A privacy notice is a document that organisations give to individuals that describes the way their personal data is being collected and used. It has two aims: to promote transparency and to give individuals more control over the way their data is used. 

At Sarah’s Flower Patch we obtain, store and process your data in the following way: 

Personal Data Type: Email address. 

Source: Collected directly from the data subject via opting into keeping in touch through our website, social media sites or our market research questionnaires. 

What is the lawful basis for processing the data under GDPR?

Data subject’s consent. 

How is the data stored & how long for? 

The email address will be stored electronically in a distribution list which can only be accessed via a secure site using a username and password. The data will be stored until the data subject opts out or the business folds in which case data records will be deleted. 

Will data be shared with third parties? 

Your personal data will not be passed onto third parties. 

Your Rights: 

1. Right to be informed: organisations must tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties. 

2. Right of access: individuals have the right to request a copy of the information that an organisation holds on them. 

3. Right of rectification: individuals have the right to correct data that is inaccurate or incomplete. 

4. Right to be forgotten: in certain circumstances, individuals can ask for the data an organisation holds on them to be erased from their records. 

5. Right of portability: individuals can request that organisation transfer any data that it holds on them to another company. 

6. Right to restrict processing: individuals can request that an organisation limits the way it uses personal data. 

7. Right to object: individuals have the right to challenge certain types of processing, such as direct marketing. 

8. Right related to automated decision making including profiling: individuals are free to request a review of automated processing if they believe the rules aren’t being followed.