Flower Delivery Kingston Privacy Policy
Introduction
This Privacy Policy explains how Flower Delivery Kingston ("we", "our", or "us") collects, uses, shares, and safeguards your personal data when you place an order with us. The policy applies to all customers placing Flower Delivery Kingston orders from Kingston and surrounding districts. We are committed to handling your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable UK laws to ensure your privacy rights are respected and protected.
Personal Data We Collect
To provide our flower delivery services and fulfill your orders, we collect various types of information, including:
- Identity Data: Full name of the customer and recipient.
- Contact Data: Billing and delivery addresses, contact telephone numbers.
- Order and Transaction Data: Details of the products you purchase, delivery instructions, payment status, and transaction history.
- Payment Data: Payment method details (note that payment card data is securely processed by our payment processor and not stored by us).
- Correspondence: Communications you have with us regarding your order or our services.
- Technical Data: IP address, browser type, access times, and device information when you access our website.
We do not intentionally collect sensitive personal data (special category data) such as health information or data regarding children under 16 years of age. If you are aware that such data has been inadvertently provided, please notify us so we may remove it appropriately.
Lawful Basis for Data Processing
We only process your personal data where permitted by law. The lawful bases under GDPR that apply to our activities include:
- Contractual Necessity: Data is processed to enter into and perform the contract with you for flower delivery services.
- Legal Obligation: Compliance with legal obligations such as record-keeping, accounting, and tax requirements.
- Legitimate Interests: For purposes such as improving our service, preventing fraud, and communicating with you regarding your orders, provided your fundamental rights do not override these interests.
- Consent: Where required, for example in sending marketing emails, which will always be optional and subject to your clear consent.
How We Use Your Personal Data
Your personal information is used for the following purposes:
- Processing and fulfilling your orders for flower delivery.
- Communicating with you regarding your order, delivery updates, or to address your inquiries and requests.
- Managing payments, refunds, and addressing any payment issues.
- Providing customer support.
- Improving our products, offers, and overall service based on feedback or technical usage data.
- Complying with legal, tax, and regulatory obligations.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying legal, accounting, or reporting requirements. Typically:
- Order and Transaction Data: Retained for up to 6 years to meet our legal and contractual obligations.
- Customer Correspondence: Retained for as long as required to resolve issues and for up to 2 years after resolution.
- Marketing Consent: If you opt-in for marketing, data is held until you withdraw consent.
When data is no longer necessary, it will be securely deleted or anonymised.
Processors and Data Sharing
In the course of providing our services, we share your data with trusted third parties (data processors) who help us operate our business, including:
- Payment service providers (for secure payment processing).
- Delivery and courier partners (for completing flower deliveries).
- IT and website support providers (for service hosting, maintenance, and support).
- Professional advisors such as accountants or legal consultants (where necessary).
Each third-party processor is carefully vetted and contractually bound to process your data only according to our instructions and in compliance with GDPR requirements. We do not sell your data to any third party. Personal data may be disclosed if required by law or to protect our legal rights.
User Rights Under GDPR
As a data subject under the GDPR, you have specific rights with regard to your personal information processed by Flower Delivery Kingston:
- Right to be Informed: You have the right to know how your data is collected, used, and shared.
- Right of Access: You can request confirmation of what personal data we hold about you and obtain a copy.
- Right to Rectification: You can request corrections to inaccurate or incomplete personal information.
- Right to Erasure: Also known as the "right to be forgotten"; you may ask us to delete your data where there is no legal reason to retain it.
- Right to Restrict Processing: You can request limited use of your data in specific circumstances.
- Right to Data Portability: You can request to receive your personal data in a commonly used format, or to have it transferred to another provider.
- Right to Object: You may object to specific types of processing, including direct marketing.
- Rights in Relation to Automated Decision-Making: You have the right not to be subject to automated decisions that have legal effects.
To exercise your rights or for further information about your personal data, you may contact us using the details provided on our website. You also have the right to file a complaint with the UK Information Commissioner's Office if you are unhappy with our response.
Security and International Transfers
We employ appropriate technical and organisational measures to safeguard your data against loss, misuse, unauthorised access, or disclosure. Where we use third-party processors operating outside the UK or European Economic Area, we ensure adequate protection for your data through contractual safeguards or relevant legal frameworks.
Policy Updates
We may update this Privacy Policy as necessary to reflect changes in our practices or relevant laws. We encourage you to review this policy regularly to stay informed about our data management practices. Changes will be effective once posted on our website.
Contact Information
If you have questions regarding this Privacy Policy, your rights, or how we handle your personal data, please refer to the contact section on our website for details on how to reach us.