This privacy notice covers our Garden Centre Loyalty Scheme. We describe here the data we collect from you when you sign up to be a scheme member, and the data we process when you are an active member.
These are our reasons for collecting it, what we do with it and what your rights are.
Who are we?
We are J. Parker Dutch Bulbs (Wholesale) Ltd., 14-16 Hadfield Street, Old Trafford, Manchester, M16 9FG, company registration number 01467306.
We operate three garden centres in Flixton, Mottram, Daisy Nook and Anwick and you can contact us either in person by asking to speak with our store manager or by emailing us at [email protected] or calling your nearest centre.
We are registered with the Information Commissioner’s Office (ICO – the UK’s regulator for personal data processing matters), registration number Z6957647.
Purpose of processing
We process your personal data for a variety of purposes as set out in the table below, which also shows our lawful basis under UK data protection legislation (UK GDPR) for doing so.
You are free to withdraw your consent at any time and we will remove your details from our records and cease to email you our offers.
| Purpose | Lawful Basis under UK GDPR |
|---|---|
| Registering your new membership of our garden centre loyalty scheme | Managing your account as a member and emailing you offers based on your purchase history on your purchase history and preferred store location |
| Your Consent | Your Consent |
Data we collect
The table below gives information on the categories of personal data we proces for each of the purposes shown above.
| Purpose | Categories of Data Processed |
|---|---|
| Registering your new membership of our garden centre loyalty scheme | Managing your account as a member and emailing you offers based on your purchase history on your purchase history and preferred store location |
| Name, address, email address, phone number, product interests | Purchase history, offers you are sent, history of redeeming offers |
Special category data
There are additional rules we must follow if we collect certain types of more sensitive data, known as Special Category Data. These include details of your ethnicity, beliefs, health and sexuality and in each case we must let you know if we process such data and what our additional lawful basis is for processing it.
We do NOT process any such special category data about you
How long do we keep your data for?
We will retain your personal data by default for the following periods unless you withdraw your consent:
| Purpose | Maximum Retention Period |
|---|---|
| Registering your new membership of our garden centre loyalty scheme | Managing your account as a member and emailing you offers based on your purchase history on your purchase history and preferred store location |
| 18 months after last purchase | 18 months after last purchase |
How do we keep your data secure?
We take sensible steps to keep your data secure and ensure we can uphold your rights and meet our obligations under UK GPDR:
Access to personal data is role based: only those members of staff with a legitimate need will have access,
Our systems are password protected and multi-factor authentication is enabled where available,
We ensure that appropriate contracts are in place to protect your rights, that the processors take appropriate security measures to safeguard your data, and that any international transfers are done correctly under UK GDPR,
Our employees are all subject to an obligation of confidentiality,
We utilise appropriate technical and organisational measures to optimise the security of your personal data.
Your rights
You have a number of rights relating to the processing of your data, if you would like to use them or have any questions then please contact us.
We won't charge you for doing any of the following, however we may make a charge in the case of frequent repeat or unfounded requests:
Awareness: You have the right to be fully informed about why and how we process your information. This privacy notice is intended to meet that requirement, but please do contact us if you have any questions.
Access: You have the right to a copy of the data we hold about you,
Rectification: If you think some of the data we hold is wrong then you have the right to ask us to correct it,
Erasure: You have the right to ask us to delete the data we hold about you, and we will do so,
Restriction: You have the right to restrict the processing of personal data whilst we check its accuracy, if you think the processing is unlawful, if you believe we no longer need to process the data but you need us to store it due to pending legal claims, or when you object to our processing based upon our legitimate interests and we are assessing the validity of that,
Object: Where we are processing your personal data based upon our legitimate interests you have the right to object to that. If your objection is valid then we will stop processing your personal data for that purpose,
Data portability: You can request a copy of your data in a digital format which you can then supply to another provider when we are processing your personal data under the lawful basis of performing a contract with you or because we have your consent,
Automated decisions and profiling: You have the right, in certain circumstances, not to be unfairly treated by decisions based on automated processing (including profiling) if it has significant or legal impact on you. This doesn't apply if the processing is necessary to fulfil a contract with you, or if you have given us your consent to do so.
Where do we process data?
We primarily process data in the UK however we use partners to help us deliver our services, some of these services will mean that your personal data are transferred outside of the UK. We may share your personal data with professional advisors from time to time, such as our accountants or legal advisors. We will always ensure that appropriate protections to your rights and freedoms are in place.
| Partner | Where do they process data? |
|---|---|
| Bloomreach (for sending you emails) | OpSuite (for managing your account) |
| We contract with their UK subsidiary however they may pass data on to their USA parent company | UK |
Making a complaint
Please contact us at the above address. You can also contact the Information Commissioner's Office (ICO) on their helpline 0303 123 1113 or online at www.ico.org.uk. If you should contact the ICO they will normally ask you to contact us first.