Kensington Florist Privacy Policy

About This Privacy Policy

This Privacy Policy explains how Kensington Florist collects, uses, stores, and processes your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to all customers placing orders with Kensington Florist who are located in Kensington and the surrounding districts.

What Personal Data We Collect

Kensington Florist collects only the personal data needed to process your order and provide a quality service. The types of personal data we collect include:

• Contact Information: Your name, delivery address, billing address, and telephone number.
• Order Details: Information about the products you order, delivery instructions, gift messages, and any specifications you provide.
• Payment Details: Payment card information (processed securely by our payment service provider), and transaction history. Kensington Florist does not directly store full payment card details.
• Communications: Records of correspondence you have with us, including order queries and customer support requests.
• Website Usage: Technical information such as your IP address, browser type, and browsing behaviour if you visit our website, collected via cookies for analytics and improvement purposes.

Our Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful reason for processing your personal data. Our primary lawful bases for collecting and using your data are:

• Performance of a Contract: We require your personal information to process and deliver your order, and to carry out our contractual obligations to you as a customer.
• Legitimate Interests: We may use your information to enhance customer experience, respond to your enquiries, and improve our services, provided this does not override your fundamental rights and freedoms.
• Legal Obligations: We may retain certain information to meet legal and regulatory requirements, such as tax and accounting rules.
• Consent: Where we send marketing communications by email or similar methods, we do so only with your explicit consent. You can withdraw your consent at any time.

How We Use Your Personal Data

Kensington Florist uses your information for purposes including:

• Processing and delivering your orders
• Communicating with you about your order or our services
• Responding to your requests and queries
• Improving our website and services
• Complying with legal and regulatory obligations
• Sending you promotional materials, with your consent

How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including for order fulfilment, legal, accounting, or reporting requirements. Typically, order and contact records are kept for up to six years to meet statutory obligations. After this period, data is securely deleted or anonymised.

Cookies and other website usage data are retained in accordance with our website’s cookie management guidelines and are not kept longer than necessary for analytics purposes.

Data Sharing and Processors

Kensington Florist may share your personal data with trusted third parties who assist in providing our services. These third parties act only on our behalf (as 'processors') and are required to process your data in accordance with GDPR requirements. Such parties include:

• Payment service providers who process your payments securely
• Delivery partners to ensure successful delivery of your orders
• Website and IT support providers who help maintain, develop, and host our site

We do not sell or rent your personal information to any third parties. In rare cases, we may be required to share your information with law enforcement authorities to comply with legal obligations.

Your Rights Under GDPR

As a customer within Kensington and surrounding districts, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data that we hold.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your information where there is no legal reason for its continued processing.
• Right to Restrict Processing: Ask us to limit the use of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format for transfer to another controller.
• Right to Object: Object to the processing of your data, such as for direct marketing purposes.
• Right to Withdraw Consent: Withdraw any consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, or for questions regarding your data, you may contact us using the contact options provided on our website or in-store.

Data Security

Kensington Florist takes the security of your data seriously. We implement appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse of your personal information. These include secure payment processing, restricted access controls, and regular security reviews. Although we take all reasonable steps to safeguard your information, please note that data transmitted over the internet cannot be guaranteed to be entirely secure.

Changes to This Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. The latest version will always be available from our website and in-store. We encourage customers to review this policy periodically to stay informed of our data protection practices.

Contacting Kensington Florist

If you have questions regarding this Privacy Policy, your personal data, or wish to exercise your rights, please reach out through the contact methods listed on our website or visit us in-store. We will respond to your requests promptly and in accordance with applicable data protection laws.