Florist Kidbrooke Privacy Policy

Introduction

This Privacy Policy describes how Florist Kidbrooke collects, uses, stores, and protects your personal data when you place orders with us. This policy applies to all customers placing orders with Florist Kidbrooke from Kidbrooke and surrounding districts. We are committed to safeguarding your privacy and ensuring we comply with the General Data Protection Regulation (GDPR) and other relevant privacy laws.

What Personal Data We Collect

We collect the following categories of personal data when you place an order or interact with Florist Kidbrooke:

Contact Information: Name, address, delivery address (if different), and your contact details such as phone number and postal code.
Order Information: Details about your order, including products purchased, recipient information (when you order delivery to another person), and personal messages included with orders.
Payment Information: Payment method details. Please note, we process payments securely via third-party payment processors and do not retain your complete card or bank details.
Communication Records: Correspondence between you and Florist Kidbrooke, including order inquiries or feedback.
Website Usage Data: If you visit our website, technical data such as your IP address, browser type, and access times may be collected for website analytics and security purposes.

Lawful Basis for Processing Your Data

We process your personal data under several lawful bases as permitted under GDPR:

Contractual Necessity: To process and complete your orders, deliver products, communicate with you about your purchase, and manage your customer requests.
Legal Obligation: To comply with relevant legal, tax, and accounting requirements.
Legitimate Interests: To improve our products and customer service, handle customer inquiries, and develop our business. Where we rely on legitimate interests, we ensure our interests are balanced against your rights.
Consent: On occasion, we may ask for your consent for specific uses, such as to send marketing information. Where consent is required, you may withdraw it at any time.

How We Use Your Information

Your personal data is used for the following purposes:

Processing and fulfilling customer orders, including delivery of flowers and gifts to you or recipients named in your orders.
Providing customer support and handling inquiries, complaints, or feedback.
Contacting you to confirm orders, delivery arrangements, or issues affecting your purchase.
Complying with legal and audit obligations.
Enhancing our services, conducting internal reporting, and understanding customer preferences.
Where you have provided consent, sending you offers and updates about our products and services.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typically:

Order and account information: retained for up to seven years as required by law.
Marketing and communication preferences: retained until you unsubscribe or update your preferences.
Technical and website data: typically held for no longer than necessary for analytics or security, usually up to two years.

When data is no longer needed, it is securely deleted or anonymised, unless legal requirements oblige us to retain it for longer periods.

Processors and Data Sharing

In order to provide our services, we may share your data with trusted third-party processors, including:

Payment service providers who process payments securely on our behalf.
Couriers and delivery partners responsible for delivering your purchases to you or your recipient.
IT service providers who support our website, communications, and data storage solutions.
Professional advisers (such as accountants and auditors) where required by law.

All third-party processors are required to handle your data securely and in compliance with GDPR. We do not sell or rent your personal data to any third parties for their own marketing purposes.

Where data transfer outside of the UK or EU is necessary (for example, for data storage or processing), we ensure adequate safeguards are in place as required by law.

How We Protect Your Data

Florist Kidbrooke takes the security of your personal data very seriously. We use appropriate technical and organisational measures, including secure website connections (HTTPS), strong access controls, and regular staff training on data protection.

Your Data Protection Rights

Under GDPR, you have certain rights regarding your personal data. These include:

Right of Access: You can request a copy of your personal data held by us.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: You may ask us to delete your data (subject to legal requirements for retention).
Right to Restriction: You can request restrictions on how we process your data in certain circumstances.
Right to Data Portability: You can request your data in a machine-readable format for transfer to another provider.
Right to Object: You can object to certain types of processing, such as direct marketing.
Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details on our website. We aim to respond to your requests promptly and, in any case, within the legal timeframes.

Children’s Privacy

Florist Kidbrooke’s services are not directed to children under the age of 16. We do not knowingly collect or process data relating to children without appropriate parental consent. If you believe we have inadvertently collected such data, please contact us so we can remove it promptly.

Updates to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, processing activities, or legal requirements. The latest version will always be available on our website. We encourage you to review the policy periodically.

Contact and Complaints

If you have any questions about this Privacy Policy, data processing practices, or wish to make a complaint, please use the contact form or postal address provided on our website. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or the relevant supervisory authority if you believe your rights have been violated.