Privacy Policy for Flower Delivery South Kensington Customers

Introduction

This Privacy Policy sets out how Flower Delivery South Kensington collects, uses, stores, and protects your personal data when you place an order for flower delivery within South Kensington and the surrounding districts. We are committed to protecting your privacy and ensuring your personal data is handled in strict accordance with the UK General Data Protection Regulation (GDPR) and other applicable data protection laws.

Scope of this Policy

This policy applies to all customers placing orders with Flower Delivery South Kensington, both directly and via our website, for deliveries in South Kensington and nearby areas. By placing an order, you agree to the terms described here.

Data We Collect

When you use our services, we may collect, use, store, and transfer the following categories of personal data:

• Contact Information: such as your full name, delivery address, billing address, email address, and telephone number.
• Order Information: details about products ordered, delivery instructions, recipient's name and address, and any personalised messages.
• Payment Information: partial payment card details or transaction references, but not full card numbers, as these are processed securely by third-party payment processors.
• Correspondence: any information you provide when contacting us via our website, phone, or in writing, including feedback and customer support inquiries.
• Technical Data: such as IP address, browser type, operating system, and usage data collected through cookies or similar technologies for website analytics and security purposes.

Lawful Basis for Processing

We process your personal data only where a lawful basis applies under GDPR. The main legal bases we use are:

• Contractual Necessity: Processing your data is necessary to fulfil your order for flower delivery, create and manage your account, and provide customer support.
• Legitimate Interests: For internal administrative purposes, analysis to improve our services, and limited direct marketing to existing customers. We ensure such interests are balanced against your rights.
• Legal Obligation: To comply with law, such as maintaining records for taxation and responding to requests from authorities.
• Consent: Where required (for example, for marketing communications to new customers), we rely on your explicit consent, which you may withdraw at any time.

How We Use Your Data

Your data is used to:

• Process and fulfil your flower orders, including delivery to the intended recipient.
• Communicate with you regarding your order, including confirmations, updates, payment issues, and customer service follow-up.
• Process payments securely via appointed payment processors.
• Respond to inquiries and provide after-sales support.
• Comply with our legal and regulatory obligations.
• Improve our products, services, and website based on usage analysis (using only aggregated and anonymised data where possible).
• If you have opted-in, to send you occasional marketing, promotions, or notifications about new products and offers.

Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally:

• Order and account information is retained for up to 7 years from the date of your last transaction, to comply with taxation and financial rules.
• Correspondence and customer service records are kept for up to 3 years following the resolution of your inquiry.
• Technical data used for analytics is retained in anonymised form for up to 2 years.

Data Processors and Third Parties

We may share your personal data with trusted third-party service providers (known as 'Processors') strictly as necessary to deliver our services. These processors include:

• Payment Processing Providers: To securely handle card transactions and authenticate payments. We never store full card numbers or security codes ourselves.
• Delivery Partners: To facilitate flower deliveries to recipients in South Kensington and the surrounding areas.
• IT and Hosting Providers: To support our website hosting, storage, email delivery, and data security for the purposes described above.
• Professional Advisors: Such as accountants or legal consultants, as required for our business operations and compliance.

All third-party processors are contractually obliged to process your data only on our instructions, keep your data secure, and comply with relevant data protection legislation. We do not sell or share your data with third parties for their own marketing purposes.

International Transfers

Your personal data is stored and processed within the United Kingdom or European Economic Area (EEA) wherever possible. Should data ever be transferred outside these regions, we will ensure appropriate safeguards (such as standard contractual clauses) are in place as required by law to protect your rights and privacy.

Your Rights under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction or completion of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no longer a valid reason for us to keep it.
• Right to Restrict Processing: Request a restriction on processing of your data in certain situations.
• Right to Data Portability: Receive your data in a commonly used, machine-readable format and transmit it to another controller.
• Right to Object: Object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time without affecting prior processing.

If you would like to exercise any of these rights, please contact us through our website or by written notice. We may need to verify your identity to process your request.

Security of Your Data

We take your privacy seriously and use appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Our processes are subject to regular review and improvement.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in the law, our business, or technology. The updated version will be posted on our website with the effective date of the change. We encourage you to review this policy regularly.

Contact and Complaints

If you have any questions or concerns about your personal data or this Privacy Policy, please contact us via our website or by post. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled in accordance with the law.