Opening times icon Mon - Sat 9am - 5.30pm, Sun - 10.30am - 4.30pm

Privacy Policy

  1. INTRODUCTION
    • This Privacy Policy describes in detail who is responsible for the personal information that we collect about you via the following channels: (i) through your use of our Internet Services; (ii) when you visit our stores; and (iii) when you place an order with us. This Privacy Policy also sets out how we will use such personal information, who we may disclose it to, and your rights and choices in relation to your personal information.
    • In this Privacy Policy references to:
      • weus or our means Yarnton Home & Garden
      • you or your means the person accessing and using our Internet Services (as defined below) or the person visiting one of our stores or placing an order with us;
      • the Internet Services means our Website (as defined below) and the WiFi that we make available to you in our stores;
      • Website means www.yarntonhomegarden.co.uk; and
      • personal information is information that is about you and which identifies you.
  2. Who is responsible for the personal information that we collect?
    • We are the controller for the purpose of data protection law, in respect of your personal information that is collected and used through your use of our Internet Services, when you visit our stores or place an order with us.
    • Our communications service provider for the purpose of the WiFi available in our stores is Public Internet (the “Wifi Provider“).
    • If you have any questions regarding this Privacy Policy or the way we use your personal information, you can contact marketing@yarntonhomegarden.co.uk
  1. What PERSONAL Information do we hold about you?
    • The personal information we collect includes:
      • Information that you provide to us:
        • your name, image and contact information (including email, telephone and postal address);
        • your marketing preferences;
      • in the course of communications between you and us (including by phone, email, till transaction or otherwise);
      • when you, for example, complete our forms (including the Contact Us form on our Website), surveys (including the Customer Satisfaction Survey form on our Website), use a store voucher or subscribe to our newsletter;
      • when you enter into our competitions or prize draws;
      • when you report a problem with our Internet Services or when visiting our stores; and
      • via our social media pages, other social media content, tools and applications.
      • Information we collect from you
        • CCTV recordings captured by equipment on our premises; and
        • Cookies
          Our Internet Services use cookies to distinguish you from other users of our Internet Services, and necessary core functionality such accessibility and security. This helps us to provide you with a good experience when you browse our Internet Services and also allows us to improve our Internet Services. Cookies are pieces of information stored directly on the device you are using to access our Internet Services.  Cookies allow us to recognise your device and to collect information such as IP address, internet browser type, time spent using our Internet Services and the pages visited; we also collect anonymous demographic and data interest-level reports via Google Analytics and Google Adwords, which will enable us from time to time to remarket Yarnton Home & Garden, our products and services, to you.You have the choice to accept or refuse cookies when you first visit our website, and also to view this Privacy Policy. You can alter your necessary core functionality cookies preferences via the Settings in your browser. Doing this, however, may alter your experience using our Internet Services.
      • Information we receive from other sources
        • personal information (such as your name, contact details and marketing preferences) which you have provided to a local newspaper or other publication, and where you have agreed for the above personal information to be shared with us for marketing purposes.

4. Information about third parties

    • In the course of your dealings with us you may provide us with personal information relating to third parties. For example, we may collect the following personal information about other third parties:
      • if you book a children’s birthday party, we will collect the name and age of your child;
      • if you book an event or restaurant table on behalf of someone, we will collect the full name of the person who the table or event is being booked on behalf of and any other third parties who are attending; and
      • if we were to deliver a gift or post a gift card on your behalf to a third party, we will collect the full name and postal address of the third party.
    • We will use this personal information in accordance with this Privacy Policy. If you are providing personal information to us relating to a third party, you confirm that you have the permission of the third party to share such personal information with us and that you have made the information in this Privacy Policy available to the third party.
  1. How do we use the personal information we collect about you?
    • Your personal information may be used by us, our employees, service providers, and disclosed to third parties for the following purposes. For each of these purposes, we have set out the legal basis on which we use your personal information.
Purpose Legal Basis
To communicate with you and other individuals about our products and services. The legal basis will fall into one of the following four categories, depending on the communication and the purpose for which it was sent:

·         our legitimate business interests in order for us to manage our relationship with you;

·         performance of a contract between you and us;

·         consent; and/or

·         compliance with legal obligations to which we are subject.

