Kentish Town Florist Privacy Policy

Name: TIMELESS VICTORIAN
Brand: Kentish Town Florist
Price: 63.00 GBP
Availability: InStock

Introduction

This Privacy Policy explains how Kentish Town Florist ("we", "our", "us") collects, uses, and protects personal data of our customers. The policy applies to all individuals placing orders with Kentish Town Florist from Kentish Town and the surrounding districts. We’re committed to complying with the General Data Protection Regulation (GDPR) and related data privacy laws in the UK.

What Data We Collect

We collect personal information when you interact with us, primarily when you place an order for flowers or related products and services. The types of data we may collect include:

Identity Data: Your name, salutation, and, if you provide it, company name.
Contact Data: Billing and delivery addresses, telephone numbers, preferred contact method, and other details needed to fulfill orders.
Order Details: Products ordered, messages for recipients, order notes, and transaction data (excluding full payment card numbers, which are handled by our payment processors).
Recipient Details: Name, address, and contact information of recipients of your orders.
Technical Data: IP address, browser type, and other details collected via cookies when you visit our website, as allowed by your device or browser settings.
Correspondence Data: Records of communications, enquiries, or complaints.

Lawful Basis for Processing

Under GDPR, we must have a legal basis to process your personal data. We rely on the following bases:

Contractual necessity: To process and deliver your orders and fulfill contractual obligations.
Legal obligation: To comply with UK laws, including record keeping for accounting and tax purposes.
Legitimate interests: To improve our services, manage our business operations, and communicate relevant information. We always ensure that our interests do not override your rights.
Consent: For direct marketing communications, where required by law. You may withdraw consent at any time.

How We Use Your Personal Data

Kentish Town Florist processes your personal data for these main purposes:

Processing, fulfilling, and delivering your orders, including communicating about your order status.
Responding to your enquiries or requests for information.
Recording order history, facilitating payment, and maintaining financial records.
Improving our website and service through analysis of aggregated, anonymised data.
Sending marketing communication, offers, or updates if you have opted-in or have an ongoing customer relationship with us. You may opt out at any time.
Complying with applicable legal and regulatory requirements.

Who Processes Your Data (Third Party Processors)

Your data may be shared with selected third-party service providers acting as data processors on our behalf. These may include:

Payment Processors: Providers that process your payments securely (such as debit or card services). Kentish Town Florist does not store your full payment card details.
Delivery Partners: Couriers or delivery services to ensure that flowers and gifts are delivered to the intended recipients.
IT and Hosting Providers: Providers of our website hosting and technical infrastructure, who help us keep our systems secure and operational.

All processors are obligated under contract to protect your data, only use it as instructed, and comply with strict security requirements.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes described in this policy, including satisfying legal, accounting, and reporting requirements. Typically, order and transaction records are retained for seven (7) years in line with UK accounting standards.

Where your information is no longer required, we ensure it is securely deleted, anonymised, or destroyed.

Your Data Protection Rights

As a data subject under GDPR, you have the following rights regarding your personal data:

Right of Access: You may request access to the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You may request deletion of your data where there is no compelling reason for us to retain it.
Right to Restrict or Object: You may object to or request a restriction of certain processing activities.
Right to Data Portability: You may request your personal data in a structured, commonly used format to transfer to another provider.
Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time.

Requests may be subject to verification and legal limitations. We handle all rights requests within the timescales required by law.

Keeping Your Data Secure

We take security seriously and adopt suitable technical and organisational measures to protect your data against loss, unauthorised access, alteration, or disclosure. These include encryption, secure servers, password protection, staff training, and regular security reviews.

International Transfers

Your data is stored and processed within the UK or the European Economic Area (EEA), where possible. If we must transfer your data outside the EEA, we ensure appropriate safeguards are in place to comply with GDPR requirements.

Changes to this Policy

We may update this Privacy Policy in response to changes in law, guidance, or our business practices. The updated version will be made available on our website, with the date of revision. We encourage you to review it regularly.

Contacting Us

If you have any questions about this Privacy Policy, your data protection rights, or how we handle your personal information, please contact us through the customer service options available on our website or in-store.