Privacy Policy Notice

The policy: This privacy policy notice is served by Aston Garden Ornaments under the website; [ https://astongardenornaments.co.uk ]. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website. If you do not agree to the following policy you may wish to cease viewing / using this website, and or refrain from submitting your personal data to us.

Policy key definitions:

• “I”, “our”, “us”, or “we” refer to the business, [Business name & other trading names].
• “you”, “the user” refer to the person(s) using this website.
• GDPR means General Data Protection Act.
• PECR means Privacy & Electronic Communications Regulation.
• ICO means Information Commissioner’s Office.
• Cookies mean small files stored on a users computer or device.

Key principles of GDPR:

Our privacy policy embodies the following key principles; (a) Lawfulness, fairness and transparency, (b) Purpose limitation, (c) Data minimisation, (d) Accuracy, (e) Storage limitation, (f) Integrity and confidence, (g) Accountability.

Processing of your personal data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

• Lawful basis: Consent
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include; .
  
• Lawful basis: Contract
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include; .
  
• Lawful basis: Legal obligation
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include; .
  
• Lawful basis: Vital interests
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include; .
  
• Lawful basis: Public task
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include; .
  
• Lawful basis: Legitimate interests
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties. / We do share your personal information with third parties and they include;
  

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your individual rights

Under the GDPR your rights are as follows. You can read more about your rights in details here;

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object; and
• the right not to be subject to automated decision-making including profiling.

You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the GDPR.

Internet cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, referred you to a third party website.

Some cookies are required to enjoy and use the full functionality of this website.

We use a cookie control system which allows you to accept the use of cookies, and control which cookies are saved to your device / computer. Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device, please see your web browser options.

Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

Fair & Transparent Privacy Explained

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.

Email marketing messages & subscription

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “Processing of your personal data” above. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.

Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.

Any email marketing messages we send are in accordance with the GDPR and the PECR. We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences, you can also unsubscribe from all MailChimp lists, by following this link, otherwise contact the EMS provider.

Our EMS provider is; [name of provider here]. We hold the following information about you within our EMS system;

• Email address
• I.P address
• Subscription time & date
• [list other data that is stored]

Important note concerning data processing in connection with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the responsible body for the data processing that occurs via this website has their basis outside of the European Economic area and Switzerland, then the associated Google Analytics data processing is carried out by Google LLC. Google Ireland Limited and Google LLC. will hereinafter be referred to as “Google”.

Google Analytics uses “cookies”, which are text files saved on the site visitor’s computer, to help the website analyze their use of the site. The information generated by the cookie (including the truncated IP address) about the use of the website will normally be transmitted to and stored by Google.

Google Analytics is used exclusively with the extension “_anonymizeIp ()” on this website. This extension ensures an anonymization of the IP address by truncation and excludes a direct personal reference. Via this extension Google truncates the site visitor’s IP address within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional situations will the site visitor’s full IP address be transmitted to Google servers in the United States and truncated there. The IP address, that is provided by the site visitor’s browser in using Google Analytics will not be merged by Google with other data from Google.

On behalf of the site operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity and to provide other website and internet related services to the site operator (Art. 6 (1)( f) GDPR). The legitimate interest in data processing lies in the optimization of this website, the analysis of the use of the website and the adaptation of the content. The interests of the users are adequately protected by the pseudonymization of their data.

Google LLC. has certified their compliance with the EU-U.S. Privacy ShieldFramework and on that basis they provides a guarantee to comply with European data protection law. The data sent and linked to the Google Analytics cookies, e.g. user IDs or advertising IDs will be automatically deleted after 50 months. The deletion of data whose retention period has been reached is done automatically once a month.

The website visitor may refuse the use of cookies by selecting the appropriate settings in their browser. The website visitor can also prevent Google from collecting information (including their IP address) via cookies and processing this information by downloading this browser plugin and installing it: https://tools.google.com/dlpage/gaoptout

The website visitor can prevent data collection via Google Analytics on this website by clicking here. An “Opt-out Cookie” shall then be applied which shall prevent any future collection of the site visitors data when visiting this website.

Further information concerning data processing and use by Google, the settings and deactivation possibilities can be found in the Google Privacy Policy (httpss://policies.google.com/privacy) as well as in the Google Ads Settings (httpss://adssettings.google.com/authenticated).

reCAPTCHA

We use the reCAPTCHA service provided by Google Inc. (Google) to protect your submissions via internet submission forms on this site. This plugin checks if you are a person in order to prevent certain website functions from being (ab)used by spam bots (particularly comments). This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google. However, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area and is, as such, anonymized. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCaptcha from your browser shall not be merged with any other data from Google.
This data collection is subject to the data protection regulations of Google (Google Inc.). For more information about Google’s privacy policy, please visit:httpss://policies.google.com/privacy?hl=en
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.