C & K Jones Privacy Policy - May 2018

C & K Jones are committed to protecting your privacy and security. This policy explains what we do with personal data you provide to us and what we do to keep it secure. It also explains how we collect your personal data, as well as your rights over any personal data we hold about you. This policy applies to you if you use our products or services, whether over the phone, online, through any future mobile applications or by using our website or interacting with us on social media (our “Services”). This policy effects our commitment to protect your personal data.
From 19th May 2018, C & K Jones will ask customers to “opt-in” for marketing and other communications. This is due to a change to the rules which govern how we can communicate with you and a new regulation on personal data (the General Data Protection Regulation) coming into force on 25 May 2018.

Who are we?
When we say ‘we’ or ‘us’ in this policy, we’re generally referring to the legal entity C & K Jones, based at Golden Fields Nursery, Barrow Lane, Tarvin CH3 8JF
You can decide not to receive communications or change how we contact you at any time. If you wish to do so please email ck.jones@jonestherose.co.uk, or in writing to C & K Jones, Golden Fields Nursery, Barrow Lane, Tarvin CH3 8JF. or telephoning 01829 740663

We never have and never will sell your personal data, and will only share it with organisations we work with where necessary and if its privacy and security are guaranteed.

What sorts of information do we hold?
Information that you provide to us: Your name, address, telephone number, email address, and any feedback you give to us, including by phone, email, post, or when you communicate with us via social media;
Information about the products that we provide to you (including for example, the things we have provided to you, when and where, what you paid, and so on);
Your account login details, including your user name and chosen password;
financial information (payment information such as credit/debit card or direct debit details.

Information about any device you have used to access our Services (such as your device’s make and model, browser or IP address) and also how you use our Services. If you use our website, we may try to identify when and how you use the website too;
Your contact details and details of the emails and other electronic communications you receive from us, including whether that communication has been opened and if you have clicked on any links within that communication. We want to make sure that our communications are useful for you, so if you don’t open them or don’t click on any links in them, we know we need to improve our Services in the future.

How do we use your information?
The information we collect may be used to do the following:

Business Related:
Make available our Services to you;
Process your orders;
Deliver Products;
Take payment from you or give you a refund;
Provide for the safety and security of our colleagues and customers; and
Help answer your questions and solve any issues you may have.
Help us ensure that our customers are genuine and to prevent fraud;

Planting or Rose growing information
Inform you of the beginning and end of the bare root season
Tell you about rose care and rose culture
Tell you about any significant news that might affect roses.
Inform you of new varieties from breeders
Inform you of new techniques or growing requirements

Market research
Conduct market research, either ourselves or with reputable agencies;
For internal statistical analysis;
Help us understand more about you as a customer, the products and services you consume, the manner in which you consume them and how you shop with C & K Jones
Find ways to improve our services, stores apps and websites;

We do not intend to conduct very much direct marketing as our best sales people have been our customers telling others about our roses and the service we provide.
However, we may wish to do so in the future by either:
Sending a catalogue or list of roses to customers we have had contact with in the last 4 years;
Send vouchers if applicable;
Send a newsletter if applicable;
Personalise your shopping experience, for example by understanding your location or how you use our website, social media platform or future app to provide you with personalised offers or shopping ideas;
To market to you directly through email, social media or SMS services;
Our aim is to send out no more than one or two direct messages per year.
We may like to tell you about offers, ideas, products and services of C & K Jones from time to time that we think you might be interested in. Where you have consented to us doing so, we may do this through the post, by email, text message, online, using social media, push notifications via apps, or by any other electronic means. We won't send you marketing messages without your permission. If you wish to amend your marketing preferences, you can do so, by either logging into your C & K Jones account and following the directions or by emailing your request to ck.jones@jonestherose.co.uk

Who we might share your information with

Our service providers
We work with partners, delivery companies, marketing businesses and suppliers of web hosting or web mastery. We only share information that allows them to provide their services to us or to facilitate them providing our products and services to you. For example, some of our service providers may set up our social media sites and make posts on our behalf or invite you to an event where we are exhibiting. As a result, where you have indicated you are happy to receive marketing from us, you might receive such an invitation. We will request assurance and evidence that they will keep any data shared with them private and used only for the purposes of supplying their services to us.

