Flowers West Kensington Privacy Policy

Introduction

This Privacy Policy sets out how Flowers West Kensington collects, uses, stores, and protects your personal data. This policy applies to all customers who place an order with Flowers West Kensington, whether you are based in West Kensington or the surrounding districts. We are committed to safeguarding your privacy and handling your information in a transparent and secure manner, in compliance with the General Data Protection Regulation (GDPR).

Scope of the Policy

This Privacy Policy applies to all personal data collected from individuals who place orders for flowers or related services with Flowers West Kensington. By placing an order, you acknowledge and agree to the practices described in this policy.

What Data We Collect

When you use our services, Flowers West Kensington may collect the following types of personal data:

• Identity Data: Name, surname, and, if applicable, company name.
• Contact Data: Delivery address, billing address, recipient address (if different), and postcode.
• Communication Data: Order details, gift card messages, and any correspondence or feedback you provide.
• Transaction Data: Information about products and services you have purchased from us, including payment details, though we do not store full card numbers or CVV codes.
• Technical Data: IP address, browser type, and information collected through cookies and similar technologies, where applicable.

Lawful Basis for Processing

Flowers West Kensington only processes your personal data where permitted by law. The lawful bases under GDPR which we rely on include:

• Contractual Necessity: Most of your data is processed to fulfill your orders and to perform our contract with you. Without this data, we would be unable to deliver your products or contact you regarding your purchase.
• Legal Obligation: We may process certain data to comply with legal and regulatory requirements, such as tax and accounting laws.
• Legitimate Interests: We may use your data to improve our services, prevent fraud, or resolve disputes, provided such use does not override your individual rights and freedoms.
• Consent: Where required, for example for sending marketing communications, we will ask for your clear and unambiguous consent. You may withdraw your consent at any time.

How We Use Your Data

Your data is used for the following purposes:

• To process and fulfill your orders for products and services.
• To manage payments, fees, and charges, and to collect and recover money owed.
• To communicate with you regarding your order, delivery, or customer service inquiries.
• To comply with our legal and regulatory obligations.
• To enhance and personalize your customer experience.
• To improve our website, products, and services, based on aggregated and anonymized data where possible.
• To send you marketing communications where permitted and with your consent, which you may opt out of at any time.

Retention of Your Data

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Generally, this means:

• Order Data: Retained for up to 7 years to meet tax and contractual obligations.
• Marketing Data: Retained until you withdraw your consent or unsubscribe.
• Technical Data: Retained for up to 2 years to improve site performance and security.

After these periods, your personal data will be securely deleted or anonymized.

Data Processors and Third Parties

To provide our services efficiently, Flowers West Kensington engages carefully selected third-party service providers, also known as data processors. These may include:

• Payment processing services (for secure handling of payments).
• Delivery and logistics partners (to ensure efficient order fulfillment).
• IT and system administration service providers (to maintain website security and reliability).
• Marketing service providers (to send communications, only with your consent).

All data processors act only on our instructions and are contractually obliged to comply with GDPR, to securely process your data, and not to use it for their own purposes.

We do not sell or share your personal information with unrelated third parties for their own marketing purposes.

User Rights Under GDPR

You have several important rights under GDPR, relating to your personal data. These include the right to:

• Access: Request a copy of your personal data held by us.
• Rectification: Have inaccurate or incomplete data corrected.
• Erasure: Request deletion of your data where there is no longer a lawful reason for us to hold it.
• Restriction: Limit the processing of your data in certain circumstances.
• Objection: Object to processing where we rely on legitimate interests or direct marketing.
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format for transfer to another provider.
• Withdraw Consent: Withdraw your consent for processing at any time where consent is the lawful basis for processing.

To exercise these rights, please contact us using the contact details provided on our website or in your order confirmation. We will respond to requests within one month, as required by law.

Data Security

We take security seriously. Appropriate technical and organizational measures are in place to protect your data against unauthorized access, alteration, disclosure, or destruction. Access to your personal data is restricted to employees and processors who need it to perform their duties and who are bound by confidentiality obligations.

International Data Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, we ensure adequate safeguards are in place as required by GDPR to protect your information, including standard contractual clauses or adequacy decisions.

Policy Updates

We may update this policy from time to time to reflect changes in how we process personal data or to comply with legal requirements. The latest version will always be available on our website and significant changes will be notified to you where appropriate.

Contact and Complaints

If you have any questions about how your personal data is used or wish to make a complaint, please get in touch using the details on the Flowers West Kensington website. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Thank you for trusting Flowers West Kensington with your personal data. Your privacy is important to us.