Carbeth Plants Ltd, based at Gartcosh, Glasgow, Scotland, G69 8BD. We act as a Controller of your personal data which means we are trusted to look after and deal with your personal information in accordance with this policy. We determine the ways and means of processing and must therefore be accountable for it. If you have any questions we will be happy to answer them by contacting customer service through our email firstname.lastname@example.org.
The information we gather on our site falls into two categories: (1) personal data you supply when you become a member, order, complete a survey, post in a discussion forum, post news articles, or provide your email address, and (2) tracking information collected as you navigate through our Website.
We do not provide products to children or actively collect their personal data. If you believe that we have received information relating to persons under the age of 18 please contact us at email@example.com. If we become aware that a person under the age of 18 has provided us with personal information we will delete such information.
When you make a purchase, subscribe to our marketing messages or become a registered user, we collect personal data about you such as your name, mailing address, e-mail address, telephone number, username and password (identity and contact data).
When this type of personal data is collected, you will know because you will have to fill out a form of some sort or otherwise provide the personal data to us, for example in email or messages about your order.
We also collect financial and transactional data – details of orders made and processed; details of payments and cards used for payments.
We collect usage data relating to the products you purchased and how you use and navigate the website. We may also ask you to complete surveys and give feedback that we use for research purposes, although you do not have to respond to them.
We collect profile data which includes assumptions about your predicted buying behaviour and interests based on the usage data we collect about you and combined with non-personal data we obtain from third parties (see section entitled ‘Third Party Marketing” below for more information). We do not carry out automated individual decision making or profiling for the purposes of data protection legislation.
Under the Data Protection Legislation, we can only use your personal data if we have a proper reason for doing so, for example: consent, legitimate interests, performance of a contract or legal obligation.
Consent.We may process your data based on your consent for certain marketing purposes, specifically Third Party Marketing. However, most of our own marketing activities by email fall under legitimate interest (see below). You have the right to withdraw consent to Third Party Marketing at any time. For more information on marketing, see the Third Party Marketingsection below.
Legitimate interests.We may process your personal data when we have a legitimate reason to use it, that is proportionate to your rights. This includes:
Performance of a Contract.We’ll use your personal data if necessary perform a contract with you, or a contract which we are about to enter with you, for example, to:
Legal obligation.Sometimes we are under a legal obligation to use your personal data, for example where we:
If you want to exercise any of these rights, please just contact us on firstname.lastname@example.org
To protect your privacy and security, we may also verify your identity before granting access or making corrections.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
If you have an account with us, your personal data will be kept by us for as long as your account remains active. If you deactivate your account, or we deactivate it due to a prolonged period of inactivity on your part, your data will be kept for a reasonable period of time after this so that we can complete any activities already initiated or where we have a need to retain your data for legal or technical reasons (including back-up systems). Following this period we will either delete the information or change it to a form that does not identify you. For details of retention periods please contact us at email@example.com
We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this page regularly to keep up-to-date. If we make any material changes to the manner in which we process and use your personal data, we will contact you to let you know about the change.