Privacy Policy for Customers Ordering from Flower Delivery Kidbrooke

Privacy Policy: Protecting Your Personal Data

This Privacy Policy explains how Flower Delivery Kidbrooke (“we”, “our”, “us”) collects, uses, secures, and manages your personal data in compliance with the UK General Data Protection Regulation (“GDPR”). The policy applies to all customers placing orders for flower delivery services from Kidbrooke and the surrounding districts. Our commitment is to ensure the privacy and security of your personal information throughout your interactions with us.

Personal Data We Collect

When you place an order or interact with Flower Delivery Kidbrooke, we collect the following types of personal information:

  • Contact Information: such as your name, delivery recipient’s name, address, and phone number
  • Order Details: including flower selection, delivery date, and special instructions
  • Payment Information: transaction details necessary to process your order (we never store full payment card details; payment processing is done by secure third-party providers)
  • Communication Data: records of any correspondence or feedback between you and Flower Delivery Kidbrooke
  • Usage Information: basic analytics data such as your device type and IP address, to enhance website security and improve user experience

Lawful Basis for Processing

We process your personal data under one or more of the following lawful bases, as set out by the GDPR:

  • Contractual Necessity: Processing is required to fulfill our contractual obligations to you when you place an order for flower delivery.
  • Legal Obligation: We may be required by law to retain certain records or provide information to authorities upon legitimate request.
  • Legitimate Interests: We may process your data in the pursuit of our legitimate business interests, such as enhancing our services, preventing fraud, and ensuring network and information security, provided that such interests do not override your privacy rights.
  • Consent: Where required, we will obtain your explicit consent before sending marketing communications. You may withdraw consent at any time.

How We Use Your Data

Flower Delivery Kidbrooke uses your information for the following purposes:

  • Processing and fulfilling your flower delivery orders
  • Managing your customer account and order history
  • Communicating with you regarding your orders, delivery updates, or customer service enquiries
  • Enhancing your online experience and personalising our services
  • Complying with our legal and regulatory responsibilities
  • Sending you marketing communications if you have opted in (you can opt out at any time)

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Generally:

  • Order and transaction records are kept for up to 7 years following your last order, to comply with tax and legal regulations.
  • Marketing preferences are retained until you opt out or withdraw consent.
  • Website usage data is retained for analytics for up to 2 years.
  • After the relevant retention period, your personal data is securely deleted or anonymised.

Data Processors and Third Parties

We may share your data with selected third-party service providers (“data processors”) solely to perform functions necessary for delivery of our services. These include payment processing partners, delivery couriers, IT support, and website analytics providers. All data processors acting on our behalf are contractually required to adhere to GDPR requirements and are prohibited from using your data for their own purposes.

We do not sell or rent your personal information to third parties. We will only disclose information if required by law or with your explicit consent.

User Rights Under GDPR

As a data subject, you have the following rights regarding your personal information:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You may ask us to correct inaccuracies or update incomplete information.
  • Right to Erasure: You can request the deletion of your personal information, subject to applicable law.
  • Right to Restrict Processing: You may request a limit on how we use your data in certain circumstances.
  • Right to Data Portability: You may request to receive your data in a structured, commonly used, and machine-readable format or have it transmitted to another controller.
  • Right to Object: You may object to our processing of your personal data if you believe your rights outweigh our legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
  • Right to Lodge a Complaint: You have the right to complain to the UK Information Commissioner’s Office if you believe we have not handled your data in accordance with the law.

To exercise any of your rights, please contact us by the methods detailed on our website.

Security of Your Information

We implement appropriate technical and organisational measures to safeguard your personal data from unauthorised access, loss, misuse, or disclosure. These include access controls, encryption (where applicable), secure payment platforms, and regular staff training on data protection.

Children’s Privacy

Our flower delivery services are not intended for children under the age of 16. We do not knowingly collect or maintain data about children under this age.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our data practices or legal requirements. The revised policy will be effective from the date of publication. Please revisit this page periodically to stay informed of any updates.

Contact and Complaints

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please use the contact details provided on our website. We are committed to resolving issues in a timely and compliant manner.