Privacy Policy
At Green & Gorgeous your privacy is important to us. We will never transmit information that can identify you to any third party for marketing purposes. The personal information we store about you is used only for invoicing and material deliveries, and email marketing (if you choose to subscribe). No data about you is transferred or processed outside of the UK.
The information we collect
For the purposes of the GDPR legislation 2018, the data controller is Paul Hermon T/As Green & Gorgeous. The legal basis for collecting data is the contractual necessity of servicing your requirements for garden & landscaping work to be done on properties over which you have control.
The information stored about you on our servers is related to account information (invoicing and delivery addresses, email address, names and contact phone numbers), required to fulfil our service to you and the necessary administration that goes along with that. Additionally, the information related to orders placed or work carried out in the past are stored in our internal systems.
Data security
All the information is stored on secure servers. The transfer of data outside of our internal systems is done on secure channels. All our Data Processors are UK established companies and they have similar Privacy policies in place in order to ensure data security. Paper records are held in secure locations. However, other organisations we work closely with, are not normally involved in data processing, but may come in contact with it in the course of system servicing, breakdowns, updates etc.
Information we use
The main purpose of the information we collect is to be able to fulfil our service to you. For this purpose, the information might be shared internally, and authorised employees may have access to it.
No credit card or banking information is stored on our systems, irrespective of how the payment is being processed.
The information we share
In order to fulfil orders for materials required at your property your name & address details may be sent for processing to third parties with which we have contractual relationships for this purpose. This includes plant & material suppliers, couriers, Royal Mail and other parties involved in the delivery.
No other information related to you is shared with third parties for further processing or use inside or outside the UK.
We may employ the services of other marketing agencies, however for the purpose of their activity they act as Data controllers, not relying on data collected by us.
Marketing communications
We have policy against spam in any of its forms (print, electronic or via voice). You will not receive any marketing communication from us unless you have opted-in to our marketing list.
We may use the information stored about you to send you email marketing communication. This may imply profiling based on your personal data, and order history. The information processing is handled only by Green & Gorgeous employees, and no other parties have access to this process.
No third parties will be allowed to send you marketing communication through us.
Your rights
You have the right to access, change or have the data about you removed from out systems in accordance with the General Data Protection Regulation (GDPR) of 2018. You may request a copy of the data we’re holding about you and information about the way we process it. You have the right to withdraw consent at any time.
The right to be forgotten
You may request to have all your data stored with us deleted. However, due to legal requirements, data related to financial transactions are kept on record for a period of 5 years. At your request, this data can be anonymized.
The right to be informed
You are entitled to be informed on how we process the data about you, for how long we’re storing information about you in a plain and simple language.
The right to access
Under GDPR, you have the right to access the personal data held and confirm that your data is being processed, for free.
Right to rectification
Inaccurate or incomplete data must be rectified – if this data has been disclosed to third parties, they too must be notified for the rectification.