This policy is effective from October 2020.
This policy sets out the basis on which your personal data will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how it will be treated by us. For the purpose of the Data Protection Act 1998 (“the Act”) the data controller The Tree Barn whose registered office is at Greenfield Farm (“we”).
All enquiries concerning our use or storage of data should be sent to firstname.lastname@example.org.
Our address is Greenfield Farm, Christmas Common, Watlington, Oxon, OX49 5HG. The Tree Barn has an online platform www.thetreebarn.co.uk (web) facilitator that enables users to buy trees and associated products.
Information we may collect from you.
We may collect and process the following data about you:
Information that you provide by filling in forms on our site, processing orders for delivery or collection.
If you contact us, we may keep a record of that correspondence.
Details of transactions you carry out through our site and of the fulfilment of any contract between us.
Details of your visits to our website and the resources that you access.
The Tree Barn, is the Data controller of processing personal data concerning Users.
Where we store your personal data
All information you provide to us is stored on our secure servers. Unfortunately, the transmission of information via the Internet is not completely secure. So, whilst we will do our best to protect your personal data, we cannot ensure the security of your data transmitted to our site. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
Purpose and legal basis
We process your personal data in order for us to manage our user relation with you, including managing your account and provide you with access to use our Platform, we collect and use information about you. The processing of your personal data is performed on the legal basis of:
fulfilment of our contractual obligations when delivering the Platform to you.
We process your personal data to facilitate your purchase of trees and associated products via the
Platform on the legal basis of:
fulfillment of our contractual obligations to facilitate your purchase of our products. We also process your personal data to deliver and improve the Platform, and manage our business, to improve our offerings, develop new features and updates, develop personalization services and other types of service, including but not limited to develop and implement algorithms and machine learning.
Categories of personal data
We mainly collect the personal data that you submit to us, including your contact information and purchase history. But we also collect information in several ways from different parts of the Platform, as further detailed below.
When purchasing trees and associated products from the Platform:
When you purchase products using the Platform you buy from us. We are then a controller for the personal data we receive. As mentioned above we will also store and process your purchase information as part of our service to you.
Uses made of the information
We use information held about you in the following ways:
To ensure that content from our web site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you.
To allow you to participate in interactive features of our service where you choose to do so.
To notify you about changes to our service.
To analyse information about our users in order to identify their potential preferences.
We may disclose your personal information to any member of our group which means our subsidiaries, our ultimate holding company and its subsidiaries as defined under the UK Companies Act 2006.
We will not disclose your data to any third party outside our group for the purpose of direct marketing but We may from time to time provide you with information about goods and services which We feel may be of interest to you including those provided by third parties. We will keep your details on file for a period of 6 years from the date of your last contact with us in order to simplify any future registration.
You have the right to request us not to use your details for the purpose of providing you with information about the goods and services provided by our group (other than information which you have specifically requested). You can also notify us by contacting us via email email@example.com.
As provided by the General Data Protection Regulation, you have the right to:
Access personal data regarding you. You may delete and amend the data collected.
Ask for erasure of personal data regarding you (under certain circumstances).
Ask for the restriction of the processing of your data (under certain circumstances).
When we receive a request to access, rectify, erase or port data, we may ask you for additional information in order to confirm your identity and ensure data security.
Access to information
A cookie is a small text file stored on your computer, tablet, mobile or similar, for the purpose of recognising your device if you visit our website again (such as login, language, font size and other settings). This makes it possible to customize the Website to your browser. A cookie may contain text, numbers or e.g. a date, but generally there are no personal data in a cookie. It is not a program and thus cannot contain a virus.
When you visit thetreebarn.co.uk, we collect information about you that allows us to identify your device. The information is used to customise and improve our content on the website and to get statistical information (not personal information), so we can provide you with the best possible experience. If you choose not to accept cookies at all you may not be able to use all the functions of our website.
Transfer of data to third countries
The Tree Barn may use suppliers located outside the EU/EEA to process data on behalf of The Tree Barn according to standard data protection clauses adopted by the European Commission and to The Tree Barn’s performance of the contract with you.
Sharing of data
Personal data about our users is an essential part of our business. We only share your personal data as described below apart from when we share it with a third-party vendor.
We may share personal data regarding you if we are obligated to do so by law.
Data retention and account deletion
We may store some of your personal data to comply with our legal obligations.
Please note that some information may remain in our records after your account has been deleted, and that we may only be able to delete this information later when updating our backups.
We do our best to ensure that user accounts are kept private. However, various instances such as unauthorised entry/use, hardware or software failure, and other factors, may compromise the security of the personal data.