Kennington Florist Privacy Policy

Introduction

At Kennington Florist, we value your privacy and are committed to safeguarding your personal information. This Privacy Policy sets out how we collect, use, and protect your data in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This policy applies to all customers placing orders with Kennington Florist from within Kennington and surrounding districts.

What Personal Data We Collect

When you interact with Kennington Florist, we may collect the following categories of personal data:

• Contact Information: Your name, postal address, delivery address, and phone number (if provided)
• Order Details: Items purchased, recipient details for delivery, card messages, and delivery instructions
• Payment Information: Billing address and payment method (note: payment card information is processed securely by our payment provider and not stored by Kennington Florist)
• Communications: Records of customer inquiries, feedback, or complaints you submit to us
• Technical Data: IP address, browser type, time zone setting, and information collected via cookies necessary for your order

Lawful Basis for Data Processing

Under GDPR, we must have a valid lawful basis to process your personal data. Kennington Florist relies on the following bases:

• Performance of a Contract: Most data we collect is necessary for fulfilling the contract to deliver your flower order, including processing payment and providing customer support.
• Legal Obligations: We may retain certain information to comply with UK accounting and taxation laws.
• Legitimate Interests: We may use your data to improve our services, prevent fraud, or respond to your queries—always ensuring our interests do not override your fundamental rights.

Purpose of Data Collection and Use

Your information is used for the following purposes:

• Processing and delivering your flower orders
• Communicating with you regarding your purchase or inquiries
• Handling payment and addressing refunds or complaints
• Complying with our legal and regulatory obligations
• Improving our service and business operations
• Monitoring and securing the use of our ordering platform

How Long We Keep Your Data (Data Retention)

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Order-related data is retained for up to seven years to comply with accounting and taxation requirements.
• Customer support communications are retained for up to two years from the date of your last contact with us.
• Information collected for marketing activities (if you have consented) is retained until you withdraw your consent.
• Technical data is stored for up to one year for security and operational reasons.

Once data is no longer required, it is securely deleted or anonymized.

Sharing Your Data with Third Parties (Processors)

Kennington Florist works with third-party data processors to provide our services in a secure and efficient manner, including:

• Payment Service Providers: To process your payments securely, we use trusted payment processors in compliance with PCI DSS standards.
• Delivery Partners: To ensure the delivery of your orders, your recipient's name and address may be shared with legitimate courier partners acting solely on our instructions.
• IT and Cloud Service Providers: For secure operation of our order management system and website hosting.

All our third-party processors are only permitted to use your data for specified purposes and in accordance with our instructions. We do not sell or rent your data to third parties.

International Transfers

We store your personal data in the United Kingdom or European Economic Area whenever possible. If it is necessary to transfer your data internationally, we ensure that adequate safeguards are in place to protect your rights under GDPR.

Your Data Protection Rights

Under GDPR, you have several important rights relating to your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: In certain circumstances, you may ask us to delete your personal data.
• Right to Restrict Processing: You may ask us to restrict processing of your data in some cases.
• Right to Data Portability: You can request us to provide your information in a commonly used format to transfer it to another provider.
• Right to Object: You can object to our processing of your personal data on grounds relating to your particular situation, particularly where we rely on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we are not handling your data lawfully.

To exercise your rights, please contact us using the details provided on our official communications or website.

Children’s Privacy

Our services are not intended for use by children under the age of 16. We do not knowingly collect data relating to children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The latest version will always be available on our website, and the date of the most recent update will be noted at the top of the document.

Contact and Queries

If you have any questions or concerns about how your personal information is handled by Kennington Florist, or if you would like to exercise any of your statutory rights, please contact us using the information provided on our official website or in your order documentation.

This policy is effective for customers placing orders within Kennington and the surrounding districts and reflects our commitment to your privacy.