BEXLEY GARDEN CENTRES
By personal data, we mean data which could be used to identify you, including your name and contact details, and any related data which could be attributed to you. It may also include information about how you use our website and other services.
This policy does not include information about the privacy of Bexley Garden Centre employees’ data, which can be obtained from our HR department.
2) Who is responsible for your personal data
Bexley Garden Centre Limited is responsible for your personal data. Our registered
address is Bexley Garden Centre 57 North Cray Road Sidcup Kent DA14 5EU
We are registered as a company in England and Wales under company number 07031920. We are the data controller of the personal data which we collect from you, and so we are responsible for the ways your personal data are collected and the purposes for which your personal data are used.
3) How we protect your data
We use technical measures such as encryption and password protection to protect your data and the systems they are held in. We also use operational measures to protect the data, for example by limiting the number of people who have access to your personal data.
We keep these security measures under review and refer to industry security standards to keep up to date with current best practice.
The vast majority of our data processing is undertaken in the European Economic Area (EEA). We will ensure that any data that is processed outside of the EEA adheres to the same security standards as that processed inside the EEA.
4) What personal data we collect from you
Depending on how you use our services, we may collect any of the following personal data from you:
We may collect more sensitive information if you have had an accident in one of our garden centres.
Please see the information below on how we use and protect all of your personal data, including sensitive data.
5) How we use your personal data
We can only use your personal data if we have a valid reason (or "lawful basis") for doing so. The law defines a number of possible reasons, of which the following four apply to our use of your data:
- To fulfil a contract we have with you
- When you consent to it
- If we have a legal obligation to use your data for a particular reason
- When it is in our legitimate interests
6) How we use your data to personalise your experience
We use these data to personalise your experience in the following ways:
To identify your likes and dislikes, so that in future we send you news and offers that are more interesting to you
To understand more about your preferences and purchasing habits, so that we can match you with similar customers and use this to offer you and other customers more relevant products and services. Sometimes we use third party systems or tools to help with this.
To show you more relevant advertising online
7) How we work with third parties
We use a number of Third Party systems to collect and process your data for the purposes shown above. This includes our website (which is developed and hosted by a Third Party), some marketing systems (such as email systems) and our payment system providers. We ask that they follow the same rigorous data protection standards that we do
We collect personal data from Third Party agents who process reservations or other information on our behalf.
We sometimes share your anonymised data with Third Party advertisers, so that they can better target their advertising to you and other customers.
We will never sell, rent, loan or share your personal data with a third party for the purpose of marketing activity of any nature, unless you have provided us with explicit permission to do so.
8) How long we keep your data
We only keep your data only for as long as we need it. How long we need data depends on what we are using it for, as described above.
We will actively review the personal data we hold and when there is no longer a need for us to hold it, we will either delete it securely or in some cases anonymise it.
We aim to destroy any paper copies of your personal data as soon as they have served their purpose (e.g., once information has been entered into a system). In the cases where we need to keep paper copies for longer, we ensure that they are stored securely and access is limited.
9) Your rights and how to manage the marketing communications you receive
You have a number of rights with regard to your data, which include:
The right to access your data
The right to rectify your data, if you believe there is an error such as the spelling of your name
The right to delete your data or restrict their use
The right to are object to the certain uses of your data
Should you wish to exercise any of these rights by emailing firstname.lastname@example.org. We will deal with data access requests promptly and in any event within a month of receiving it, or (if later) from the day any information requested to confirm the requester’s identity is obtained. In rare cases, when the request is particularly complex or numerous, this deadline may be extended by a further two months (in which case we will let you know within one month). This service is free, unless the request is manifestly unfounded or excessive.
We may send you marketing communications by email if you have opted in to receive such emails (e.g., at the point of purchase or when checking in), or if you have recently opened one of our marketing emails and have not told us that you no longer wish to receive marketing emails.
You have the right to opt out of receiving future marketing communications at any time and can do so by clicking the unsubscribe link in any email that we have sent you. Alternatively, you can mail email@example.com to ask to be removed from our mailing list. Please note, because we use multiple email systems it can take up to two weeks for all of them to be updated.
10) If you have any further questions or complaints
Please contact us on firstname.lastname@example.org in the first instance. If you are not satisfied with the response that we give you, you have the right to complain to the Information Commissioner’s Office (ICO), whose details can be found on www.ico.org.uk