1.0 Why are we making this notice available
The processing of personal data is governed by the General Data Protection Regulation (the GDPR) that came into force in May 2018.
2.0 Who are we?
Blue Sky Botanics Ltd is the data controller. This means that the Directors of Blue Sky act as Data Processing Officers for the company and decide how your personal data is processed and for what purpose.
3.0 How do we process your personal data?
We use your personal data to enable us to contact you in connection for any bona fide legitimate commercial reason. We comply with our obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; but not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
4.0 What is the legal basis for processing your data?
It is a condition of GDPR that we have consent from customers to contact them and store their data.
Without consent we would be unable to trade with customers and so it is taken that consent is given when you communicate with us.
5.0 Sharing your personal data
Your personal data will be treated as strictly confidential within Blue Sky Botanics and will not be shared or sold to any third party without your consent.
6.0 Your rights and your personal data
Unless subject to an exemption under GDPR, you have the following rights with respect to your personal data:
The right to request a copy of personal data which we hold about you;
The right to request that the company corrects any personal data that is found to be inaccurate or out of date;
The right to request that your data is deleted where it is no longer necessary for the company to retain such data;
The right to withdraw your consent to the processing at any time (please note that regrettably we would be unable to trade with you if this were the case);
The right to request that the data controller provide the data subject with his / her personal data and where possible, to transmit that data directly to another data controller, (known as the right to portability, if applicable)
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data (where applicable. Please note that for traceability purposes we do require customers name and address when supplying produce);
The right to lodge a complaint with the Information Commissioners Office.
7.0 Further processing
We will only use personal details of customers for the reasons of conducting our normal business activities and not for any other use.
If we wish to use your data for any other purpose not covered by this Data Protection Notice then we will obtain your prior consent before commencement of any other activities.
8.0 Contact details
To exercise all relevant rights, queries or complaints in the first instance please contact email@example.com