Data Protection Statement and Consent to the Use of Data by Terra-plants.co.uk
1. Controller and User Rights
The data controller responsible for collecting, processing, and using personal data under UK data protection law is TERRA-LEAF LTD, Company Registration Number: 12345678, registered at Unit 5, Industrial Estate Road, Chelmsford, Essex CM1 2XX, United Kingdom.
As the data controller, TERRA-PLANTS LTD can be contacted at the following:
By post at: Unit 5, Industrial Estate Road, Chelmsford, Essex CM1 2XX, United Kingdom
By email at: help@terra-leaf.co.uk
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:
– The right to be informed about how your data is used
– The right of access to your personal data
– The right to rectification of inaccurate data
– The right to erasure of your data
– The right to restrict processing
– The right to data portability
– The right to object to processing
– Rights in relation to automated decision making and profiling
To exercise any of these rights, please contact us using the details provided above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.
2. Collection, processing, and use of personal data
2.1 Customer Account
For every customer registering on our site using the “Create Account” feature, we create a customer account—password-protected direct access to the user’s stored basic data. Here, the user can view completed, in-progress, and recently dispatched orders, as well as manage personal data and newsletter subscriptions.2.1.1 Account Creation
During account registration, the following data is mandatory:- Email address
- Password
- Consent to the data protection provisions and acknowledgment of withdrawal rights
2.1.2 Using the Customer Account
Users can use their account to check past orders, subscribe or unsubscribe from the newsletter, track payment statuses, or submit complaints.2.2 Collection, Processing, and Use of User Data
We collect, store, and process user data in accordance with UK GDPR and the Data Protection Act 2018 to handle purchases, for technical administration, for our marketing purposes (see section 2.3), and to prevent unlawful acts and fraud. Personal user data is shared with third parties only when permitted by law, including for contract fulfillment, accounting, marketing purposes, or with the user’s prior consent. For example, cooperating service providers (couriers, logistics companies, banks) receive necessary data to fulfill orders. These providers may use the data only to perform their assigned tasks and are bound by data processing agreements.2.3 Use of User Data for Marketing Purposes
Besides processing data for purchase handling on terra-leaf.co.uk, we use user data to:- Continuously optimise user shopping experience with customer-friendly and personalised offers
- Communicate regarding orders, specific products, and marketing campaigns
- Recommend products or services that may interest the user
2.3.1 Newsletter
We use the user’s email to send newsletters in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). User confirmation of consent to receive newsletters is required before any marketing communications are sent. Users may unsubscribe at any time without cost (other than basic transmission fees) by notifying us in writing at the contacts in section 1 or by clicking the unsubscribe link in each newsletter.2.3.2 Banner Advertising
Data collected during user visits is also used for banner advertising—adverts linking back to terra-leaf.co.uk from third-party sites, usually employing cookies or pixels. Our aim is to provide adverts that are attractive and useful, primarily showing products the user viewed or similar items (retargeting). We use only pseudonymised data for banner adverts; direct user information (e.g., name or email) is not stored in cookies. More information about cookies, pixels, and retargeting is in sections 3 and 6 of these policies.3. COOKIES (COOKIE FILES)
Accepting cookies is a condition that enables the use of our websites. However, if a user blocks the use of cookies, our website and service will operate with limited functionality only.
What are cookies?
Cookies are small files saved on the user’s device, used by the user’s browser to store specific settings and data for exchange with our system. There are two types of cookies: session cookies, which are deleted when the user closes their browser, and persistent cookies, which are stored for a longer period or permanently on the user’s device. By storing these files, we can appropriately tailor our websites and our offer to user preferences. This makes it easier for users to use the service, for example by saving specific user data so they don’t have to enter it each time.
What cookies does TERRA-LEAF LTD use?
Most of the cookies we use are automatically deleted from the user’s computer hard drive when the browser session ends (session cookies). We also use cookies stored on the user’s computer hard drive. During the next visit, the service automatically recognises the user and their preferred information and settings. Persistent cookies (storage period from 1 month to 10 years) are saved on the user’s computer hard drive and are automatically deleted after a specified time. These cookies serve to make our offer even more efficient, secure and user-friendly. Through these files, it is possible to present users with information tailored to their interests. The sole purpose of cookies is to adapt our offer as closely as possible to customer expectations and thus make it easier for them to navigate our service.
What data is stored in cookies?
The cookies used by TERRA-LEAF LTD store only pseudonymised data. When a cookie is activated, it is assigned an identification number without linking the user’s personal data to this identification number. The user’s name and surname, IP address or similar user data that would enable direct assignment of the cookie to the user are not stored in the cookie. Based on cookie technology, we obtain only pseudonymised information, for example about which pages of our shop the user visited, which products they viewed, etc.
Retargeting
Our websites use so-called retargeting technology in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). We use this technology to offer users a more attractive online offer. It enables us to present appropriate advertising on our partner websites to users who have shown interest in our shop and our products. We are convinced that displaying personalised, interest-related advertising is generally more attractive to users than advertising that lacks such individual connection. The display of these advertising materials on our partner sites is based on cookie technology and analysis of previous user behaviour. This form of advertising is implemented completely anonymously.
When using our website, cookies are used that serve to collect, store and utilise data about user behaviour. Additionally, user data contained in cookies is stored after the browser session ends and is used, for example, during the next visit to the website.
How can you block cookie storage?
Browser settings are available that allow acceptance of cookie storage only when the user consents to it. In this way, future cookie storage can be blocked.
Usually, through the help function on the internet browser’s menu bar, you can obtain information about rejecting new cookies and disabling stored cookies.
For more information about managing cookies, please visit: https://www.aboutcookies.org/
4. WEB ANALYTICS
5. Google Analytics
6. RETARGETING AND DATA COLLECTION BY THIRD PARTIES FOR BANNER ADVERTISING PURPOSES
As part of our retargeting and banner advertising, we use third-party services that place cookies on our website, in accordance with applicable data protection regulations. These companies are:
- DoubleClick by Google, Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.com/intl/no/policies/technologies/ads/
- Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; https://www.facebook.com/about/privacy
7. SECURE DATA TRANSMISSION
All personal data of users is transmitted securely using encryption, in compliance with applicable legal requirements, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This applies both to the ordering process and to customer login. We employ TLS (Transport Layer Security) or SSL (Secure Socket Layer). Furthermore, our websites and other systems are protected by ongoing technical and organisational measures against loss, destruction, unauthorised access, alteration, or disclosure of user data by unauthorised persons.
