Your Privacy at Kennington Flowers: A Guide for Customers

Introduction

This Privacy Policy explains how Kennington Flowers processes personal data for customers placing orders from Kennington and surrounding districts. Your privacy is very important to us, and we are committed to protecting your personal information in line with the EU General Data Protection Regulation (GDPR).

Scope of this Policy

This policy applies to all individuals who place orders with Kennington Flowers, whether through our website, by telephone, or in person. It covers how we collect, use, store, and share your personal data when providing our floral products and related services.

What Data We Collect

Kennington Flowers collects and processes the following types of personal data:

  • Identity Data: This includes your full name and (if applicable) the names of recipients for delivery purposes.
  • Contact Data: This includes your address, delivery address, and any additional directions provided, as well as your phone number (where provided) and any other contact details.
  • Order Information: Details of the products you purchase, gift messages, delivery preferences, and related instructions.
  • Payment Data: Partial payment information, such as last four digits of payment card (if applicable). Please note, we do not store full payment card numbers. Online payments are processed securely by an authorised payment provider.
  • Communications: Any correspondence with us including inquiries, complaints, or feedback, which may be recorded to help us improve our service.
  • Technical Data: For website visitors, we may collect IP addresses, browser types, and device information through the use of cookies for security and analytics (see our separate cookies policy for full details).

Lawful Basis for Processing

Under GDPR, we must have a legal basis for processing your data. Kennington Flowers uses your personal data for the following reasons:

  • Contractual Necessity: Most of your data is processed to fulfil your order and deliver floral products and related services as requested by you. Without this information, we cannot complete your order.
  • Legal Obligations: We may be required to process and retain certain data for tax, accounting, or fraud prevention reasons as mandated by law.
  • Legitimate Interests: We may use your data to improve our customer service, develop our products, or contact you with updates related to your specific order. These activities do not override your rights and interests.
  • Consent: Where required, we will seek your explicit consent (for example, for direct marketing communications not related to your order), and you always have the right to withdraw this consent.

Data Retention

Your personal data is kept only for as long as necessary for the purposes for which it was collected:

  • Order and delivery details are stored securely for up to seven years to comply with legal and financial record-keeping requirements.
  • Communications related to orders or service inquiries may be retained for up to two years after resolution.
  • Details used strictly for marketing purposes are retained only as long as you give your permission. You can opt out at any time.

Once the relevant retention period is reached, your data is deleted or anonymised securely.

Data Processors and Sharing

Kennington Flowers uses trusted third-party service providers to help us deliver our services. Your data may be shared with the following types of data processors:

  • Payment Processors: To handle online and card payments securely.
  • Delivery Partners: If external couriers are used, we share only necessary delivery and contact details to complete the service.
  • IT and Website Support Providers: Who may access data for maintenance, hosting, and troubleshooting. These partners are bound by contractual obligations to safeguard your information.
  • Accountants or Legal Advisors: For regulatory compliance, auditing or legal purposes, as required by law.

We do not sell your data and take care to share only the minimum information necessary. All processors act strictly on our instructions under GDPR-compliant agreements.

International Data Transfers

Kennington Flowers endeavours to store and process your data within the United Kingdom or European Economic Area (EEA). In cases where our service providers operate outside these territories, we ensure adequate safeguards, such as standard contractual clauses, are in place to protect your information.

Your Data Protection Rights

As a customer, you have the following rights regarding your personal data:

  • Access: To obtain a copy of the personal data we hold about you.
  • Rectification: To correct or update your personal data if it is inaccurate or incomplete.
  • Erasure: To request deletion of your data when it is no longer needed, or in certain other circumstances defined under GDPR.
  • Restriction: To limit the processing of your data in specified situations.
  • Objection: To object to processing for direct marketing or for certain reasons based on your particular situation.
  • Data Portability: To ask for your data to be provided to you or another organisation in a commonly used electronic format (where feasible and relevant).
  • Withdrawal of Consent: If processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact Kennington Flowers using the contact options provided at the time of your order or on our official communications.

Security of Your Data

Kennington Flowers takes your data security seriously. We use appropriate technical and organisational measures to protect your information from loss, misuse, and unauthorised access. These include secure storage systems, access controls, and staff training on data protection obligations.

Updates to This Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes to our practices, technical improvements, or legal requirements. The most current version will always be available to customers placing orders, and significant changes will be brought to your attention wherever possible.

Contact and Complaints

If you have any questions about this Privacy Policy or would like to exercise any of your GDPR rights, please contact Kennington Flowers using the contact information provided during your order. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your relevant supervisory authority.