At Narey’s Garden Centre we are committed to processing personal information about our customers in ways that comply with our legal obligations as well as being clear with our customers about what we do with their personal information. Some of the key points are:
✔ We don’t sell your data to third parties
✔ We do make it easy for you to manage your information, you can change your communication preferences at any time
What information do we collect and why?
Listed below are the details we may hold for you.
- Company Name
- Your full name
- Company address (if you are a limited company)
- Home address (only if you are a customer and not a limited company)
- contact numbers
- email address
- any other personal information that you choose to provide to us when you complete our online contact forms or otherwise make contact with us.
- Your VAT number (if you are based in Europe)
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
- Legitimate Interests – this means the interests of Narey’s Garden Centre in managing our business to allow us to provide you with the best products and service in the most secure and appropriate way e.g. to keep you informed of offers that may be of interest to you
- Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes e.g. HMRC
We use your personal information as follows:
- to maintain our relationship with you whilst you are a customer / supplier;
- to process orders and provide agreed goods and services to you;
- for deliveries
- for invoicing, processing payments, account set up and maintenance;
- to communicate with you, including to respond to information requests /enquiries submitted to us
- for record keeping e.g. accounting and warranty information
- to notify you about changes to our products and services
- to investigate any complaint you make;
- to provide evidence in any dispute or anticipated dispute between you and us;
How long do we keep your personal data?
We retain your personal data for no longer than reasonably necessary for the purposes for which the personal information was collected or to comply with the Accounting Standards of record retention (Currently 7 Years) and also, for example, to ensure that all conditions of delivery are satisfied, and that all payments have been made.
The following section explains your rights. The various rights are not absolute and each is subject to certain exceptions or qualifications.
We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Statement is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.
The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we’re providing you with the information in this Privacy Statement.
The right of access
You have the right to obtain a copy of your personal information (if we’re processing it) that we hold and how it is used.
This is so you’re aware and can check that we’re using your personal information in accordance with data protection law.
We can refuse to provide information where to do so may reveal personal information about another person or would otherwise negatively impact another person‘s rights.
The right to rectification
You can ask us to take reasonable measures to correct your personal information if it’s inaccurate or incomplete. E.g. if we have the wrong name for you.
The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where we need to keep information for accounting purposes.
The right to restrict processing
You have rights to ‘block’ or suppress further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability
You have rights to obtain and reuse certain personal information for your own purposes across different organisations. This enables you to move, copy or transfer your personal information easily between our IT systems and theirs (or directly to yourself) safely and securely, without affecting its usability. This only applies to your personal information that you have provided to us.
The right to object
You have the right to object to the processing of personal data, where applicable i.e. for the purposes of direct marketing and processing for the purposes of scientific/historical research and statistics
Rights in relation to automated decision making and profiling
We do not use any form of automated decision making or profiling in our business.
This policy was last updated on 25/05/2018