Florist Kensal Green Data Privacy Policy
Introduction
This Privacy Policy explains how Florist Kensal Green collects, uses, stores, and safeguards the personal data of our customers who place orders from Kensal Green and its surrounding districts. Your privacy and the protection of your personal data are very important to us. We are committed to complying with the General Data Protection Regulation (GDPR) and all relevant data protection legislation.
Scope of the Policy
This policy applies to all customers of Florist Kensal Green, whether you place an order in person, online, or by telephone. It covers our collection and processing of your personal data when you buy floral products or related services in Kensal Green and the neighbouring areas.
What Personal Data We Collect
To process your orders and provide our services, we may collect the following types of personal data:
- Identity Data: Name, title
- Contact Data: Delivery address, billing address, email address, telephone number
- Order Information: Details of products and services purchased, order dates, delivery preferences, recipient names and addresses (if different from the purchaser)
- Payment Data: Payment card details (processed securely through our payment provider), transaction history
- Technical Data: IP address, browser type and version, time zone setting, operating system, and platform (collected via our website to enhance user experience and protect against fraud)
- Correspondence: Records of your communications with Florist Kensal Green (e.g., customer service queries, feedback).
Lawful Basis for Processing Data
We only collect and process your personal data when we have a lawful basis to do so under GDPR. These bases include:
- Contractual necessity: Processing is necessary to fulfil your orders and provide services that you have requested from us.
- Legal obligation: We may need to process personal data to comply with laws and regulations (for accounting, tax, and anti-fraud purposes).
- Legitimate interests: Processing is required for our business interests, such as managing and improving our services, maintaining security, and ensuring the quality of customer care, provided these interests do not override your rights and interests.
- Consent: Where we rely on your consent (for example, to send marketing messages), you may withdraw this consent at any time.
How We Use Your Data
Your personal data will be used for the following purposes:
- Processing and fulfilling orders, including delivery to you or to a nominated recipient
- Communicating order confirmations, updates, and resolving customer service queries
- Processing payments securely and handling refunds
- Managing our relationship with you, including seeking feedback and handling complaints
- Meeting our legal and regulatory obligations
- Improving our website, services, and customer experience
- Sending marketing information if you have given your consent (you may unsubscribe at any time)
Data Retention
We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain order and transaction records for up to seven years in line with UK accounting and taxation laws. Where personal data is no longer required, it will be securely deleted or anonymised.
Processors and Data Sharing
To deliver our services efficiently, we may share your personal data with trusted third parties (processors) who act on our instructions. These include:
- Payment service providers (for processing card transactions securely)
- Delivery partners and couriers (for fulfilling orders and arranging deliveries)
- IT and website hosting providers (for managing ordering systems and data storage)
- Professional service providers, including accountants and auditors (for regulatory compliance and business operations)
All third-party processors are required to treat your information according to the law, only use it for the specified purpose, and implement adequate security to protect your data. We do not sell your data or share your personal information with third parties for their marketing purposes.
Data Security
Florist Kensal Green employs a range of technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These measures include secure servers, encryption of payment data, access controls, and regular data protection training for employees.
Your Rights Under GDPR
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access: You can request access to the personal data we hold about you.
- Right to rectification: You may ask for correction of inaccurate or incomplete data.
- Right to erasure: You can request the deletion of your data where there is no good reason for us to continue processing it.
- Right to restrict processing: You can request that we limit the way we use your data.
- Right to data portability: You can request to receive your data in a commonly used and machine-readable format.
- Right to object: You may object to our processing of your data where we rely on legitimate interests or are using your data for direct marketing.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time.
If you wish to exercise any of these rights, please contact our data protection team by the methods provided on our website or in store. We may require you to verify your identity before completing your request.
Changes to This Policy
We may update this Privacy Policy occasionally to reflect legal requirements and changes in our operations or services. The latest version will always be available on our website, and significant updates will be brought to your attention where appropriate.
Questions and Contact
If you have any questions or concerns about how Florist Kensal Green handles your personal data, or if you wish to exercise your data rights, please refer to the contact information on our website or visit our store staff for assistance.
