Flowers Kingsbury Customer Privacy Policy

Introduction

This Privacy Policy describes how Flowers Kingsbury collects, uses, and protects your personal information when you place orders with us. The policy aligns with the requirements set out in the UK General Data Protection Regulation (UK GDPR). It applies to all customers who order from Flowers Kingsbury in Kingsbury and the surrounding districts, whether ordering online, in person, or by telephone.

What Data We Collect

When you interact with Flowers Kingsbury, we may collect the following categories of personal data, as required for managing your order and providing our services:

  • Contact Information: Name, delivery address, billing address
  • Communication Details: Telephone number, written correspondence or order notes
  • Order Details: Items ordered, delivery preferences, special instructions, order history
  • Payment Information: Payment method and transaction data (note: payment card details are processed securely via our payment processors and not stored by us)
  • Technical Information: When using our website, we may collect your device IP address and browser details for security and analytical purposes

Lawful Basis for Processing Your Data

Flowers Kingsbury relies on several lawful bases under the UK GDPR to process your personal data:

  • Contractual Necessity: Most of the personal information we process is provided directly by you so we can fulfill your order. Without your data, we would not be able to deliver your flowers or process your payment.
  • Legal Obligation: We may be required to keep certain records to meet legal or regulatory requirements, such as maintaining tax records or resolving disputes.
  • Legitimate Interests: We may contact you for feedback after your order or analyze overall ordering trends to help us improve our services. We ensure that our interests do not override your own rights and freedoms.
  • Consent: Where you consent to receive marketing communications, we will process your data for this purpose. You can withdraw your consent at any time.

How We Use Your Data

We use your personal data strictly for the purposes necessary to:

  • Process and fulfill your flower orders and provide delivery services
  • Communicate with you regarding your order status, confirmation, or any queries
  • Handle payment transactions through trusted payment providers
  • Respond to requests, enquiries, or complaints
  • Meet our legal obligations and resolve any disputes
  • Improve our products, services, and customer experience through feedback and analytical insights

How Long We Retain Your Data

Flowers Kingsbury will keep your personal data for no longer than is necessary to fulfill the purposes for which it was collected, including for legal, accounting or reporting requirements:

  • Order Records: Retained for up to six (6) years after your last order to comply with tax and legal obligations
  • Communication and Enquiries: Kept for as long as required to resolve your enquiry, and for up to two (2) years thereafter
  • Marketing Consents: Maintained until you withdraw your consent

Data is securely deleted or anonymised when no longer required.

Who Processes Your Data (Processors and Third Parties)

Flowers Kingsbury only shares your personal data where strictly necessary and with trusted partners who are required to process data in compliance with UK GDPR. These may include:

  • Payment Providers: To process payments securely for your orders
  • Delivery Partners: If we use couriers or drivers to deliver your flowers
  • IT and Hosting Providers: Who provide secure hosting, website and email functionality
  • Professional Advisors: For legal, business, or compliance purposes

We do not sell or share your personal information for third-party marketing. All data processors act only on our instructions and are subject to appropriate confidentiality and security obligations. Your data is processed and stored in the United Kingdom and is not transferred outside the UK or EEA unless adequate safeguards are in place.

Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Ask us to correct any inaccurate or incomplete data
  • Right to Erasure: Request your data be deleted where it is no longer necessary for us to keep it, unless we have legal grounds for retention
  • Right to Restrict Processing: Ask us to limit how your data is used in certain circumstances
  • Right to Object: Object to our processing of your data where we rely on legitimate interest or direct marketing (including profiling)
  • Right to Data Portability: Receive your data in a structured, commonly used and machine-readable format
  • Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent (such as for marketing communications)

To exercise your rights, please contact us using the contact details provided on our website or at our business premises. We take your privacy seriously and aim to respond to all legitimate requests within one month.

How We Safeguard Your Data

Flowers Kingsbury implements robust organizational and technical measures to help ensure your data is secure. These include, but are not limited to, encryption of electronic records, secure payment processing, restricted user access, regular staff training, and data minimisation. We regularly review these safeguards to protect against unauthorized access, disclosure, alteration, or destruction of your personal information.

Changes to This Policy

We may update this Privacy Policy occasionally, for example, to reflect service changes, legal requirements, or best practices. We recommend checking this page periodically for any updates. If there are significant changes, we will notify customers where reasonable and appropriate.

Contact and Complaints

If you have any questions about how your personal data is handled, or if you would like to exercise any of your rights under this policy, please get in touch using the contact information provided on our website or at our Kingsbury location. If you believe that Flowers Kingsbury has not handled your data appropriately under the law, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Policy Applicability

This Privacy Policy covers all customers who place orders with Flowers Kingsbury from Kingsbury and the surrounding districts. By placing an order, you acknowledge the collection and use of your data as set out above.