This privacy policy will explain the types of personal data we collect from you, what we do with it and your rights. “We” or “us” refers to Ornamental Trees Ltd.
Ornamental Trees Ltd is registered as a data processor under the Data Protection Act 1998. We only use the information that we collect about you in accordance with that legislation, along with the Privacy and Electronic Communications Regulations 2003, the updated General Data Protection Regulations 2018 and the ePrivacy policy 2018.
Who We Are and How To Contact Us
Should you wish to contact us, you can use any of the following methods:
Our Legal Basis for Collecting Data
Data protection law allows us to collect data on the following basis:
When Do We Collect Data
How Do We Collect Data
What Data Do We Collect
We may collect and hold the following types of data:
How We Use the Data We Collect
We may use your data to:
How Do We Store and Protect Your Data
We will only store your data for as long as it is necessary for the purpose it was collected. We retain transaction history so past purchases can be reviewed in the event of a query and so we can improve the relevance of the content we offer you.
We take the security of your personal information very seriously and take appropriate steps to protect it.
Access to data we hold is password protected with two factor authentication in place on our systems. Data is encrypted to ensure the best possible protection and penetration testing is regularly carried out. Our site meets the most robust operational and technical requirements for data and payment protection.
Who Do We Share Data With
We will only share your data with our trusted third-party service providers. We only share necessary information and only for the purpose of fulfilling our contract with them. This can include:
Privacy Policy of Other Websites
Our privacy policy applies only to our website and communications with us, if you click on a link to access another website you should read their privacy policy.
Your Legal Rights
Right to Access your Data - You have the right to request access to the data we hold about you, this will be free of charge in most cases. If you make this request, we have 1 month to respond.
Right to Rectification – you can request rectification of any incorrect, incomplete or out of date data we hold about you.
Right to Erasure – you can request erasure of your data once the purpose for holding this data comes to an end.
Right to Restriction – you have the right to request restriction of processing personal data if you believe the information we hold on you is not accurate or if you have objected to the processing of data.
Right to Data Portability - you have the right to receive the personal data we hold about you in a commonly used format and can request that this information is transmitted to another entity where this is technically possible.
Right to Object – you can object to the processing of your personal data in certain circumstances. You have the right to object to direct marketing and we will ensure that we comply with this request as soon as possible.
If you wish to exercise your legal rights, please contact us here.
How to Contact the Appropriate Authority
If you feel your personal data has not been handled correctly or are unhappy with our response to any query regarding the processing of your data, you can contact the Information Commissioner’s Office (ICO).
This Privacy Policy will update from time to time and was last updated on 26/10/2022. We will post updates directly to this page so you are always aware of information we collect, how we use it and under what circumstance we disclose it.
