Privacy, Cookies and Email Policy

THE LAWS CONCERNING DATA PROTECTION

Brookside Nursery Ltd are committed to protecting your privacy. We will only use the information that we collect about you lawfully (in accordance with the Data Protection Act 1998 and the Privacy and Electronic Communications (EC Directive) Regulations 2003) in addition to the updated General Data Protection Act 25th May 2018 and Eprivacy policy 2018.

Brookside Nursery Ltd are registered with the Information Commissioner under the Data Protection Act.

The laws concerning data protection sets out a number of different reasons for which a company may collect and process your personal data, including the following:

1. Consent

In specific situations, we can collect and process your data with your consent. For example, when you tick a box on our website or order forms to receive an email newsletter.

When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service

2. Contractual obligations

In certain circumstances, we would need your personal data to comply with our contractual obligations. For example, if you order an item from us for home delivery, we’ll collect your address details to deliver your purchase and pass them to our courier.

3. Legal compliance

If the law requires us to, we may need to collect and process your data.  For example, we can pass on details of people involved in fraud or other criminal activity affecting Brookside Nursery Ltd to law enforcement agencies.

4. Legitimate interest

In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.  For example, we will use your purchase history to send you or make available personalised offers.  We will also use your address details to send you direct marketing information by post, telling you about products and services that we think might interest you.

HOW AND WHEN WE COLLECT YOUR DATA

Our systems collect address and buying information at the point of order so that we may process your order and provide you with the best possible service.

We may also collect your data in any of the following circumstances:

  • When you visit our website, and use your account to buy products and services, or redeem vouchers.
  • When you make an online purchase and check out as a guest (in which case we just collect transaction-based data).
  • When you create an account with us on our website or by telephone.
  • When you request a paper catalogue through our website or by telephoning us.
  • When you engage with us on social media.
  • When you contact us by any means with queries, complaints etc.
  • When you enter competitions.
  • When you comment on or review our products and services.
  • When you’ve given a third party permission to share with us the information they hold about you.
  • When you ask us to contact you when a specific product is back in stock
  • When you click submit or place an item in your basket we may have the ability to retain some of your information, even if you don’t complete your registration. Such contact details and data may be used to contact you to enquire why you did not complete your registration/transaction, i.e. an abandoned basket email.

The information that we collect from you when you place an order is as follows.

  • your IP address, your  host name and your  country location
  • the type of device you used, such as mobile or desktop
  • your name and address and any delivery instructions
  • your telephone number and email address
  • the date and time you ordered
  • your  payment method
  • how much you paid
  • the shipping method
  • the number of loyalty points you earned, if applicable
  • any activity on the order, such as the date and time the order was completed.
  • whether you are a new customer, a returning one or a guest
  • the products you ordered

Please note: No payment information, such as your credit card number, is ever stored within our website or our servers. This information is always stored separately by our third party payment processing providers (such as Worldpay or Paypal)

The information that we may collect from you under any of the other circumstances listed above is as follows:

  • your name and address
  • the type of device you used, such as mobile or desktop
  • your IP address, your  host name and your  country location
  • your email address and telephone number
  • the date and time that you registerd your details
  • information about your activity on our website eg. If you have asked us to contact you when a particular item is back in stock.

HOW WE PROTECT YOUR DATA

We know how much data security matters to all our customers. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it.

Access to your personal data by our staff is password-protected, using strong, secure and hard to guess passwords, by using a combination of uppercase and lowercase letters, numbers and characters. These passwords are changed regularly for additional security.

All data processed through our website is done so through our website platform’s  highly secure servers which are located within RapidSwitch’s highly acclaimed and industry-leading data centre in Berkshire, UK. Rapidswitch provide world-class resilient infrastructure with multiple levels of security, including 24 hour monitoring, CCTV, and restricted access.

