We believe data protection is a serious issue. The use of information about individuals by businesses is subject to a complex array of data protection laws. The key pieces of data protection for the UK and privacy legislation include:
- General Data Protection Regulation (GDPR)
- The Data Protection Act 1998
- The Privacy and Electronic Communications Regulations 2003
- The Freedom of Information Act 2000
- Regulation of Investigatory Powers Act 2000
- The Human Rights Act 1998
What is General Data Protection Regulation (GDPR)?
It explains the general data protection regime that applies to most UK businesses and organisations. It covers the UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018. You can learn more here.
Why We Collect Your Information
To be able to give the best possible experience when shopping with us at GardenSite. The data we collect about you helps us personalise your shopping experience and offer personal recommendations and promotions.
The Information We Collect
We use secure server technology to safely hold your sensitive data which you transmit to us. You will provide specific information during your purchase including:
- Your name
- Email address
- Telephone numbers
- Payment information
- IP Address
We may record calls from and to our customer service team for accuracy and training. When placing an order through our site your sensitive payment details will not be saved. We use SagePay as a payment gateway who store sensitive payment information to allow a transaction to be processed successfully by us.
How We Use Your Information
Order Processing and Customer Support
We use your data to process orders made through our websites or stores. If we don’t collect your personal data during the checkout process, we won’t be able to process your order and comply with our legal obligations.
Customer Care and Customer Support
To respond to your queries, refund requests and complaints. Handling the information you sent enables us to respond. We may also keep a record of these to enable any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding of how we can improve our service based on your experience.
Security, Safety, and Dispute Resolution
To protect our business and our customers from fraud and other illegal activities. This includes using your personal data to maintain, update and safeguard our genuine customers. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.
Communication and Marketing
Around 2 weeks after receiving your product, we may send you an email inviting you to review and rate the product that you purchased.
Please be aware that:
- Your review may be shared on other company websites.
- Once submitted, it usually takes 72 hours for your review, question or answer to appear on the website, providing it adheres to our guidelines.
If you require any further information on this service or wish to have your review removed, please contact our Customer Care team.
We may, in our absolute discretion, accept or reject any product review which may be submitted to us. We may edit any such review for both length and/or content as we see fit. All reviews are submitted on the basis that we may use the review, in any format and for any purpose we see fit and for any marketing or promotional purposes.
Email, SMS and Telephone
We use emails, SMS or telephone calls to update you about the progress of your order. You will receive an email with your receipt and customer order number. If you do not wish to receive emails from us please do not include your email address. We will need a contact number for you so we can update you about the progress of your order.
To protect our customers, premises, assets and Partners from crime, we operate CCTV systems in our stores and car parks which record images for security. We do this on the basis of our legitimate business interests.
Does GardenSite Sell Information To Third Parties?
No. We never have. And we never will.
When We'll Share Your Data With Third Parties
We work with hundreds of supplier partners for us to be able to fulfil an order. We'll only share your data with third parties to help us process a transaction, provide a better service or to investigate and prevent crime.
For example, giving your address to a supplier, distributor or courier so they can deliver your order, or provide a service guarantee. These third parties may work with other third parties where your order may be passed through a chain of suppliers, distributors or couriers to fulfil your order.
Third Party Sites
Be sure that you ask your parents before submitting any sensitive data about yourself to us.
How To Contact Us
If you have any questions about the use of your personal information, please contact us.
Unless otherwise stated, we collect data through our website subject to this Privacy Statement. Our address is 211 - 213 Chester Road, Sutton Coldfield, Birmingham B73 5BD, UK.
Know Your Rights
You have many rights regarding your personal data. These include seeing what data we hold and updating your information.
The GDPR includes the following rights for individuals:
- the right to be informed;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object;
- the right not to be subject to automated decision-making including profiling.
You can contact us to request to exercise these rights at any time as follows: The Data Protection Officer, 211 - 213 Chester Road, Sutton Coldfield, Birmingham B73 5BD, UK. We will endeavor to comply within a month. If we choose not to action your request we will explain to you the reasons for our refusal. To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice.
Data Protection Act 1998 Registration number ZA200854