Introduction
Highfield Garden Centre Ltd is committed to complying with the General Data Protection Regulation 2018 (“GDPR”). We understand the importance of keeping your personal data safe, private and secure and any personal information that you share with us is treated with the utmost security and confidentiality.
We have published this guide to help you understand how and why we collect information from you, to whom such information is disclosed and to inform you of your rights regarding your personal data that we hold or process.

About Us
We are Highfield Garden Centre Ltd, trading as Highfield Garden World, a company registered in England (Company No 4183496). The registered address is Highfield Garden Centres Ltd, Windsor House, Bayshill Road, Cheltenham, Glos. GL50 3AT.

We are listed on the Information Commissioner’s Register under reference number A8317828

All comments, queries or requests relating to our use of your personal information are welcomed:
 By e-mail – privacy@highfieldgardenworld.co.uk
 By post – Highfield Garden Centres Ltd, Bristol Road, Whitminster, Gloucester. GL2 7PB

If you have any questions about this Privacy Notice, please contact the data controller using the contact details above.

How do we collect information?
If you visit our garden centre to purchase products or services from us, or communicate with us via our website, post, email or social media pages, or sign up for our loyalty card, newsletters, enter competitions or apply for a job with us, we may collect personal data about you.

What information do we collect, how is it used and how long do we keep it for?
Highfield Garden World Privilege Card
When you sign up for our Highfield Garden World Privilege Card Scheme, either on our website, in-store or via a competition or promotion, we may collect your name, physical address, email, phone number, information about the use of your Privilege Card, shopping purchases and / or any other information that you may give us. We will use this information to provide you with benefits, competition and / or event information, special or personalised offers and to keep you updated with our latest news. By signing up to being a privilege card member you agree to Highfield Garden Centres Ltd holding and processing your personal data in order that we may provide the services of the Highfield Garden World Privilege Card Scheme.

We may also request your consent to sign you up to our Highfield Garden World e-news when you sign up for our Highfield Garden World Privilege Card Scheme. If you chose not to give your consent for this, it will not affect rights to participate in the Highfield Garden World Privilege Card Scheme.

Full terms and conditions of the Highfield Garden World Privilege Card Scheme please see our website.

You can terminate your membership of the Highfield Garden World Privilege Card Scheme in a number of ways:
By email, quoting “Termination from Highfield Garden World Privilege Card Scheme” and send to unsubscribe@highfieldgardenworld.co.uk
By post, quoting “Termination from Highfield Garden World Privilege Card Scheme” to Highfield Garden World, Bristol Road, Whitminster, Gloucester. GL2 7PB

We will retain your personal information for only as long as you remain a member (i.e. you do not terminate your membership) to the Highfield Garden World Privilege Card Scheme or if we decide to cancel your membership of the Highfield Garden World Privilege Card Scheme, whichever occurs first. If you have made any purchases as a Highfield Garden World Privilege Card Scheme member we may retain your information for up to seven years following the end of our financial year in which you were a member, in accordance with our legal obligations to keep records for tax purposes.

Highfield Garden World E-News:
When you sign up for our Highfield Garden World e-news, either on our website, in store or via a competition or promotion, we may collect your name and email address. We will request your consent to send you our e-news at the point of submitting your data to us. We aim to make it clear and easy for you to choose how you hear from us. If you do not wish us to use your personal data for marketing purposes as outlined in this Privacy Notice, you can opt out by using the relevant tick box on the printed or online form on which we use to collect your data.

You can stop receiving emails and e-newsletters from us in a number of ways:
Click the ‘unsubscribe’ link at the bottom of any marketing email you receive
By email, quoting “Marketing Unsubscribe” and send to unsubscribe@highfieldgardenworld.co.uk
By post, quoting “Marketing Unsubscribe” to
Highfield Garden World, Bristol Road, Whitminster, Gloucester. GL2 7PB

The unsubscribing of our e-newsletter may take up to 14 days to be actioned.
We will retain your personal information for only as long as you remain subscribed (i.e. you do not unsubscribe) or if we decide to cancel the e-newsletter service, whichever occurs first.

Competitions:
When you enter a competition, either on our website, via social media or in store, we may collect your name, email address, physical address and phone number. If you enter a competition online, we may also collect your IP address. We will use this personal data to contact you, should you win a prize. We will retain the information for the duration of the competition and for a period of three months starting from the closing date of the competition. We may also request your consent to sign you up to our e-newsletter when you enter a competition. If you chose not to give your consent for this, it will not affect your entry into the competition.

Ordering products:
If you order products from us in store for a home delivery, we will ask for personal information necessary to process and fulfil your order. This may include your name, delivery address, phone number, Privilege card scheme details and payment card details. Payments are taken via our secure payment providers. We will retain the information for seven years following the end of our financial year in which you placed you order, in accordance with our legal obligations to keep records for tax purposes.

Bookings for the restaurant and function rooms:
If you wish to book a table within our restaurant, for example, for afternoon tea or for a Christmas meal, we may ask for your name, phone number and email address in order to be able to contact you in relation to the booking. We will retain the information prior to date of the booking and for a period of three months after the booking date.

Enquiries/Complaints:
Contacting us with an enquiry or complaint, either on our website, via social media, e-mail or by post, we will hold your details provided by yourself in order to respond and/or process your enquiry. We will retain the information for as long as it takes for us to respond or resolve your enquiry and then for a further six months for analysis purposes.

Employment with Highfield Garden Centres Ltd:
You can apply to work for us via our website, using a paper application form available on request or by sending us your CV. Providing your job application data is voluntary, however, if you choose not to provide all of the information requested, our ability to consider you as a candidate may be limited. We will only use the information you give us to process your application. If we need to request a reference, we will tell you beforehand. Unsuccessful applicants’ information will be retained for a period of six months from the closing date of the job position and successful applicants will be retained as part of the employee file for the duration of the employment contract and for 7 years from the employee leave date to fulfil legal obligations. You will also be asked to provide equal opportunities information as part of the application process. This is not mandatory and if you chose not to provide it, it will not affect your application. This information is not made available in anyway which can identify you. Any information you do provide, will only be used to produce and monitor equal opportunities statistics.
For any other type of personal data we may process, we will only retain it for as long as is necessary, taking into account the following:
 The purpose that are we using the personal data for
 Whether we have a legal obligation to continue to process the data
 Whether we have a lawful basis for processing the data

Who do we share your personal data with?
No information collected by us will be sold, rented or loaned to any third parties or companies. We may disclose information if we are requested or required to do so by a regulator or law enforcement body. We may use third party suppliers to store and process your information, such as IT and web service providers. However, we enter processor contracts with these companies to ensure that they do not contravene the purpose and means of why we collect the data, that they comply with data protection laws and ensure that they have appropriate security and organisational measures in place to protect the privacy of your information. Highfield Garden Centres Ltd data is always held and processed within the European Union with the exception of
MailChimp which we use for our Highfield Garden World E-newsletter. MailChimp are self-certified to the EU-US Privacy Shield and are committed to GDPR compliance. Their privacy notice can be found on their website.

How do we protect your information?
We ensure that we implement appropriate physical and computer security controls alongside organisational measures to keep your information secure, accurate and up to date and that we only keep it for as long as is necessary or for as long as the law requires. Although we use appropriate security measures once we have received your personal information, the transmission of information over the internet is never completely secure. We cannot guarantee the security of the information transmitted to our website, and this is done at the user’s own risk.