Other organisations and individuals
We may transfer your personal information to other organisations in certain scenarios. For example:
If we're discussing selling or transferring part or all of our business, we may share the data we hold about customers and suppliers to prospective purchasers - but only so they can evaluate our business;
If we are reorganised or sold to another organisation, we may transfer information we hold about you to them so they can continue to provide the Services to you
If required to by law, under any code of practice by which we are bound or we are asked to do so by a public or regulatory authority such as the Police or the Department for Work and Pensions;
If we need to do so in order to exercise or protect our legal rights, users, systems and Services; or
In response to requests from individuals (or their representatives) seeking to protect their legal rights or the rights of others.
Data processing
The data we collect from you is held on a secure database held in our offices. We do not at any time place this file on a USB data storage device unless for transferring to a new computer. Any USB data storage devices containing personal data of any individuals would be encrypted.
Any data that you enter into our web shop is held securely and can only be accessed by ourselves and our web site administrator: Essential Design NW Limited, Dunham Hill, Cheshire, WA6 0JL

Access and correction of your personal information
You have the right to access the personal information that we hold about you in many circumstances. This is sometimes called a ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge. Before providing personal information to you or another person on your behalf, we may ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. If any of the personal information we hold about you is inaccurate or out of date, you may ask us to correct it. If you would like to exercise these rights, please contact us through your online account, by letter or via email.

You have the right to object to us processing your personal information if we are not entitled to use it any more, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.

How long do we keep your information for?
We will only use and store information for so long as it is required for the purposes it was collected for. How long information is stored for depends on the information in question and what it is used for. e.g, if you ask us not to send you marketing emails, we will stop storing your emails for marketing purposes (though will keep a record of your preference not to be emailed).
We continually review what information we hold and delete what is no longer required.
Payment card details are only kept for as long as it takes to process your payment or refund.

Sharing your thoughts
When using one of our websites or mobile applications, you may be able to share information through social networks like Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this your personal information may be visible to the providers of those social networks and their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts so you are comfortable with how your information is used and shared on them.

Security of your Data
We take security measures to protect your information including:
Limiting access to our buildings to those that we believe are entitled to be there (by use of secure padlock and office key);
Implementing access controls to our information technology, such as firewalls, ID verification and password protection of any databases containing personal data of any kind;
Never asking you for your passwords;
Advising you never to enter your account number or password into an email or after following a link from an email.

Financial Data Security:
All electronic forms that request financial data will use the Secure Sockets Layer (SSL) protocol to encrypt the data between your browser and our servers.
If you use a credit card to purchase something on-line we will pass your credit card details securely to our payment provider (Netbanx).
Of course, we cannot guarantee the security of your home computer or the internet, and any online communications (e.g. information provided by email or our website) are at the user’s own risk.
Keeping you in control
We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
the right to confirmation as to whether or not we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as subject access request);
the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason);
the right to have inaccurate data rectified;
the right to object to your data being used for marketing or profiling; and
where technically feasible, you have the right to personal data you have provided to us which we process automatically on the basis of your consent or the performance of a contract. This information will be provided in a common electronic format.
Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.

If you would like further information on your rights or wish to exercise them, please write to our Data Protection Officer at C & K Jones, Goldenfields Nursery, Barrow Lane, Tarvin CH3 8JF

You can complain to C&K Jones directly by contacting our data protection officer using the details set out above. If wish to make a complaint which does not directly relate to your data protection and privacy rights, Please send an email directly to ck.jones@jonesthrose.co.uk

If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk

Our website uses local storage (such as cookies) to provide you with the best possible experience and to allow you to make use of certain functionality (such as being able to shop online). Further information can be found in our terms and conditions. https://jonestherose.co.uk/content/3-terms-and-conditions-of-use

Changes to this Privacy Policy
We’ll amend this Privacy Policy from time to time to ensure it remains up-to-date and accurately reflects how and why we use your personal data. The current version of our Privacy Policy will always be posted on our website.
This Privacy Policy was last updated on 24.05.2018.

If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means: By email: ck.jones@jonestherose.co.uk By post: Data Protection Officer, C & K Jones, Golden Fields Nursery, Barrow Lane, Tarvin, CH3 8JF.