Florist Knightsbridge Privacy Policy

Introduction

This Privacy Policy sets out how Florist Knightsbridge collects, handles, processes, and protects personal data of customers placing orders from Knightsbridge and its surrounding districts. We are committed to upholding your data privacy in line with the General Data Protection Regulation (GDPR). Please review this policy for details regarding what data we collect, the reasons for collecting it, how long we retain it, who processes it, and your legal rights.

Scope of This Policy

This Privacy Policy applies to all personal data collected from customers who place orders with Florist Knightsbridge for flower delivery services within Knightsbridge and adjacent districts.

Personal Data We Collect

When you make a purchase or interact with Florist Knightsbridge, we may collect the following categories of personal data:

Identity Data: Full name, billing and delivery addresses.
Contact Data: Phone number(s) and any contact details you provide.
Order Information: Details of the product or arrangement you order, special instructions, delivery date, recipient information for gift orders.
Payment Data: Payment card details (processed securely via third-party payment processors; we do not store full card details), transaction history.
Communication Data: Any correspondence you have with us (such as order notes or customer service requests).
Technical Data: IP address, browser type and version, device information, and data collected via cookies when you interact with our website.

Lawful Basis for Processing Personal Data

Florist Knightsbridge processes your personal data using one or more legal bases defined by GDPR, including:

Contractual necessity: For purposes required to fulfill your order, such as processing payment, arranging delivery, and providing customer service.
Legal obligation: Where we are required to retain certain records for tax or accounting purposes.
Legitimate interests: For our business needs, such as improving our services, maintaining website security, and conducting limited marketing (unless you choose to opt out).
Consent: For certain activities, such as sending marketing communications, we will only do so where we have your explicit consent. You may withdraw such consent at any time.

How We Use Your Data

Your personal data is processed primarily for the following purposes:

To process and deliver your flower order, including verifying payment information, arranging delivery, and managing any modifications.
To communicate with you regarding your order status, delivery confirmations, and resolve queries or complaints.
To comply with legal, regulatory, accounting, or reporting requirements.
To maintain, secure, and improve our website and customer experience.
If you have opted in, to provide you with information about our products, offers, or promotions.

Data Retention

Your personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or regulatory requirements. Typically, order information and associated personal data are kept for up to seven years in order to comply with tax laws and business record retention guidelines. After this period, your data will be deleted or anonymized, unless we are required to retain it for a longer period due to legal proceedings or other legitimate business needs.

Processors and Data Sharing

To provide our services to you, we may need to share your data with trusted third-party processors who process your data on our behalf and in accordance with this Privacy Policy. Such processors may include:

Payment processors (for secure transaction handling).
Website hosting and IT support providers.
Delivery partners or couriers who deliver your order.
Professional advisors or legal authorities if required by law.

All third-party processors are contractually bound to handle your data in accordance with GDPR requirements and to use it solely for the purposes we specify.

Your Rights Under GDPR

You have certain rights regarding your personal data under GDPR, which include:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
Right to Erasure: In certain circumstances, you may request deletion of your data where there is no longer a valid reason for us to keep it.
Right to Restriction: You can ask us to suspend processing of your data if you believe it is inaccurate, or for legal claims.
Right to Data Portability: Where applicable, you can request a copy of your data in a standard, machine-readable format.
Right to Object: You can object to processing carried out for direct marketing or based on our legitimate interests.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

If you would like to exercise any of your rights, please contact us. We may require verification of your identity before responding to requests. All legitimate requests will be responded to within one month.

Data Security

We use technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or disclosure. These measures include secure hosting environments, encrypted payment processing, limited staff access to data, and regular review of our security practices.

Policy Updates

Florist Knightsbridge reserves the right to update this Privacy Policy from time to time in response to legal or operational changes. The current version will always be available for review on our website. Significant changes will be highlighted to ensure you are informed.

Contact and Complaints

If you have questions about this policy, your data, or you wish to make a complaint about our handling of your personal data, please contact Florist Knightsbridge. If you are dissatisfied with our response, you may contact the UK Information Commissioner's Office for further guidance or to lodge a complaint.