Florist Kilburn Privacy Policy Overview

Introduction to Our Privacy Policy

This Privacy Policy details how Florist Kilburn collects, uses, discloses, retains, and protects your personal data when you place orders with us, either online or in-store, within Kilburn and the surrounding districts. We take your privacy seriously and act in accordance with the UK General Data Protection Regulation (GDPR) and all applicable data protection laws. Please read this policy carefully to understand your rights and our practices in relation to your personal data.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Florist Kilburn, whether these are made via our website, over the phone, or in person, and who are based in Kilburn and the surrounding districts. By placing an order with Florist Kilburn, you indicate that you have read and understood the terms described in this policy.

What Personal Data We Collect

We collect only the personal data necessary to process your order, deliver your flowers, and provide you with a high-quality service. The types of data we may collect include:

• Identity data: Full name, title
• Contact data: Delivery address, billing address, phone number, and, when provided, email address
• Order and transaction data: Details about your order, delivery preferences, card payment details (processed through secure payment processors), purchase history
• Recipient information: Name and delivery address of the recipient, as provided by the customer
• Correspondence data: Communications such as emails, letters, or notes related to your orders and enquiries

We do not collect or process any special category data (e.g., data revealing racial or ethnic origin, political opinions, health data) unless it is provided incidentally by the customer for order purposes.

Lawful Basis for Processing Data

Florist Kilburn processes your personal data under the following lawful bases, as allowed by the GDPR:

• Contractual necessity: To provide the goods and services you order (e.g., processing payments, arranging delivery).
• Legal obligations: For complying with our legal requirements (such as record keeping for tax and accounting regulations).
• Legitimate interests: For purposes including improving our services, handling queries or complaints, and maintaining business records. We ensure that our legitimate interests are not overridden by your rights and interests.
• Consent: Where you have given explicit permission for purposes such as receiving marketing communications. You may withdraw consent at any time.

How We Use and Store Your Data

Your data is used strictly for the purposes it was collected, which include:

• Processing and delivering your orders and keeping you informed about their status
• Managing payments and preventing fraud
• Responding to your enquiries and addressing complaints
• Fulfilling our legal and contractual obligations
• Improving our services and customer experience

Your personal data is stored securely on protected systems, with strict access controls to prevent unauthorized access, use, or disclosure. We do not sell, rent, or trade your personal data with third parties for their commercial purposes.

Third-Party Processors and Data Sharing

In order to provide our services efficiently, Florist Kilburn may engage trusted third-party service providers ("processors") who process data on our behalf. These may include:

• Payment processors for handling your card transactions securely
• IT service providers who support our website and data systems
• Courier or delivery service partners to ensure your flowers reach their intended recipients
• Professional advisers (accountants, auditors) for legal and regulatory compliance

All processors are contractually bound by data processing agreements which require them to protect your data to at least the same level as set by this Privacy Policy and the GDPR. We do not permit our processors to use your personal data for their own purposes and only permit them to process your data for specified purposes and in accordance with our instructions.

International Data Transfers

We do not routinely transfer your personal data outside the United Kingdom or the European Economic Area. If we ever need to do so (for example, if a processor operates internationally), we will ensure appropriate safeguards are in place to protect your rights and data under GDPR requirements.

Data Retention: How Long We Keep Your Data

Your personal information is retained only for as long as necessary for the purposes it was collected. Factors determining data retention periods include:

• Duration of your customer relationship with us
• Legal, accounting, and reporting requirements
• The nature of the data and our legitimate business needs

Typically, we retain order and transaction data for up to seven years to comply with legal and financial obligations. After this period, your data is securely deleted or anonymised.

Your Rights Under the GDPR

As a data subject under the GDPR, you have several rights concerning your personal data. These include:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data, subject to our legal obligations
• Right to restriction of processing: Ask us to restrict how we use your data in certain circumstances
• Right to data portability: Request to receive your data in a commonly used format or have it transferred to another provider
• Right to object: Object to processing of your data where we're relying on legitimate interests, including direct marketing
• Right to withdraw consent: Withdraw any consent you previously gave at any time
• Right to lodge a complaint: If you believe we have not handled your data lawfully, you may complain to the UK Information Commissioner's Office

If you wish to exercise any of these rights, you can contact us directly. We may need to verify your identity before fulfilling your request and will process your enquiry in accordance with legal requirements and timeframes.

Changes to This Privacy Policy

Florist Kilburn may update this Privacy Policy periodically to reflect changes in our practices, legal obligations, or customer feedback. We encourage customers to review the policy regularly to stay informed about how we protect your information.

Contacting Florist Kilburn About Your Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please get in touch with our management in person or via the contact forms provided in our shop or on our website. We are dedicated to addressing your privacy concerns promptly and transparently.