Knightsbridge Flowers Privacy Policy – Protecting Your Data & Rights

Scope and Purpose of This Privacy Policy

This Privacy Policy applies to all customers placing orders with Knightsbridge Flowers from within Knightsbridge and its surrounding districts. The purpose of this policy is to explain clearly how and why we collect, use, and secure your personal data in line with the General Data Protection Regulation (GDPR), as well as to inform you of your legal rights regarding your information.

What Personal Data We Collect

When you interact with Knightsbridge Flowers—by placing an order, making an enquiry, or communicating with us—we may collect and process the following types of personal data:

• Contact details: Including your name, delivery address, billing address, and other relevant contact information.
• Order information: Records of products purchased, order preferences, special delivery instructions, and transactional details.
• Payment information: Payment method and transaction details (please note that we do not store full payment card numbers or CVV codes).
• Recipient details: Name and address of the intended flower recipient (where different from the purchaser).
• Communications: Correspondence with our team, including feedback, reviews, and customer service enquiries.
• Technical data: IP address, web browser type, and information regarding how you access and use our website (collected through cookies and analytics tools).

Lawful Basis for Processing Your Data

Under GDPR, we only process your personal data where we have a clear lawful basis to do so. The main bases on which we process your data are:

• Contractual necessity: Most of our data processing is necessary to fulfil a contract with you, such as when you place and pay for an order and expect delivery.
• Legal obligation: We may need to process your data to comply with accounting, record-keeping, and other laws applicable to our business.
• Legitimate interests: We process certain personal data to improve our services, respond to your enquiries, maintain security, and prevent fraud, provided that such interests are not overridden by your rights and interests.
• Consent: Where required, we may ask for your explicit consent before processing your data for specific purposes, such as email marketing. You have the right to withdraw your consent at any time.

How We Use Your Data

Your personal data is used exclusively for the reasons it was collected. These include:

• Processing and delivering your orders quickly and accurately.
• Communicating with you regarding your order, including confirmations, dispatch notices, and customer service follow-up.
• Improving our products, services, and customer experience based on feedback and purchasing trends.
• Ensuring website security and monitoring for fraudulent activity.
• Fulfilling legal and financial record-keeping requirements.
• Sending relevant service notices or, if you consent, special offers and updates.

Retention of Your Personal Data

Knightsbridge Flowers stores your data only for as long as it is necessary to fulfil the purposes outlined above and in line with our statutory responsibilities. Typically, we retain:

• Order and transaction records for up to 7 years to meet tax and accounting obligations.
• Marketing and communication preferences until you update or withdraw your consent.
• Technical data and analytical information for up to 2 years to support service improvements.

When no longer needed, we securely delete or anonymise your personal data.

Processors and Third Parties

We do not sell or rent your personal information. However, for efficient business operations, we engage reputable third-party service providers ("processors") to assist with tasks including payment processing, website hosting, IT support, delivery services, and analytics. All processors are contractually bound to safeguard your data, comply with GDPR requirements, and act only in accordance with our instructions.

In rare circumstances, we may be required to share certain information with law enforcement, regulatory authorities, or courts if required by law.

Your Rights Under GDPR

As a data subject under the GDPR, you have a range of rights regarding your personal information. This includes the right to:

• Access: Obtain a copy of the personal data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Ask for your information to be deleted when it is no longer needed, or when you withdraw consent (where applicable).
• Restriction: Ask us to limit how we process your information in certain circumstances.
• Data portability: Receive the personal data you've provided to us in a structured, commonly used format and transfer it to another provider.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw consent: Where processing is based on consent, you can withdraw this consent at any time.

If you wish to exercise any of these rights, please contact us using the methods provided on our website. We aim to respond to all valid requests within one month.

Data Security

We have implemented industry-standard technical and organisational measures to safeguard your personal data from unauthorised access, loss, or misuse. These protections are regularly reviewed and updated to mitigate emerging risks.

Policy Updates

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in process or applicable law. If any substantial changes affect your rights or the way we use your data, we will notify you in advance via our website or, where appropriate, direct communication.

How to Contact Us

If you have questions, concerns, or would like to exercise your rights regarding your personal data, please reach out to us through the contact methods detailed on our official website. We value your privacy and are committed to addressing any queries promptly and transparently.