Florist South Kensington Customer Privacy Policy

Introduction

This Privacy Policy explains how Florist South Kensington collects, uses, stores, and protects your personal data when you place orders with us from South Kensington and the surrounding districts. We are committed to treating your information with respect and ensuring compliance with the General Data Protection Regulation (GDPR). Your trust is paramount to our business, and we are dedicated to safeguarding your privacy in all our interactions.

Scope of This Privacy Policy

This policy applies to all customers who place orders with Florist South Kensington, whether online, by phone, or in person, within South Kensington and nearby districts. By providing your information to us, you acknowledge that you have read and understood this policy.

What Data We Collect

We collect and process only the necessary personal information required to process your order, ensure delivery, and provide customer support. The types of data we typically collect include:

• Identification Details: Your name, title, and, when relevant, identification number.
• Contact Information: Address (for delivery and billing), telephone number, and order-related contact details.
• Order Details: Product selections, delivery date and time, special instructions, gift card messages, and notes you provide.
• Payment Details: Payment method and transaction information (we do not store your full payment card details; secure payment processors handle payments).
• Recipient Information: Name, address, and contact number for the intended recipient of your order.
• Communication Records: Details of your correspondence with us, such as customer service queries, feedback, or complaints.
• Technical Data: IP address, browser type, operating system, access times, and referring website addresses when you use our website.

Lawful Basis for Processing

We process your data based on one or more lawful grounds as defined in GDPR, including:

• Contractual Necessity: To fulfil your order, manage payments, coordinate deliveries, and provide related services.
• Legal Obligations: To comply with applicable laws and regulations, including tax and accounting requirements.
• Legitimate Interests: To improve our services, respond to your queries, ensure secure transactions, prevent fraud, and enhance the customer experience, provided that such interests do not override your rights and freedoms.
• Consent: Where required, such as for marketing communications, we will seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your personal data is used strictly for the following purposes:

• Processing and fulfilling your order, including arranging delivery to the specified address.
• Managing payment transactions through secure third-party processors.
• Communicating with you regarding your order, including confirmations and updates.
• Providing customer support and managing enquiries.
• Improving our services, analysing purchase trends, and managing internal operations.
• Fulfilling our legal and regulatory obligations.
• With your permission, sending you marketing updates or special offers.

Retention of Your Data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The standard retention periods are as follows:

• Order Records: Retained for up to seven years to comply with UK tax and accounting obligations.
• Customer Support Correspondence: Retained for up to two years following the resolution of your query.
• Marketing Consent Data: Retained until you withdraw your consent or request erasure.

Once retention periods have expired, your data will be securely deleted or anonymised.

Our Data Processors

To deliver our services, we rely on selected third-party processors with whom we share your data only to the extent necessary for fulfilling your order and managing our business. These processors include:

• Payment Service Providers: Securely handle your payment information for the purpose of processing transactions.
• IT & Web Hosting Providers: Host our website, maintain databases, and ensure technical security.
• Delivery Partners: Assist with the physical delivery of your order to recipients in South Kensington and surrounding districts.

Each processor is required to adhere to strict data protection and security standards in accordance with GDPR. We never sell your information to third parties or use it for unrelated purposes.

Your Rights as a Data Subject

Under GDPR, you have a range of rights with respect to your personal data. These include:

• Right of Access: You can request access to your personal data and obtain information on how it is processed.
• Right to Rectification: You have the right to request corrections to any inaccurate or incomplete data.
• Right to Erasure: In some circumstances, you can request that we delete your personal data.
• Right to Restrict Processing: You may ask us to limit the processing of your data under specific conditions.
• Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You can object to certain types of data processing, including direct marketing.
• Right to Withdraw Consent: If you have given consent for a particular use of your data, you may withdraw it at any time.
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority if you believe your data rights have been violated.

To exercise your rights, you may contact us through the channels provided on our website or during our standard customer communication processes. Please note that some rights may only apply in certain situations, and legal requirements may affect how we respond.

Data Security

We maintain appropriate technical and organisational measures designed to protect your data from unauthorised access, accidental loss, destruction, or disclosure. These include encryption, secure servers, regular security reviews, and access controls for staff and processors handling your data.

Policy Updates

This policy may be updated from time to time to reflect changes in our data practices or legal requirements. The most current version will always be available on our website, and, where appropriate, we will inform you of significant changes.

Contact and Further Information

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please refer to the contact information listed on our website or speak to our staff in-store. We are here to address your concerns and ensure your data is handled responsibly.