To carry out our obligations arising from any contracts entered into between you and us, and to provide you with our products and services. This processing is necessary for the performance of our contractual obligations between you and us.
To manage and administer our competitions, prize draws and promotions. This processing is necessary for our legitimate business interests in order for us to manage and administer our competitions, prize draws and promotions, including the provision of any prizes.
To notify you about changes to our Internet Services. This processing is necessary for our legitimate business interests in order for us to manage our relationship with you.
To improve the quality of our Internet Services and to ensure that our Internet Services functions properly, for example through the use of cookies.

 

This processing is necessary for our legitimate business interests in order for us:

·         to facilitate navigation, to display information more effectively, and to personalise your experience while using our Internet Services; and

·         to gather statistical information about the usage of our Internet Services in order to understand how our Internet Services are used, in order to continually improve our Internet Services design and functionality and assist us with resolving questions about them.

To improve our products, services and our staff training. This processing is necessary for our legitimate business interests in order for us to manage our relationship with you and to improve/develop our products, services and staff training.
To manage complaints, feedback and queries. Depending on the context, this processing will be necessary for:

·         the performance of our contractual obligations between you and us;

·         us to comply with our legal and regulatory obligations; and/or

·         our legitimate business interests in order for us to manage our relationship with you.

To carry out market research and analysis. The processing is necessary for our legitimate business interests because it enables us to develop and improve our Internet Services and our products and services offered to you.
To carry out satisfaction surveys and analysis. The processing is necessary for our legitimate business interests because it enables us to develop and improve our Internet Services and our products and services offered to you.  For example, we use your postcode data provided on your redemption of our vouchers to help us better understand where our customers are coming from, drive times and which areas we should direct our marketing to in the locality.
To provide you with information about other products and services that we offer in accordance with your marketing preferences. Depending on the method of communication, this processing may be carried out with your consent or in accordance with our legitimate business interests to process your information for direct marketing purposes.
To comply with any legal or regulatory obligations (including in connection with a court order). This processing is necessary for us to comply with our legal and regulatory obligations.
To prevent and detect fraud, financial crime and anti-money laundering. Depending on the circumstances:

·         the processing is necessary for us to comply with our legal and regulatory obligations; or

·         the processing is necessary for our legitimate business interests in order to conduct and manage our business.

The prevention and detection of crime ·         The processing of CCTV footage is necessary for our legitimate business interests. We have a legitimate interest in preventing stock loss and the detection of crime and to prevent the misuse of our car parks.

·         The processing may also be necessary in connection with legal proceedings (i.e. the establishment, exercise or defence of legal claims).

·         The prevention and detection of unlawful acts. Where the personal information constitutes details of criminal offences or activity, we will process the information on the basis that it is necessary for the prevention or detection of unlawful acts.

To enforce or apply the contracts concerning you (including contracts between you and us). Depending on the circumstances:

·         the processing is necessary for our legitimate business interests in order to conduct and manage our business; or

·         in connection with legal proceedings (i.e. the establishment, exercise or defence of legal claims).

