Privacy Policy for Kenton Florist Customers

Introduction

This Privacy Policy outlines how Kenton Florist collects, stores, uses, and protects your personal data when you place an order with us. This policy applies to all individuals who place orders for floral products or services through Kenton Florist, either online, in-store or by phone, and who are located in Kenton and the surrounding districts. We are committed to ensuring your data is handled responsibly in accordance with the General Data Protection Regulation (GDPR) and relevant UK legislation.

What Personal Data We Collect

We collect and process different types of personal data, depending on your interactions with us. This data may include:

• Identity Data: Title, full name.
• Contact Data: Billing address, delivery address, contact telephone numbers, and (where applicable) email address.
• Order Data: Details about the floral products/services you purchase or inquire about, as well as any special instructions for delivery.
• Payment Data: Payment card details (processed securely via payment processors), transaction information.
• Correspondence: Records of communications with us, such as enquiries, complaints, or feedback.

We do not intentionally collect sensitive personal information except where it is supplied at your request (for example, for specific delivery requirements or allergy information).

Lawful Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to collect and use your personal data. Kenton Florist processes your information under the following lawful bases:

• Contractual Necessity: To fulfill your order and provide requested services. This includes taking and delivering orders, communicating about your order, and processing payments.
• Legal Obligation: To comply with our legal requirements regarding record keeping, accounting, and tax regulations.
• Legitimate Interests: To manage our relationship with you, improve our products and services, and for fraud prevention. We will always consider your rights and interests before relying on this basis.
• Consent: For direct marketing purposes, or where you have given explicit consent to process certain information (such as allergy details or preferences).

How We Use Your Personal Data

Your data is used for the following purposes:

• Processing and fulfilling your order, including delivery and payment.
• Contacting you for order updates or to resolve issues with your order.
• Improving our products, services, and customer service experience.
• Fulfilling our legal and regulatory obligations.
• Where you have given additional consent, sending you marketing information about our products, special offers, and news.

Who Processes Your Data (Processors)

Kenton Florist may share your data with trusted third-party service providers who assist in delivering our services. These processors include:

• Payment processors (for handling secure payment transactions).
• Delivery partners (to ensure timely delivery of your order to the right location).
• IT and website providers (for hosting, maintenance, and technical support).
• Accounting or professional advisors (as part of our legal obligations).

All processors are required to protect your data securely, process it only as instructed, and are not permitted to use your data for their own purposes. Your data will not be sold or shared with third parties for unrelated marketing or commercial purposes.

Data Retention: How Long We Keep Your Data

Kenton Florist will only retain your personal data for as long as reasonably necessary to fulfill the purpose for which it was collected, including for satisfying any legal, accounting, or reporting requirements. In general:

• Order details and relevant personal information are kept for up to 6 years from the date of your last order, in line with statutory record-keeping and tax requirements.
• If you have registered for marketing communications, your contact details will be retained until you withdraw consent or unsubscribe.
• Payment details are not stored by Kenton Florist but may be retained by our payment processors according to their policies and legal obligations.

Once the data is no longer required, it will be securely deleted or anonymised.

Your Rights Under GDPR

Under data protection law, you have important rights in relation to your personal data. These include:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can request that inaccurate or incomplete information is corrected or updated.
• Erasure ("Right to be Forgotten"): In certain circumstances, you can request that we delete your personal data where there is no good reason for us to continue processing it.
• Restriction: You can ask us to restrict the processing of your data in some cases.
• Data Portability: You have the right to request your information in a commonly used, machine-readable format.
• Objection: You have the right to object to your data being processed for direct marketing or where processing is based on legitimate interests.
• Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact Kenton Florist using the contact information provided on our website or in-store.

Protecting Your Data

We take the security of your personal data seriously. Kenton Florist employs a range of appropriate technical and organisational measures to safeguard your data, including secure storage solutions, password protection, regular staff training, and ensuring that any third-party processors apply equivalent security standards.

Policy Updates

Kenton Florist reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices or compliance with the law. The most recent version of the policy will always be available on our website or by request in-store. We encourage you to review it regularly, especially when placing new orders with us.

Contact and Complaints

If you have concerns about the way Kenton Florist handles your personal data, or if you wish to make a complaint, you can contact us using the details provided on our website or in-store. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you feel your rights have been infringed.