Flowers Kings Cross Privacy Policy

Introduction

This Privacy Policy outlines how Flowers Kings Cross collects, uses, stores, and protects your personal information when you place orders with us in Kings Cross and the surrounding districts. We are committed to safeguarding your privacy and ensuring compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR). By placing an order, you acknowledge and agree to the terms of this policy.

Scope of the Policy

This policy applies to all customers who place flower orders with Flowers Kings Cross, either online, by phone, or in person, across Kings Cross and neighbouring districts. The policy does not cover third-party websites or services that may be linked or referenced outside our direct order process.

Personal Data We Collect

To process and fulfil your flower orders, we collect and process the following personal data:

• Identification Data: Name, surname.
• Contact Details: Delivery address, billing address, phone number, postcode.
• Order Information: Details of products ordered, order history, delivery instructions.
• Payment Information: Payment card details (processed securely via authorised processors; we do not store full payment card numbers).
• Communication Data: Emails or messages sent to us regarding orders, customer service queries, or feedback.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds under GDPR:

• Contractual Necessity: To fulfil our contract with you when processing and delivering your flower orders.
• Legitimate Interests: To manage and improve our services, prevent fraud, and provide customer support, where these interests are not overridden by your privacy rights.
• Legal Obligations: To comply with UK or EU legal requirements, such as accounting and tax regulations.
• Consent: For direct marketing purposes, we will seek your explicit consent prior to sending promotional communications. You may withdraw this consent at any time.

How We Use Your Personal Data

We use your information for the following purposes:

• Processing and delivery of flower orders.
• Communicating order updates or addressing queries.
• Processing payments and refunds.
• Providing customer service and support.
• Maintaining business records for audit and regulatory purposes.
• Sending marketing information (if you have opted in).

Retention of Personal Data

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy.

• Order and Payment Records: Retained for up to 7 years to comply with legal and financial obligations.
• Customer Service Communications: Retained for up to 3 years from the last communication, unless a longer retention period is required for dispute resolution.
• Marketing Preferences: Retained for as long as you have an active opt-in, or until you withdraw your consent.

Upon expiry of applicable retention periods, data is securely deleted or anonymised.

Processors and Sharing of Information

Your personal data may be shared with trusted third-party processors who enable us to provide our services, including:

• Payment Service Providers: To process secure payments for orders (e.g., payment gateways).
• IT and Cloud Service Providers: Hosting our order management and communication systems.
• Delivery Partners: Facilitating the delivery of your flower orders to the correct address.

All processors are contractually bound to handle your data in accordance with GDPR and are not permitted to use your information for their own purposes. We do not sell or rent your personal information to third parties for marketing purposes.

International Data Transfers

Should it be necessary to transfer your personal data outside the UK or European Economic Area, we ensure such transfers are protected by appropriate safeguards in accordance with GDPR, such as Standard Contractual Clauses or adequacy decisions.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request details of the personal data we hold about you.
• Right of Rectification: Correct any inaccurate or incomplete personal information.
• Right to Erasure: Request deletion of your data when it is no longer needed or processed unlawfully, subject to legal obligations.
• Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used format or have it transferred to another provider.
• Right to Object: Object to the processing of your data where we rely on legitimate interests or for direct marketing.

If you wish to exercise any of these rights, please contact us using the details provided in your order confirmation or our official website. You may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

Data Security

We implement appropriate physical, technical, and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Access to personal data is restricted to personnel and service providers who require it for order fulfilment and customer service.

Amendments to This Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. When changes are made, we will update the effective date at the top of this policy. Please review this policy periodically for the latest information.

Contact Us

For any enquiries, concerns, or to exercise your data protection rights, please refer to the contact methods provided in your order confirmation or visit our main website for further information.

This policy was last updated in June 2024.