  • We may be required to process your personal information to comply with our legal requirements, to enable us to fulfil the terms of any contract that we have with or in preparation of us entering into a contract with you. For example, if you do not provide the relevant personal information to us such as your name and postal address, we will not be able to provide the relevant product to you or another person (as may be requested by you).
  1. Who may we disclose your PERSONAL information to?
    • You agree that we may share your personal information with:
      • our business partners, suppliers and sub-contractors for the performance of any contract we enter into with you, for example we engage third parties to process card payments, deliver our products, provide our Internet Services, to send you marketing and surveys (through our use of third parties such as Campaign Monitor and Survey Monkey) and for data analysis;
      • our WiFi Provider;
      • other professional advisers (including accountants and lawyers) that assist us in carrying out our business activities;
      • police and other law enforcement agencies in connection with the prevention and detection of crime;
      • other external agencies and organisations (including the National Crime Agency) for the purpose of preventing and detecting fraud (including fraudulent transactions), money laundering and criminal activity; and
      • third parties if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or instructions of a regulatory body (including in connection with a court order), or in order to enforce or apply the terms of any agreements we have with or otherwise concerning you (including agreements between you and us) or to protect our rights, property or safety of our clients, employees or other third parties.
    • We may also disclose your personal information to other third parties, for example:
      • in the event that we sell or buy any business or assets we will disclose your personal information to the prospective seller or buyer of such business or assets;
      • if we or substantially all of our assets are acquired by a third party (or are subject to a reorganisation within our corporate group), personal information held by us will be one of the transferred assets; and
      • if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply the agreements concerning you (including agreements between you and us).
  1. Where will we transfer your personal information?
    • We will process your personal information both within and outside the European Economic Area (EEA). Where we transfer personal data outside of the EEA, we will implement appropriate and suitable safeguards to ensure that such personal information will be protected as required by applicable data protection law.
    • These measures generally include either:
      • transferring personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission under Article 45(1) of the General Data Protection Regulation; or
      • transferring personal information where the recipient has agreed to a European Commission approved data transfer agreement in the form of the standard contractual clauses under Article 46(2) of the General Data Protection Regulation.
    • Please contact our Finance Director using the contact details in section 2.2 above if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA.
  1. How long will we keep your personal information
    • We will keep your personal information for a period of up to 7 years after you provide your information to us, subject to the following exceptions:
      • records of incidents, injuries or accidents in store: 4 years from the date of the accident, injury or incident is recorded by us;
      • CCTV recordings: 40 days from the date of recording;
      • competition and prize draw entries will be kept until the end of the competition or prize draw and the fulfilment of any prize(s); and
      • we will keep your marketing preferences for as long as you wish to receive marketing communications from us.
    • Please note that all of the above retention periods may be extended where we need to preserve and use personal information for the purposes of bringing or defending a legal claim. In such cases, we will continue to hold and process your personal information for as long as is necessary to deal with the legal proceedings.
    • For further information as to our retention periods, please contact our Finance Director using the contact details as set out section 2.2 above.
  1. Your rights
    • You have certain rights with respect to your personal information. The rights may only apply in certain circumstances and are subject to certain exemptions.  Please see the table below for a summary of your rights.
    • If you wish to exercise any of the below rights, please can contact our Finance Director by using the contact details in section 2.2.
Summary of your rights
Right of access to your personal information You have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.

Any access request is free of charge. We may require further information in order to respond to your request (for instance, evidence of your identity and information to enable us to locate the specific personal information you require).

Right to rectify your personal information You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.
Right to erasure of your personal information You have the right to ask that your personal information be deleted in certain circumstances.  For example (i) where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used; (ii) if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information; (iii) if you object to the use of your personal information (as set out below); (iv) if we have used your personal information unlawfully; or (v) if your personal information needs to be erased to comply with a legal obligation.
Right to restrict the use of your personal information You have the right to suspend our use of your personal information in certain circumstances.  For example (i) where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information; (ii) the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead; (iii) we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.
Right to data portability You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.
Right to object to the use of your personal information You have the right to object to the use of your personal information in certain circumstances. For example (i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party) including for profiling; and (ii) if you object to the use of your personal information for direct marketing purposes, including profiling (to the extent it relates to direct marketing).
Right to object to decision which is based solely on automated processing You have the right in certain circumstances not to be subject to a decision which is based solely on automated processing without human intervention.
Right to withdraw consent You have the right to withdraw your consent at any time where we rely on consent to use your personal information.
Right to complain to the relevant data protection authority You have the right to complain to the relevant data protection authority, which is in the case of us, the Information Commissioner’s Office, where you think we have not used your personal information in accordance with data protection law.
  1. Third party links
    Our Internet Services may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for how they handle your personal information. When you leave our Internet Services, we encourage you to read the privacy notice of every website you visit.
  2. Changes to our privacy policy
    Any changes we make to this Privacy Policy in the future will be posted on this page and, where appropriate, actively communicated on our Internet Services or notified to you by email where we hold your contact details. The updated Privacy Policy will take effect as soon as it has been updated or otherwise communicated to you.
  3. Cookies policy
    Please see Item 3 Information We Collect From You.