Kidbrooke Florist Privacy Policy

Introduction

This Privacy Policy outlines how Kidbrooke Florist collects, processes, and protects the personal data of our customers. The policy applies to all individuals placing orders with Kidbrooke Florist in Kidbrooke and surrounding districts. Our commitment is to handle your data responsibly, transparently, and in accordance with the General Data Protection Regulation (GDPR) and relevant UK privacy laws.

What Data We Collect

When you use Kidbrooke Florist to place an order or make an enquiry, we collect only the data necessary to provide and improve our services. The personal data collected includes the following:

• Contact Information: Name, delivery address, telephone number, and, where required, billing address.
• Order Information: Details of products ordered, notes or card messages, preferred date and time for delivery, and transaction records.
• Payment Details: While we may collect billing information, all card transactions are processed securely by our payment service provider and we do not store your full payment card details ourselves.
• Communication Records: Correspondence between you and Kidbrooke Florist, such as messages sent through our online contact forms or order support.
• Website Usage: Basic analytics including IP address, browser type, and device information for security and service improvement. Cookies are only used where strictly necessary for site functionality.

Lawful Basis for Processing Personal Data

Kidbrooke Florist collects and processes your personal data based on one or more of the following lawful bases as defined under GDPR:

• Contractual Necessity: Data is processed to fulfil your orders and manage transactions.
• Legal Obligation: We retain certain records to comply with UK legal and tax requirements.
• Legitimate Interests: To ensure secure operation of our website, respond to queries, and improve our services, while balancing your privacy interests.
• Consent: For optional uses, such as receiving marketing communications or newsletter subscriptions, only after obtaining your explicit consent, which you can withdraw at any time.

How We Use Your Data

Your personal data is used strictly for the following purposes:

• Processing and delivering your florist orders.
• Communicating order confirmations, delivery updates, and responding to your queries.
• Providing customer support and handling any complaints or feedback.
• Complying with regulatory and accounting obligations.
• Improving our service, website, and customer experience.

Data Retention

We retain your personal data only for as long as is necessary for the fulfillment of the purposes described in this policy, and no longer than required by law. Typically, order-related records are preserved for up to six years to comply with bookkeeping and legal requirements. Communication records are kept for as long as necessary to address your queries and for no longer than three years, unless further retention is required for legal reasons. After these periods, your personal data will be securely deleted or anonymised.

Data Processors and Sharing

Kidbrooke Florist does not sell or rent your personal information to third parties. We share data only with trusted third-party service providers (‘processors’) when it is necessary for the service you have requested, including:

• Payment processors who manage card transactions securely on our behalf.
• Delivery and courier partners who ensure your orders are delivered efficiently.
• IT, hosting, and website management providers for secure storage and functioning of our website and business systems.

All processors contracted by Kidbrooke Florist are required to adhere to GDPR and only process personal data according to our instructions, with strict confidentiality and security standards. If any data processing occurs outside the UK or European Economic Area, appropriate safeguards will be implemented.

Your Rights under GDPR

As a customer of Kidbrooke Florist, you have the following rights concerning your personal data:

• Access: You may request a copy of your personal data that we hold.
• Rectification: You can ask us to correct or update inaccurate or incomplete information.
• Erasure: You have the right to ask us to delete your data, where there is no overriding legal reason for retention.
• Restriction: In certain circumstances, you can request the processing of your data be restricted.
• Data Portability: You are entitled to receive your data in a structured, commonly used format, and to have it transferred to another provider where applicable.
• Object: You may object to the processing of your data when processed based on legitimate interests or for direct marketing.
• Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us using the details on our website. We will process requests promptly and in compliance with applicable laws.

Keeping Your Data Secure

We take data security very seriously. Kidbrooke Florist uses a combination of technical and organisational measures—including encryption, secure servers, and limited personnel access—to protect your personal data against accidental loss, unauthorised access, or misuse. All staff handling personal data are trained in GDPR compliance and our data protection procedures.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in regulations or our practices. The updated policy will be made available on our website and clearly marked with the revised date. We encourage you to review this page periodically to remain informed about how we handle your personal data.

Contact and Queries

If you have any questions or concerns regarding how your personal data is collected, used, or shared by Kidbrooke Florist, or wish to make a complaint, please contact us using the contact details provided on our website. We will endeavour to address your concerns in accordance with applicable data protection laws.