Florist Kings Cross Privacy Policy for Customers

Introduction

This Privacy Policy explains how Florist Kings Cross ('we', 'our', 'us') collects, uses, and safeguards your personal data when you place florist orders in Kings Cross and the surrounding districts. Your privacy is of utmost importance to us, and we are committed to handling your information transparently and in accordance with the General Data Protection Regulation (GDPR) and relevant UK data protection laws.

Scope of this Policy

This policy covers all customers who place orders with Florist Kings Cross in Kings Cross and adjacent areas. By placing an order with us, you acknowledge and consent to the practices described in this statement. This policy applies to orders made via our website, by phone, or in person.

What Personal Data We Collect

Florist Kings Cross collects specific types of personal information to fulfil orders, provide customer service, and meet legal obligations. The following are examples of personal data we may collect:

• Identification Data: Names of customers and recipients
• Contact Information: Addresses (for delivery), telephone numbers, and billing addresses
• Order Details: Products ordered, special instructions, personalised messages
• Payment Information: Payment method details (Note: we do not store full card details)
• Communication Data: Correspondence with us regarding orders, queries or feedback
• Technical Data: IP addresses, browser type, and site usage data when interacting with our website

Lawful Basis for Processing Data

We process your personal data using one or more of the lawful bases under the GDPR:

• Contractual Necessity: To process your florist orders, manage payments, and deliver products as per your request.
• Legal Obligation: To comply with UK laws and regulations, such as record-keeping for tax purposes.
• Legitimate Interest: To operate and improve our service, respond to queries, prevent fraud, and enhance customer experience, provided these interests do not outweigh your rights and freedoms.
• Consent: We will request your explicit consent for marketing communications or if we need to process sensitive data (for example, allergy-related information provided for bespoke arrangements).

How We Use Your Data

Your data is used only for purposes compatible with the reasons described above, such as:

• Fulfilling and delivering orders
• Contacting you about your purchase or delivery
• Handling any issues, complaints, or after-sales support
• Complying with tax and business regulations
• Improving our products and services
• Informing you about new promotions or services (only if you have opted in)

Data Retention Policy

Florist Kings Cross retains personal data only for as long as necessary to achieve the purposes set out in this policy or as required by law. Generally, order information is retained for a period of up to seven years to fulfill legal, financial, and operational requirements. Contact details used exclusively for marketing will be retained until you withdraw consent or unsubscribe. At the end of the retention period, your data will be securely deleted or anonymised.

Data Sharing and Processors

We may share your data with trusted third parties who act as data processors, strictly for outlined purposes. These include:

• Payment Service Providers: To process payments securely. We do not store your full card details and use only compliant, secure payment gateways.
• Delivery Partners: For delivery and logistics to ensure your flowers arrive safely and on time.
• IT and Technical Support Providers: Responsible for system maintenance, back-up, and technical troubleshooting. All providers are carefully vetted and contractually bound to process your data strictly for our instructions and to abide by GDPR requirements.

Your information will never be sold to third parties for their marketing or advertising purposes. Data processors are only given the minimum data necessary to fulfil their functions. Where possible, data is pseudonymised or anonymised for additional security.

Your Data Rights

As a customer of Florist Kings Cross, you have rights regarding your personal data under the GDPR. These include:

• Right of Access: You can request copies of your personal data that we hold.
• Right to Rectification: You may ask us to correct or update inaccurate or incomplete information.
• Right to Erasure: Also known as the "right to be forgotten"; you can request deletion of your data when it is no longer necessary for processing.
• Right to Restrict Processing: You can ask us to restrict processing where you contest data accuracy, processing is unlawful, or you object to processing.
• Right to Data Portability: You have the right to request transfer of your data to another service provider, where feasible and upon request.
• Right to Object: You may object to processing for direct marketing or other legitimate interests.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of your rights, please contact us via our usual communication channels. We will verify your identity and respond to your request within one month, as per legal requirements.

Security and Safeguarding Measures

Florist Kings Cross takes the security of your data seriously. We implement technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. These safeguards include secure payment systems, encrypted web access, and staff training on data protection principles.

Policy Updates

This privacy policy may be updated from time to time to reflect changes to our practices or for legal reasons. Any significant updates will be communicated to you when appropriate. The latest version of this policy will always be available on our website or upon request.

Contact and Complaints

If you have questions about this Privacy Policy or how your data is handled, please contact us through our official channels. You may also contact the UK Information Commissioner’s Office (ICO) if you have concerns about how we process your personal data.