Privacy Policy

Last updated: 22 July 2025

Kemlo & Kemlo ("we", "us", or "our") is a florist based in Hampshire, United Kingdom. We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We are the data controller for the purposes of data protection legislation. If you have any questions about this policy or how your data is handled, you can contact us at:

Business Name: Kemlo & Kemlo
Email: flowers@kemloandkemlo.com

2. What Data We Collect

Depending on how you interact with our website and services, we may collect:

  • Contact Information: Name, email address, phone number, delivery address.

  • Order Details: Items purchased, delivery notes.

  • Payment Information: Billing and shipping details (processed securely via third-party providers and not stored by us).

  • Marketing Preferences: Your newsletter sign-up and email communication preferences.

  • Website Usage Data: IP address, browser type, pages visited (collected via Google Analytics).

  • Communication Records: Messages sent via our contact form or email.

3. How We Collect Your Data

We collect personal data when you:

  • Place an order through our webshop.

  • Sign up for our newsletter.

  • Submit a message via our contact form.

  • Interact with our website (via cookies and analytics tools).

4. Why We Use Your Data

We use your information for the following purposes:

  • To fulfil and deliver your flower orders.

  • To respond to enquiries or customer service requests.

  • To send newsletters and promotions (only with your consent).

  • To improve our website and services (via analytics).

  • To comply with legal and tax obligations.

  • To run marketing campaigns (including Meta Pixel in future).

5. Legal Bases for Processing

We process your data under the following lawful bases:

  • Consent – e.g., for marketing communications.

  • Contract – to process and deliver your orders.

  • Legal Obligation – for tax and accounting purposes.

  • Legitimate Interests – e.g., to improve our services, manage customer relationships, or understand website usage.

6. Who We Share Your Data With

We only share your data when necessary and with trusted providers:

a) Website Hosting & Management

  • Squarespace – Hosts our website and stores submitted contact or order information securely.

b) Payment Processors (for purchases only):

c) Email Marketing

  • Squarespace Email Campaigns – Used to send newsletters and manage mailing lists.

d) Analytics & Advertising

  • Google Analytics – To track and understand how visitors use our site.

  • Meta Pixel (in the future) – For targeted advertising on Facebook and Instagram.

We do not sell your personal data.

7. International Transfers

Some of our service providers (e.g., Squarespace, Stripe) are located outside the UK. Where this applies, your data may be transferred internationally under appropriate safeguards such as standard contractual clauses.

8. Data Retention

We retain your data only as long as necessary:

  • Customer order records: 6 years (for accounting).

  • Enquiry form messages: 12 months.

  • Newsletter subscribers: Until you unsubscribe.

  • Analytics data: Retention settings are managed via Google (typically 26–38 months).

9. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Withdraw consent at any time.

  • Object to processing.

  • Request data portability.

  • Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

10. Contact Us

For any privacy-related queries, you can reach us at:

Email: flowers@kemloandkemlo.com

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, and where appropriate, we’ll notify you by email.