Privacy Policy

1. Introduction

Rienfdomma Garden Centre ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website rienfdomma.com, use our services, or interact with us in our physical store located at 142 Garden Way, Cheltenham GL50 2PQ.

This policy is designed to help you understand:

• What information we collect about you
• How we use that information
• When we share information with others
• How we store and secure information
• Your rights and choices regarding your information

2. Information We Collect

Information You Provide Directly

We collect information you provide directly to us, such as when you:

• Fill out contact forms on our website
• Subscribe to our newsletter
• Make purchases in our store
• Book consultations or services
• Contact us via phone, email, or social media
• Participate in surveys or promotional activities

This information may include:

• Name and contact details (address, phone number, email)
• Payment information (processed securely through third-party providers)
• Purchase history and preferences
• Communications with our staff
• Feedback and survey responses

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Device information and operating system
• Pages viewed and time spent on our website
• Referring website information
• Date and time of your visit

Cookies and Similar Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

To Provide Our Services

• Processing orders and transactions
• Delivering products and services
• Managing appointments and consultations
• Providing customer support
• Maintaining customer accounts and records

To Communicate With You

• Sending newsletters and marketing communications (with your consent)
• Responding to your enquiries and requests
• Providing updates about orders, services, or appointments
• Sending important notices about changes to our policies

To Improve Our Services

• Analysing website usage and customer preferences
• Developing new products and services
• Improving our website functionality
• Conducting research and analysis

For Legal and Business Purposes

• Complying with legal obligations
• Protecting our rights and interests
• Preventing fraud and ensuring security
• Maintaining business records

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to fulfil our contractual obligations to you
• Consent: You have given clear consent for specific processing activities
• Legitimate Interest: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing required to comply with legal requirements

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in:

• Processing payments
• Delivering products
• Maintaining our website
• Providing email services
• Analysing website performance

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights and property
• Prevent fraud or security issues
• Protect the safety of our customers and staff

Business Transfers

In the event of a merger, acquisition, or sale of assets, customer information may be transferred as part of the transaction.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against:

• Unauthorised access or disclosure
• Alteration or destruction
• Loss or theft
• Accidental damage

Security measures include:

• Secure server environments
• Encryption of sensitive data
• Regular security assessments
• Staff training on data protection
• Limited access to personal information

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Typical retention periods:

• Customer records: 7 years after last transaction
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months
• CCTV footage: 30 days

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us using the information provided below.

9. Marketing Communications

We may send you marketing communications about our products, services, and events if:

• You have given explicit consent
• You are an existing customer (soft opt-in)
• We have a legitimate interest in contacting you

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Contacting us directly
• Updating your preferences in your account

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any linked websites.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

12. International Transfers

We primarily process data within the UK. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place to protect your information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our website

14. Contact Information

15. Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk