PRIVACY POLICY
PRIVACY POLICY
This privacy policy applies between you, the User of this Website, and Holistic Herb Ltd, the owner and provider of this Website, www.holisticherb.co.uk.
Holistic Herb Ltd takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.
When you use our website at holisticherb.co.uk. This policy also applies if you purchase our products or services online, over the phone, by email or interacting with us on social media.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
INFORMATION WE COLLECT FROM YOU
We will collect and process the following data from:
Information you provide by completing forms on the site, such as your name, address, date of birth, telephone number, email address, bank account and payment card details and any feedback you give to us, including by phone, email, post, or when you interact or communicate with us via social media.
At the time of registering to use our site you have the option to choose the ways you prefer to hear from us by opting in to email, post or telephone. If you opt-in we can keep up to date occasionally on the latest news, product information, competitions and exclusive offers and promotions.
We place an open pixel in our email marketing campaigns – an invisible graphic that lets us know if you read the email. This helps us tailor future emails to you and provide you with a better service. To disable the open pixel, you can disable images in your emails, however this may mean that our emails don’t look as good, you may not be able to see the content in emails, and/or future emails may be less relevant to you. You can also unsubscribe from our emails at any time by clicking the unsubscribe link in any email.
Your account login details, including your username and chosen password.
Once you’ve registered with us you have the option to manage your communication preferences at any time from your account dashboard. Any consent or change to consent will be recorded by the method the consent was acknowledged (email, telephone, website form, account dashboard), including date and time.
If you contact us, we may keep a record of that correspondence.
Information about the products and services that we provide to you including, when and where, what you paid, details of transactions you carry out through our site and of the fulfilment of your orders.
Through Social Media we collate information about the engagement you have with our social posts such as likes, comments and shares and what private messages you send us. We access this information from the relevant social media servers.
HOW WE USE YOUR INFORMATION
We use information about you to for the following main purposes:
We will do so on the basis that it is necessary for our legitimate interests in promoting and marketing our products and services.
We only market to you if you have given your consent, or if there is a ‘legitimate interest’. Marketing to you under legitimate interest will mean that we have established that there is a commercial or business reason to market to you which must be fair to you, so we can’t just send you any marketing material. If you do not want us to collect or process personal data from our website you have the right to prevent future processing. As standard, we will contact you to confirm your choices regarding the use of your personal data in line with changes in the regulation, law, or business changes and we have a specific set of marketing preferences in your account that you can update at any time.
To provide you with the products or services that you order from us, and to respond to any queries, complaints or requests for further information and for internal record keeping, billing and accounting. We will do so on the basis that it is necessary for our performance of the contract we have with you, or that it is necessary our legitimate interests in managing our business and improving our products and services.
To provide you with information about our other products and service that you request or we feel may interest you, where you have consented to be contacted by email, post or telephone.
We may also use information about you for the following additional purposes:
To build a profile about you so we understand our customers better, identify the products and services you purchase.
To conduct market research, either by ourselves or with reputable agencies.
To improve our online customer experience, content, email and social media communication, to ensure is interesting, personalised and relevant.
To ensure the content on our site is presented correctly for the computer or device you are using.
To process orders, take payment, provide refunds or carry out obligations arising from transactions between you and us.
Help answer your questions and solve any issues or queries.
To help us stay secure and ensure our customers are genuine to prevent fraud.
To notify you about changes to our service.
We will do so in each case on the basis that it is necessary for our legitimate interest in promoting and marketing our products and services, managing the site and providing a better service for our customers.
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to the service providers we work with, including suppliers, insurers and agencies, so they can process your personal information on our behalf, where this is necessary for our legitimate interest in managing our business and improving our products and services, and where they meet our standards on the processing of data and security. We only share information that allows them to provide their services to us or to facilitate them providing their services to you.
We may also disclose your personal information to third parties in the following circumstances where this is necessary for our legitimate interest, or we are obliged by law to do so, as follows:
If required to by law, under any code of practice by which we are bound or we are asked to do so by a public or regulatory authority such as the Police or the Department for Work and Pensions.
If we need to do so in order to exercise or protect our legal rights, users, systems and services.
In response to requests from individuals (or their representatives) seeking to protect their legal rights or the rights of others.
TRANSFERRING YOUR PERSONAL DATA OUTSIDE THE EEA
The data that we collect from you may be processed (for the fulfilment of your order, the processing of your payment details, hosting and the provision of support services) by staff operating outside the EEA who work for us or for one of our suppliers, or otherwise transferred to, and stored at, a destination outside the European Economic Area (“EEA”) where local laws provide for a lower standard of protection for personal data than in the European Union. We do so on the basis of our legitimate interests in managing our business and improving our goods and services.
HOW LONG WE KEEP YOUR INFORMATION
If you contact us with an enquiry but do not enter into a contract with us, we will delete your personal data after 12 months. If you order any of our goods or services, we will normally retain contract information (including personal data) for 7 years after the end of the relevant contract, in case issues arise after the termination of the contract, or for longer if we are required by law or regulatory requirements to do so.
We will always retain your personal information in accordance with the Data Protection legislation and will aim never to retain your information for longer than is necessary.
SECURITY
Where we have given you or where you have chosen a password which enables you to access our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
YOUR RIGHTS
As a data subject you have certain legal rights under the Data Protection legislation including:
the right to access the personal data held about you;
the right to ask us not to process your personal data for marketing purposes;
the right to withdraw at any time any consent you have given to receive marketing material from us (without affecting the lawfulness of processing based on consent before its withdrawal)
the right to ask us to rectify inaccurate personal data about you
the right to ask for the restriction of personal data concerning yourself that is inaccurate, unlawfully processed, or no longer required;
the right to ask for the erasure of personal data concerning yourself where processing is no longer necessary, or the legitimate interests we have in processing your personal data are overridden by your interests, rights and freedoms as the data subject; and
the right to make a complaint to the Information Commissioner’s Office.
At the time of registering to use our site you have the option to choose the ways you prefer to hear from us by opting in to email, post or telephone.
POLICY CHANGES
We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, we will amend the last modified date at the top of this page. Any modification or amendment to this privacy notice will be applied to you and your data as of that revision date. We encourage you to periodically review this privacy notice to be informed about how we are protecting your data.
HOW TO CONTACT US
If you have any questions, comments or requests about the site generally, please contact us by email, info@holisticherb.co.uk
If you any questions, comments or requests regarding our use of your personal data, or wish to delete your personal data from the Website, please contact us by email, info@holisticherb.co.uk or write to us at the following address:
The Data Protection Officer
Holistic Herb Limited
Suite 13, Davies House
Stourbridge
Worcestershire
DY10 1AF