How we use your personal data
We, at the Hardy Geranium Nursery, take data privacy and security very seriously. It is part of our commitment to an high quality of service.
We are registered as Data Controllers with the UK Information Commissioner’s Office (Registration number ZA378759)
This privacy notice describes how we collect and use personal data, including:
• Visitors to our website.
• Newsletter Subscribers.
• Customers Who Buy Plants.
• People We Work With.
Each of these purposes are explained below, followed by details of our data controls, your data privacy rights, our contact details, and our Cookie notice.
Visitors to our Website
When people visit our website, we use Google analytics to monitor footfall and to check the performance of the website. This information does not allow us to identify visitors.
Our newsletters include updates about our company, our products, our partners and topical news.
When people sign up directly to our newsletter, we store the data that was provided as a legitimate interest, in order to provide the newsletters.
Subscribers can opt out of the newsletter anytime by using the “opt-out” link in newsletter emails or by contacting us directly, at which point we will delete the contact details.
Customers Who Buy Plants
When customers buy plants, we collect personal data that is necessary to fulfil our contract. This includes your name, physical address, contact details and purchase details. In case you have queries, we will keep personal data from the transaction for 12 months. Where legally required, such as compliance with tax laws, we will retain some of the data for longer.
When making payments, your credit card details are processed directly by Stripe. We do not collect, process or store these details.
During the checkout process, we also provide an option to subscribe to our newsletters. Subscription is entirely optional. Further details about the newsletters is provided above.
People We Work With
We enjoy working with our range of partners and third parties. We will keep business contact details of individuals working for those companies, where provided in the course of business, as a legitimate interest. We will delete the data if we believe it is no longer relevant for our business relationship or if we receive a request from that individual.
We will never sell personal data to third parties or use the data to provide unsolicited marketing.
We will only share personal data with third parties if they are processing data for us, for that use alone, under contract.
We use a range of IT security controls to help protect your data. Our website and email services are hosted by specialist IT companies who processes data in the UK.
We do not perform any automated decision making or profiling of personal data that has been collected.
We will disclose personal data to authorised parties if required by law.
Please contact us directly, using the contact details below, if you would like to request:
1. To receive a copy of data we hold about you.
2. To amend data we hold about you.
3. To delete data we hold about you.
4. To restrict our processing of your data.
5. To transfer data we hold about you to another organisation.
6. To provide details of any automation or profiling, although we do not perform these activities.
If you make a request, we will first take steps to confirm your identity before addressing your query within 28 days at no cost to you. We will also notify you if we are unable to fulfil your request on legal grounds and discuss whether there is another way we can help.
If you are not happy about the way we have managed your personal data, please let us know in the first instance, and we will do our best to resolve the matter. If we are unable to resolve your issue, it is your right to lodge a complaint with our Data Protection Officer (https://DataGRC.co.uk) or the Information Commissioner’s Office (https://www.ICO.org.uk/).
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Changes to this privacy notice
We keep our privacy notice under regular review and reserve the right to update it at any time. We will notify data subjects before doing anything significantly different with their data. This privacy notice was last updated on 5 June 2018.
How to contact us
For further information, please contact our DataGRC Data Protection Officer:
Call us on 0208 133 0242.
By using our online contact form.
Cookies are small text files that are placed on your computer by your web browser, to help our website perform correctly and allow us to monitor that performance.
The Cookies are provided by third parties, and the most up-to-date details can be found via these links:
If you have any questions, please contact us using the details above.