Privacy Policy for Flowers Kingston Vale Customers
Introduction
This Privacy Policy describes how Flowers Kingston Vale (referred to as “we”, “our”, or “us”) collects, uses, stores, and protects the personal data of customers placing orders with Flowers Kingston Vale in Kingston Vale and the surrounding districts. We are committed to protecting your personal information and ensuring transparency about how your data is handled in compliance with the General Data Protection Regulation (GDPR).
Data We Collect
When you place an order or interact with Flowers Kingston Vale, we may collect and process the following types of personal data:
- Contact Information: Your name, billing address, delivery address, and contact details (such as telephone number).
- Order Information: Details about your purchases, chosen products, delivery instructions, and messages for recipients.
- Payment Information: Details necessary for processing payments (e.g., card information), though payment card information is handled securely by our payment processor and not stored by us.
- Communications: Any correspondence between you and us, including order inquiries, feedback, or support requests.
- Website Usage Data: Basic analytics data such as IP address, browser type, and website interaction, collected via cookies or similar technologies for site performance and security.
Lawful Basis for Processing
Under GDPR, we must have a lawful basis to process your personal data. Flowers Kingston Vale processes your information based on the following lawful grounds:
- Contractual Necessity: We process your personal data to fulfil our contract with you, such as completing your flower order, arranging delivery, and providing customer support.
- Legal Obligation: We may process your data to comply with legal requirements, such as for accounting or tax records.
- Legitimate Interests: Where necessary for our legitimate business interests, such as improving our services, preventing fraud, or marketing to existing customers (subject to your communications preferences).
- Consent: In specific circumstances, such as where you have subscribed to our newsletter, we may process your data with your explicit consent. You can withdraw your consent at any time.
Purposes for Collecting Your Data
We use the collected data to:
- Process and deliver your flower orders
- Communicate with you regarding your purchase and any updates to your order
- Handle customer service requests and resolve issues
- Comply with legal and accounting obligations
- Improve our products, services, and customer experience
- Market our services to you, provided you have not opted out
- Ensure the security of our website and systems
Retention of Your Data
We retain your personal data only for as long as necessary for the purposes for which it was collected. The specific retention period may depend on the type of data and the reason for its collection. In general:
- Order and transaction records are kept for up to 7 years, as required by accounting and tax laws.
- Customer communications are retained for up to 3 years from the date of your last interaction with us.
- Marketing data is retained until you unsubscribe or request deletion.
- Website analytics data is retained for up to 2 years.
When data is no longer required, it is securely deleted or anonymised.
Data Processors and Third Parties
To provide our services, we may engage third-party processors who handle your data securely and in accordance with GDPR. For example:
- Payment Service Providers: To securely process your payments.
- Delivery Services: For fulfilling and delivering your orders.
- IT and Hosting Providers: For website management, email communications, and data storage.
- Accountants or Legal Advisors: For compliance and record-keeping purposes.
We require all third-party processors to process your data only on our instructions, to maintain its confidentiality, and to implement appropriate security measures. We do not sell your personal data to any third parties.
Your Data Rights
As a customer in Kingston Vale and the surrounding districts, you have the following data protection rights under GDPR:
- Right to Access: You may request a copy of any personal data we hold about you.
- Right to Rectification: You may ask to correct or complete any inaccuracies in your data.
- Right to Erasure: You can request deletion of your data where there is no legal obligation for us to retain it.
- Right to Object: You may object to certain processing activities, such as direct marketing.
- Right to Restrict Processing: You may ask us to restrict how we process your data in certain circumstances.
- Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another provider.
- Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.
- Right to Lodge a Complaint: You have the right to complain to a supervisory authority if you believe your data has been mishandled.
To exercise any of these rights, please contact us using the details on our website or in your order confirmation.
Data Security
We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include secure servers, encryption, access controls, and staff training on data protection.
Policy Updates
We may make changes to this Privacy Policy from time to time to reflect updates in our practices, legal requirements, or our services. The most current version will always be available on our website, and significant changes will be communicated to you where appropriate.
Applicability
This Privacy Policy applies to all customers placing Flowers Kingston Vale orders from Kingston Vale and the surrounding districts. By placing an order or using our services, you acknowledge that you have read and understood this policy.