We take the privacy and the security of your personal information very seriously.
We also want to tell you about your rights in relation to this information.
We are doing this so that we can be sure that we meet, and we hope exceed the requirements of the European General Data Protection Regulation (GDPR).
As we are always trying to improve the way we do things, we are sure we will be making changes to this policy from time to time, and any updates will be recorded here…
Who we are:
We are Eastfield Garden Centre, we operate a Garden Centre in Bridlington in the North of England.
What we need:
In order to make deliveries or answer enquiries we need to ask for and store personal information, such as name and address.
Eastfield Garden Centre will be a “controller” of the personal information that you give us, either in person in our Garden Centre or via telephone, post or through our website.
How we collect your personal Data:
We may collect your personal information in various ways including:
When you order goods or services from us in our Garden Centre.
When you share your details with us over the phone.
When you share your details with us by post, email or Social Media.
When you join our loyalty scheme.
When you browse our website through the use of log files and cookies you share anonymous details, we do this so our website, for example, is able to recognise you as a customer.
The kind of personal Data that we collect:
The information that we collect and use may include your name, address, email address, IP address and telephone number.
When you order plants or gardening products as a gift, we may collect the details of the Third Parties in order to deliver their gift.
Gifts for children may include their names and addresses.
On our website we use log files to allow us to record visitors’ use of the website.
Log files do not contain any personal information and cannot access a user’s computer.
A cookie is similar to a log file, except that it is a small file placed on the user’s hard drive that enables our website to identify the user’s computer but does not provide any access to a user’s computer or any information about the user other than that which you share with the company.
Please not we do not store card payment details.
Why we need your personal information:
We need to collect personal information so that we can
Send out products
Invite you to events at the Garden Centre
To respond to enquiries, requests or complaints via email, letter or in person
To analyse, via Google Analytics, and make changes to the website layout to improve the user experience and recognise a user when they return to our website.
Send out our newsletter, which members of our loyalty scheme can opt in to receive.
Who we will share your personal information with:
If your personal information is included in any images taken by us at our events or premises, we may share this for promotional and/or journalistic purposes; we may be required to share personal information with statutory or regulatory authorities and Law enforcement organisations to comply with statutory and legal obligations.
We may also share personal information with our professional and legal advisors for the purposes of taking their advice.
Eastfield Garden Centre has an account with MailChimp, an email service provider.
This service provider processes personal information on our behalf and is subject to written contractual conditions to only process that personal information under our instructions and to protect it.
MailChimp are subject to the terms and conditions of the GDPR and in particular must comply with their own Privacy Shield certification in respect of how information is securely accessed, processed and confidentiality.
In the event that we do share personal information with any other external third parties, such as couriers for delivery of products, we will only share such personal information strictly required for the specific purposes and take reasonable steps to ensure that those recipients shall only process the disclosed personal information in accordance with those purposes.
How we protect your personal information:
We protect your personal information by ensuring that access to it is strictly monitored and limited by keeping effective security software in place wherever data is stored electronically and by monitoring and protecting our website with appropriate security measures.
MailChimp is required to comply with all aspects of the GDPR and as stated previously must comply with their own Privacy Shield certification.
How long we keep your personal information:
We will only keep your personal information for as long as necessary.
You can exercise any of the following rights by writing to us
Data Protection Officer,
Eastfield Garden Centre
You have a right to request access to the personal information that we hold about you by making a “subject access request”.
If you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information.
You have a right to request that we restrict the processing of your personal information for specific purposes; and if you wish us to delete your personal information, you may request that we do so.
You have the right to request not to receive our newsletter, we are committed to making it as easy to unsubscribe to our newsletter as it is to subscribe to it.
Any request received by Eastfield Garden Centre will be considered under applicable data protection legislation.
If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office at www.ico.org.uk.