Florist Kenton Privacy Policy

Introduction

At Florist Kenton, we are committed to protecting the privacy and security of our customers' personal data. This Privacy Policy describes how we collect, use, store, and share your information in compliance with the General Data Protection Regulation (GDPR). The Policy applies to all individuals placing orders with Florist Kenton from Kenton and the surrounding districts.

What Data We Collect

When you place an order or interact with us, Florist Kenton collects and processes certain personal data. The categories of information we collect include:

• Contact Information: Name, delivery address, contact telephone number.
• Order Details: Products ordered, delivery date, recipient information (if different from the customer).
• Payment Information: Payment method details (note: we do not store complete card numbers; selected details are processed securely by payment providers).
• Communication Data: Notes or messages attached to the order, correspondence with our customer service team.
• Website Usage Data: Technical information such as IP address, browser type, and browsing patterns collected via cookies for site functionality and analytics.

Lawful Basis for Processing

Florist Kenton only processes your personal data where there is a lawful basis to do so, as required under GDPR. Our lawful bases include:

• Performance of a Contract: We require certain data to process your order and provide products and services you request.
• Legal Obligation: We retain transaction records in compliance with applicable tax and accounting laws.
• Legitimate Interests: For administrative purposes, to respond to your inquiries, improve our services, and ensure the secure operation of our business.
• Consent: We may ask for your permission for marketing communication or to process certain types of cookies for website analytics. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your floral orders.
• Communicating order updates or responding to your inquiries.
• Delivering flowers and gifts to the chosen recipient.
• Managing payments and refunds.
• Internal record keeping, audits, and reporting.
• Ensuring the security and usability of our website and services.
• Sending marketing communications, should you opt in.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. This includes:

• Order and delivery records for up to 6 years to comply with accounting and tax regulations.
• Customer service communications for up to 2 years for quality assurance and dispute resolution.
• Marketing data until you withdraw your consent or unsubscribe.
• Website usage data for up to 1 year for analytics and security monitoring.

Once this data is no longer needed, it is securely deleted or anonymised.

Data Processors and Sharing

To provide our services efficiently, Florist Kenton may share your data with selected third-party processors who assist us by providing:

• Payment processing
• Delivery and courier services
• Website hosting and maintenance
• Email and communication platforms
• Accounting and auditing services

These processors are contractually obliged to keep your information secure and only use it for the specified purposes. We do not sell your personal data to third parties. If a legal obligation arises, we may share your data with regulatory authorities.

Your Rights Under GDPR

As a data subject within Kenton and its surrounding districts, you are entitled to certain rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data, unless retention is required by law.
• Right to Restrict Processing: You can ask us to restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a machine-readable format.
• Right to Object: You have the right to object to certain types of processing, such as direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, please contact us using the communication options on our website. We will respond to your request within one month where possible.

Data Security

We protect your personal data using industry-standard security measures, including secure servers, data encryption, and restricted access protocols. Our staff and suppliers are trained to uphold strict data confidentiality. While we take every precaution to safeguard your information, no system can be fully guaranteed against unauthorised access.

International Data Transfers

Your personal data is processed and stored within the United Kingdom or European Economic Area. If there is any occasion where data may be transferred outside these regions, we ensure such transfers comply with applicable legal requirements and are protected by appropriate safeguards.

Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. The most current version will always be available on our website. Please review this page regularly to stay informed of how we are protecting your data.

Contacting Florist Kenton

If you have any questions about this policy or your personal data, please reach out to us using the contact form provided on our website. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) should you believe your rights have been infringed.

Florist Kenton remains committed to upholding your privacy and building a relationship of trust and transparency with all our valued customers.