Should we ever experience a data breach, we will inform all affected customers immediately. As required, we will also inform the ICO (Information Commissioner's Office) within the specified 72 hours if it is likely that there will be a risk to people’s rights and freedoms. For instance, if personal data has been stolen or passed on to an unauthorised party.

 

HOW LONG WE KEEP YOUR DATA

Whenever we keep your personal data we’ll only keep it for as long as is necessary for the purpose for which it was collected.

At the end of the retention period your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.

 

YOUR MAILING PREFERENCES

We want to give you the best possible customer experience. One way to achieve that is to get the richest picture we can of who you are by combining the data we have about you.

We then use this to offer you promotions, products and services that are most likely to interest you.

The data privacy law allows this as part of our legitimate interest in understanding our customers and providing the highest levels of service.

Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.

There are several ways you can stop or start direct marketing email communications from us:

  • Click the ‘unsubscribe’ link in any email communication that we send you. We will then stop any further emails.
  • Email care@brooksidenursery.co.uk
  • Call us on 0333 335 6789
  • Write to: Customer Services, Brookside Nursery, School Lane, Hints, Tamworth, B78 3DW

If you would like to stop or start receiving our Brookside Nursery catalogue via post:

  • Email care@brooksidenursery.co.uk
  • Call us on 0333 335 6789
  • Write to: Customer Services, Brookside Nursery, School Lane, Hints, Tamworth, B78 3DW

Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.  If you change your mind at any point, that’s fine, just let us know through any of the methods above.

WHO WE MAY SHARE YOUR DATA WITH

We will not share your details with other parties to be used for marketing purposes.

We do not sell, rent, share, trade or give away personal information about our customers unless we are required to do so by law or to other companies which perform specific functions on our behalf, such as the delivery of parcels. When we disclose information to these service providers, it is purely to help them perform their service. For example, we may pass on your address details to our Parcelforce or Royal Mail to enable them to send you your products. Or, in the case of credit card payment, our payment provider Worldpay will take your information in order to process payment for your items.

 

YOUR RIGHTS OVER YOUR PERSONAL DATA

An overview of your different rights.

You have the right to request:

  • Access to the personal data we hold about you, titled a ‘subject access request’. 
  • That all your data is deleted from our system.

For both the above requests you must write to:

Brookside Nursery Ltd, School Lane, Hints, Tamworth, Staffordshire, B78 3DW

Your request will be acknowledged upon receipt and we will come back to you within 30 working days. Please note that if you are requesting we delete your record we may out of necessity still hold one file with a note of your request for administration purposes.

  • The correction of your personal data when incorrect, out of date or incomplete. 
  • For example, when you withdraw consent, or object and we have no legitimate overriding interest, or once the purpose for which we hold the data has come to an end (such as the end of a warranty).
  • That we stop using your personal data for direct marketing (either through specific channels, or all channels).
  • That we stop any consent-based processing of your personal data after you withdraw that consent.

Your right to withdraw consent

Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.   Please see ‘Your Mailing Preferences’ for further information on how to do this.

You can check the information that we hold about you by emailing us. If you find any inaccuracies, we will delete or correct it promptly.

Where we rely on our legitimate interest

In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

Direct marketing

You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request.

Checking your identity

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove that they have your permission to act.

COOKIES SET BY BROOKSIDE NURSERY

When browsing the internet and using online services, this sometimes involves placing small amounts of information on your web enabled device, this includes small files known as cookies. They cannot be used to identify you personally.

Cookies are used to improve services for you, for example:

  • Enabling a site to recognise your web enabled device so you don’t have to repeat information already given
  • Recognising that you may already have username and password so you don’t need to enter this every time your requested
  •  Measuring how many people are using the site, so usability can be improved.

You can read more about these small files yourself, via the following link Internet browser cookies - what they are and how to manage them.

 

Our site contains links to other sites. Brookside Nursery Ltd are not responsible for the privacy practices, or the content, of those web sites.

If you have any questions/comments or concerns about privacy, please email care@brookidenursery.co.uk

 

 
Brookside Nursery