In a nutshell: Your privacy is important to us. We will never transmit information that can identify you to any third party for marketing purposes. The information we collect regarding your visit is anonymous, aggregated and used only to improve the experience on the website. The personal information we store about you is used only for order fulfilment and email marketing (if you choose to subscribe). No data about you is transferred or processed outside of the UK.
The information we collect
For the purposes of the GDPR legislation 2018, the data controller is The Palm Centre Ltd. The legal basis for collecting data is the contractual necessity of fulfilling the orders you’re placing with us.
The information stored about you on our servers is related to account information (invoicing and delivery addresses, email address, names and contact phone numbers), required to fulfil your orders. Additionally, the information related to orders placed in the past are stored in our internal systems.
Cookies do not give us access to your computer or information about you, other than the data you choose to share with us.
All the information is stored on secure servers. The transfer of data outside of our internal systems is done on secure channels. All our Data Processors are UK established companies and they have similar Privacy policies in place in order to ensure data security.
However, other organisations we work closely with, are not normally involved in data processing, but may come in contact with it in the course of system servicing, breakdowns, updates etc.
Information we use
The main purpose of the information we collect is to be able to fulfil the orders you place with us. For this purpose, the information might be shared internally, and authorised employees may have access to it.
Additionally, information regarding your interest in receiving promotional offers from us may be stored on the website and processed for this purpose.
No credit card information is stored on our systems, irrespective of how the payment is being processed.
The website has mechanisms in place to prevent unauthorized access to your data.
The information we share
In order to fulfil your order, we will share the information related to your delivery address with third parties. For this purpose, the information is sent for processing to third parties to which we have contractual relationships for this purpose. This includes our couriers, Royal Mail and other parties involved in the delivery.
No other information related to you is shared with third parties for further processing or use inside or outside the UK.
We may employ the services of other marketing agencies, however for the purpose of their activity they act as Data controllers, not relying on data collected by The Palm Centre Ltd.
In a nutshell: We have a strong policy against spam in any of its forms (print, electronic or via voice). You will not receive any marketing communication from us unless you choose to do so, by explicitly subscribing to our newsletter.
In order to receive marketing communication from us, we employ a “double opt-in” process, where you are required to re-validate your email address after submitting a request to subscribe.
We may use the information stored about you to send you email marketing communication. This may imply profiling based on your personal data, and order history. The information processing is handled only by The Palm Centre employees, and no other parties have access to this process.
No third parties will be allowed to send you marketing communication through us (other Data Controllers), unless you explicitly chose to receive such communication.
In a nutshell: You have the right to access, change or have the data about you removed from out systems in accordance with the General Data Protection Regulation (GDPR) of 2018. You may request a copy of the data we’re holding about you and information about the way we process it. You have the right to withdraw consent at any time.
The right to be forgotten
You may request to have all your data stored with us deleted. However, due to legal requirements, data related to financial transactions are kept on record for a period of 5 years. At your request, this data can be anonymized.
The right to be informed
You are entitled to be informed on how we process the data about you, for how long we’re storing information about you in a plain and simple language.
The right to access
Under GDPR, you have the right to access their personal data, confirm that their data is being processed, for free.
Right to rectification
Inaccurate or incomplete data must be rectified – if this data has been disclosed to third parties, they too must be notified for the rectification.