Carbeth Plants

INFORMATION WE COLLECT AND HOW WE COLLECT IT

The information we gather on our site falls into two categories: (1) personal data you supply when you become a member, order, complete a survey, post in a discussion forum, post news articles, or provide your email address, and (2) tracking information collected as you navigate through our Website.

We do not provide products to children or actively collect their personal data. If you believe that we have received information relating to persons under the age of 18 please contact us at info@carbethplants.co.uk. If we become aware that a person under the age of 18 has provided us with personal information we will delete such information.

When you make a purchase, subscribe to our marketing messages or become a registered user, we collect personal data about you such as your name, mailing address, e-mail address, telephone number, username and password (identity and contact data).

When this type of personal data is collected, you will know because you will have to fill out a form of some sort or otherwise provide the personal data to us, for example in email or messages about your order.

We also collect financial and transactional data – details of orders made and processed; details of payments and cards used for payments.

We collect usage data relating to the products you purchased and how you use and navigate the website. We may also ask you to complete surveys and give feedback that we use for research purposes, although you do not have to respond to them.

We collect profile data which includes assumptions about your predicted buying behaviour and interests based on the usage data we collect about you and combined with non-personal data we obtain from third parties (see section entitled ‘Third Party Marketing” below for more information). We do not carry out automated individual decision making or profiling for the purposes of data protection legislation.

HOW AND WHY WE USE YOUR PERSONAL DATA

Under the Data Protection Legislation, we can only use your personal data if we have a proper reason for doing so, for example: consent, legitimate interests, performance of a contract or legal obligation.

Consent.We may process your data based on your consent for certain marketing purposes, specifically Third Party Marketing. However, most of our own marketing activities by email fall under legitimate interest (see below). You have the right to withdraw consent to Third Party Marketing at any time. For more information on marketing, see the Third Party Marketingsection below.

Legitimate interests.We may process your personal data when we have a legitimate reason to use it, that is proportionate to your rights. This includes:

• managing your account and answering your queries;
• protecting our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
• requesting a review from you or your participation in a survey;
• using your identity and contact data for marketing purposes – note that email marketing to existing customers is carried out using soft-opt in, rather than consent;
• promoting our business through delivering relevant website content and advertisements to you;
• measuring the effectiveness of the advertising we provide to you;
• improving our website and service;
• preventing fraud.

Performance of a Contract.We’ll use your personal data if necessary perform a contract with you, or a contract which we are about to enter with you, for example, to:

• register you as a new customer
• provide our services and deliver orders to you
• answer your queries or notify you of any changes to our service; and
• provide you with customer services.
• Facilitating payments us
• corresponding with business users of our service or suppliers to our business and managing that relationship;

Legal obligation.Sometimes we are under a legal obligation to use your personal data, for example where we:

• notify you about changes to this privacy policy or terms of use;
• respond to a complaint made by you; and
• are obliged by a court of law or the police (or other authority)

YOUR RIGHTS

• You have rights in respect of our processing of your personal data.
• Your right of access: You have the right to ask us for copies of your personal information.
• Your right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing: You have the right to object to our processing your information in certain circumstances. Your right to object to marketing is absolute.
• Your right to data portability: In some circumstances you have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if you gave us the data, and if we are processing information based on your consent or under a contract, or in talks about entering into one, and the processing is automated.

If you want to exercise any of these rights, please just contact us on info@carbethplants.co.uk

To protect your privacy and security, we may also verify your identity before granting access or making corrections.

HOW LONG WE STORE YOUR PERSONAL DATA

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you have an account with us, your personal data will be kept by us for as long as your account remains active. If you deactivate your account, or we deactivate it due to a prolonged period of inactivity on your part, your data will be kept for a reasonable period of time after this so that we can complete any activities already initiated or where we have a need to retain your data for legal or technical reasons (including back-up systems). Following this period we will either delete the information or change it to a form that does not identify you. For details of retention periods please contact us at info@carbethplants.co.uk

CHANGES TO THIS PRIVACY NOTICE

This privacy policy was last updated on 27th March 2022.

We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this page regularly to keep up-to-date. If we make any material changes to the manner in which we process and use your personal data, we will contact you to let you know about the change.