General Data Protection Regulation Policy
The Person in Charge of our Information Security is: John Wilkes
I have not appointed a formal Data Protection Officer as, in my considered view, I do not fall in to any of the three categories requiring a Data Protection Officer.
Description of processing: The following is a broad description of the way I process personal data.
We promise that we will value the personal information entrusted to us and make sure we respect that trust.
We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how Europlanters uses your data; for example we will explain things such as our credit checking procedure, and how we store data.
It’s likely that we may need to update this Privacy Notice from time to time. We hope the following will answer any questions you have but if not, please do get in touch with us.
The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent.
For example, when you tick a box or opt-in to receive email newsletters.
When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.
For example, if you order an item from us for home delivery, we’ll collect your address details to deliver your purchase, and pass them to our courier where necessary.
For example, we can pass on details of people involved in fraud or other criminal activity affecting the Partnership to law enforcement .
For example, we will use your purchase history to send you or make available personalised offers.
We also combine the shopping history of many customers to identify trends and ensure we can keep up with demand, or develop new products/services.
We will also use your address details to send you direct marketing information by post, telling you about products and services that we think might interest you.
When do we collect your personal data
What sort of personal data do we collect?
For example, we collect notes from our conversations with you, details of any complaints or comments you make, details of purchases you made, items viewed or added to your basket, voucher redemptions, brands you show interest in, web pages you visit and how and when you contact us.
For example, which of our products you prefer and where you redeem vouchers.
How and why do we use your personal data?
We want to give you the best possible customer experience. One way to achieve that is to get the richest picture we can of who you are by combining the data we have about you.
We then use this to offer you promotions, products and services that are most likely to interest you.
Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.
For example, if you’ve asked us to let you know when we launch new products, we can’t do that if you’ve withdrawn your general consent to hear from us.
Here is how we use your personal data and why:
For example, your details may need to be passed to a third party to supply or deliver the product or service that you ordered, and we may keep your details for a reasonable period afterwards in order to fulfil any contractual obligations such as refunds, guarantees and so on.
We know how much data security matters to all our customers. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it.
We secure access to all transactional areas of our websites using ‘https’ technology.
Access to your personal data is password-protected, and sensitive data (such as payment card information) is secured by SSL encryption.
Your credit or debit card information provided during the ordering process is protected by 128-bit industry-standard Secure Sockets Layer (SSL) technology to provide encryption of personal information. This server encrypts information while it is being transmitted across the Internet so that unauthorised people cannot read it.
We do not see or collect your card details as this is securely handled by Sage Pay.
Cookies are used on this shopping site where they are strictly necessary for the site functionality. They are used to aid navigation, and to keep track of the contents of your shopping cart. If you log in to an account, your logged-in status is recorded in a temporary cookie. If you select the 'Remember Me' Option in the checkout, a cookie will be used to remember your details. You can turn off cookies by blocking them in your browser Privacy settings. If you turn off cookies, you will be unable to place orders or benefit from the other features that use them.
We regularly monitor our system for possible vulnerabilities and attacks, and we carry out testing to identify ways to further strengthen security.
How long do we keep your personal data
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Some examples of customer data retention periods:
When you place an order, we’ll keep the personal data you give us for five years so we can comply with our legal and contractual obligations.
If your order included a guarantee, the associated personal data will be kept until the end of the guarantee period.
Who do we share your personal data with?
We sometimes share your personal data with trusted third parties.
For example, delivery couriers, technicians visiting your home, for fraud management, to handle complaints, to help us personalise our offers to you and so on.
Here is the policy we apply to those organisations to keep your data safe and protect your privacy:
Examples of the kind of third parties we work with are:
What are your rights over your personal data?
You have the right to request a copy of any information about you that the Europlanters holds at any time, and also to have that information corrected if it is inaccurate. To ask for your information, please contact John Wilkes Europlanters, Unit 11 Chadkirk Business Park, Vale Road Romiley Stockport Cheshire SK63NE or email Info@europlanters.com To ask for your information to be amended, please contact our a member of our Customer Services team.
If we choose not to action your request we will explain to you the reasons for our refusal.
Your right to withdraw consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request.
Checking your identity
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
How can you stop the use of your personal data for direct marketing?
There are several ways you can stop direct marketing communications from us:
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated
We may check your details with appropriate third parties (for example credit reference agencies, such as Credit Safe) before we offer you a credit account on our services or products, to ensure your information is accurate and fulfils our legal and regulatory obligations.
Rest assured that all applications for credit accounts on our services and products will be assessed on a case-by-case basis.
Contacting the Regulator
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113.
Or go online to www.ico.org.uk/concerns
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.