primarily processed within the United Kingdom. In the unlikely event your data is transferred outside the UK or the European Economic Area (EEA), Kensal Green Florist will take all reasonable steps to ensure it is protected with appropriate safeguards as required by applicable data protection laws.
Additional Information and Changes
This policy may be updated periodically to reflect changes in our practices or legal obligations. Please review this page from time to time to stay informed of any updates. Continuing to use our services after changes have been made signifies acceptance of the updated policy.
Contact Us
To exercise your data rights, to ask questions, or to register a complaint about this Privacy Policy or our data management practices, please contact Kensal Green Florist in writing. We will respond to your request promptly and in accordance with applicable GDPR regulations.