Privacy Policy Summary
This is the privacy policy of BVG Group Limited, trading as Thompson & Morgan. This policy sets out our procedures regarding the collection and use of your personal information when we send you information in the post, when we contact you electronically and when you access our website www.promoflowers.com. BVG Group Limited is a company registered in England & Wales whose company number is 03393851 and our registered office is Units 5 & 6, Ffrwdgrech Industrial Estate, Brecon, Powys, LD3 8LA. The trading address of Thompson & Morgan is Poplar Lane, Ipswich, Suffolk, IP8 3BU.
Branded Garden Products Limited, (trading as Thompson & Morgan) is registered as a data controller on the UK Data Protection Register. Our registration number is Z6288594.
Our privacy policy will explain in detail to you what happens to the personal information we collect about you when you visit our website, receive postal information, and order or enquire about our goods and services:
- What information we collect
- The legal basis for processing we use in relation to processing your personal data
- How we use your personal information and how long we keep it for
- Who we share your information with and on what basis
- How you can control our use of your personal information
- Your rights
- Who to contact if you want more information
This Privacy Policy comes into effect from 15th May 2018. This policy applies to all the personal information we collect and process about you when we engage with you, either as a customer or an enquirer. If you would like to know more about this policy, please email info@promoflowers.com. You can view the detailed privacy policy below.
When we collect your personal information
We collect your personal information only when you fill in the contact form on this website and click submit.
When does this privacy policy apply?
Our Privacy Policy relates to personal information gathered from your use of our website www.promoflowers.com. The policy extends to cover your personal information when it is moved from our website and stored for subsequent processing within our IT infrastructure in the UK and when we process information about you directly into our IT systems. Our Privacy Policy does not extend to external links on our website to other organisations outside of our control. Please ensure that you take time to review the privacy policies of external sites to www.promoflowers.com as their privacy policies may differ from ours.
What personal information we collect on our website
The personal information we collect from you when you access our website comes in two parts: the information you give us when you complete our website forms, and the information we automatically gather from the device you use to access our website.
Information you give Thompson & Morgan: this includes the following data items (although you can visit and use our website without giving us this information, if you do not place an enquiry during your web visit to us):
- Your email address
- Your name
Information from your device: when you access a website using a smartphone, TV (browser enabled), tablet, laptop or desktop computer, your device will exchange information with www.promoflowers.com to maximise the speed of the site and provide the optimum navigation for your device. Without this information, Thompson & Morgan cannot ensure the optimum browsing experience and ease-of-use when buying products. To do this, our website may acquire the following information:
- IP (Internet Protocol) address: your IP address indicates your location, unless you are using a VPN service
- Device: what type of device you are using (TV, smartphone, laptop, desktop)
- OS (Operation system): what operating system your device has (IOS, Android, Windows, Linux, MAC OS X)
- Browser & browser version: which web browser you are using (Internet Explorer/Edge, Opera, Chrome, Safari, Firefox)
- Domain: depending on your device and browser settings, we sometimes identify the web address of the domain you came from before landing on our website
- Cookies: these are small text files that our website places on your device, so that our website can remember something about you at a later time and optimise the website for your visit. There are also some third-party cookies we place on your device. For more information on the specific cookies that we use and their function, please see our Cookie Policy
Preferences on our website: you can change how we stay in touch with you, and what we inform you about by emailing info@promoflowers.com.
How we protect and where we store your personal information
Thompson & Morgan is amending our IT policies to further protect your personal information by adopting ‘Privacy by Design’, an information management standard that seeks to anonymise personal data held in commercial databases to further protect that information. You can find out more about this anonymization process by following this link.
How long we keep your personal information
Thompson & Morgan will only use your personal information for as long as you remain a customer, and for a short time after your last order. The maximum amount of time that Thompson & Morgan will retain your personal information in a data archive is seven years, except in the event of a legal dispute. This seven-year limit is based on the legal requirement to maintain details of transactions as described in the Companies Act 2006. We have listed below how long we store your personal information for, which depends on your relationship with Thompson & Morgan.
If you made a purchase from us: we will keep the information you gave us and details of what you bought for up to seven years from the date of the last transaction with us. After that time your personal data will be anonymised, but we will keep your purchase and marketing history.
If you wrote to us: we will keep any correspondence with you for six years, although we do keep this information longer if your correspondence is a complaint.
Sharing your personal information with other organisations
Subcontractors: Thompson & Morgan use carefully selected subcontractors to assist in the management and structure of business information for its’ own marketing purposes. The information these subcontractors process includes the personal information we gather about you and your transaction and web history with us. By ‘marketing’ we mean the specific purposes outlined in the Marketing Activities section of this document. Details on these subcontractors are as follows:
BVG Group companies: periodically Thompson & Morgan will share its’ customer information with other BVG Group companies who have products and services that are relevant to the clothing and home & garden markets. Those companies will then send you marketing information by your preferred method (post or email), on products that are directly related to your purchases with Thompson & