We take data privacy very seriously and this document describes how we handle and manage your data.
- We are Elsoms Trees Ltd, and you can contact us at firstname.lastname@example.org.
- We process your data to provide our services to you, or for our legitimate interests.
- We only process your data for as long as we need to, and then we delete it.
- We do not share your data with others unless they are providing a service to us (such as payment service providers), or unless you ask us to share your data.
- Our service includes a number of places where you can send data to third parties. If you want to use these, you should check you are happy with the way they use your data.
- We do not market to you or sell your data.
- You’ve got lots of rights, including the right to complain to the Information Commissioner’s Office. If you need a hand in exercising your rights, feel free to contact us on email@example.com.
Who we are
How we process your data
Throughout your interactions with us we will collect only the data that we require in order to provide you with the service that you are requesting.
We may use your data to:
- review website and usage to improve and develop our website and our products and services;
- respond to your queries;
- carry out analysis of data generated during your visit to our website for our own market research purposes and to track and measure the impact, results or changes to our website;
- comply with any applicable law, legal process or enforcement by any regulatory body.
The key information that we capture and process is shown below for your information:
When you access our service we will store a record of your IP address along with details of your request in our logs. This information is stored and used by our web developer to ensure the integrity of our service.
Authorisation and session data
Whenever you visit our website we will use several cookies that will identify you to our service. This is necessary to provide the service to you.
Session cookies are used to associate and authenticate you with our website, match your browser with your actions on our site. For example, selecting a product and adding it to your order.
You may block, delete or disable any of these as your browser or device permits, but doing so will limit what you can do on our website.
In addition to these cookies, we use Google Analytics to help analyse the use of our website. This software stores temporary cookies on your computer or mobile device to collect standard visitor behaviour information in an anonymous form. The information collected (including your IP address) is sent to Google and held for 14 months. We can then log-in to Google and evaluate what pages users look at.
We do not collect any information that personally identifies visitors to our site. We do not associate any data gathered from this site with any personally identifying information from any source as part of our use of Google Analytics. Also, Google will not associate your IP address with any other data they hold.
If you wish to opt out of being tracked by Google Analytics across all websites, visit tools.google.com/dlpage/gaoptout
Your contact information
We ask for contact information, including your name and e-mail address so that we can respond to your enquiry.
Your contact information may be stored in various systems that we use. This is necessary to provide our service to you.
Your contact information will be retained until we are no longer under any legal obligation to store this information, or we have deemed all services with you to have been fulfilled, whichever is the later.
We store your e-mail address for the purposes of replying to your enquiry. Your e-mail address will be kept until such time as all information associated with it are deleted from our systems.
If you send us e-mails, these will be passed through our mail server. This is necessary to provide our service to you.
E-mails directly to/from our employees
If you communicate with our employees directly by e-mail, we may retain your name and e-mail address in the mailboxes of the employee(s) that you communicate with, together with its contents and metadata. This is necessary to provide our service to you.
Call logs & recordings
We do not log or record telephone calls.
We store backups of data for use in disaster recovery. This is necessary to provide our service to you.
Backups can only be obtained by authorised members of staff, which varies according to the type of data stored and its purpose.
Support by e-mail
If you contact us by e-mail or through our website, you will be sharing your contact details (name and e-mail address) with us for the purposes of responding to your query. This is necessary to provide our service to you.
We retain all support requests (including name & contact details) that we receive for the purposes of auditing and training of staff.
We operate servers which are managed by companies compliant with GDPR regulations or are covered by the EU-US Privacy Shield.
Removal of your personal data
In some cases, you may be able to request that we remove your personal data from our systems. To do so please contact us using the information below.
You have a lot of rights, including right to request access to and rectification or erasure of your personal data or restriction of processing of it. You also have the right to object to our processing of your data in some situations, as well as the right to data portability.
Notification of data breaches
Upon discovering any data breaches, we will notify any affected individuals as soon with 72 hours. In the event of a data breach concerning personal data, the affected parties will be notified by e-mail to the main e-mail address we store with your account.
Our lawful basis for data processing
Under the General Data Protection Regulation, unless we have otherwise specified above, we will be processing your data as a legitimate interest. These interests include staff training, ensuring the security of our systems and to allow us to operate our business in an efficient manner.
Where our processing is based on consent, you may withdraw consent at any time.
Where our processing is necessary for us to perform our contract with you, or to take steps to enter into a contract with you, we will not be able to enter into a contract with you or deliver our service to you if you do not give us the data in question.
Disclosure of information to law enforcement agencies
We may disclose your information if we are requested to by any law enforcement agency where we believe we are required to comply with the request under any applicable laws.
Data protection authority
You may have the right to lodge a complaint with your local data protection authority or the Information Commissioner’s Office (ICO) in the United Kingdom (our authority).
The ICO can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Other information can be found on their website at ico.gov.uk.