For the purposes of this policy, Secret Garden defines the term “Client” as an entity with which Secret Garden has an established relationship, the term “Potential Client” as any individual who has contacted us for services/products and the term “Visitor” as an individual that visits our company website http://www.secretgardenlichfield.co.uk/ and/or social media sites.
We implement and maintain appropriate technical, security and organisational measures to protect Personal Data against unauthorised or unlawful processing and use, and against accidental loss, destruction, damage, theft or disclosure.
2. Collection and Use
2.1 The following sections cover the specifics of where our data is collected.
If you are a Visitor to our website and/or social media sites and are not a ‘Client’ or a ‘potential client’ that has contacted us directly then this section is relevant for you.
By visiting the http://www.secretgardenlichfield.co.uk/ website or social media sites, you consent to the collection and use of your Personal Data as described herein. If you do not agree with the terms set out herein, please do not visit this website. If required by applicable law, we will seek your explicit consent to process Personal Data collected on this website or volunteered by you. Kindly note that any consent will be entirely voluntary. However, if you do not grant the requested consent to the processing of your Personal Data, the use of this website is not be possible.
Secret Garden may collect, record and analyse information of visitors to its website.
We may add information collected by way of pageview activity. We collect and process any Personal Data that you volunteer to us in our website’s forms. If you provide us with your social media details, we may retrieve publicly available information about you from social media.
Such Personal Data may comprise of your first and last name, your postal and email address, your telephone number, your job title, data for social networks, your areas of interest, interest in Secret Garden services as well as information as to the type of relationship that exists between Secret Garden and yourself.
2.2.1 Purpose of processing personal data
Secret Gardenmay use the collected data to communicate with Visitors, to customise content for Visitors, to show ads on other websites to Visitors, and to improve its website by analysing how Visitors navigate its website.
2.2.2 Sharing personal data
Secret Garden will not share such information with service vendors or contractors or any third parties.
2.2.3 Links to other sites
In order to provide services to our clients and provide information to our potential clients we collect certain types of data from them. This section will describe how these types of data are collected and used by us.
2.3.2 Collection of client and potential client data
During a potential client’s registration, they provide information such as name, company name, email, address, telephone and other relevant data. This information is used by Secret Garden to identify the person/company and provide them with information on our products/services.
Secret Garden will not retain this data longer than is necessary to fulfil the purposes for which it was collected or as required by applicable laws or regulations.
We recognise that varying data is required dependent on type of client/customer. For example, when a customer who makes payment in cash and collects the product themselves, no personal data collection occurs.
2.4 Payment Processing
Secret Garden accepts card-not-present (telephone orders and/or website orders) transactions. All processing of cardholder data is entirely outsourced to PCI DSS validated third-party service providers. We do not electronically store, process, or transmit any cardholder data on our system or premises but rely entirely on a third party to handle all these functions. The third parties handling of storage, processing, and/or transmission of cardholder data are PCI DSS compliant. Secret garden will only retain cardholder data on paper, i.e receipts and these documents are not received electronically.
Whilst the card machine is connected to the internet in store, we do not store cardholder data on any computer system.
2.4.1 E-Commerce payments
Secret Garden accepts e-commerce transactions. All processing of cardholder data, with the exception of the payment page, is entirely outsourced to a PCI DSS validated third-party payment processor.
http://www.secretgardenlichfield.co.uk/ is hosted by a third-party provider who meets all the applicable data protection requirements.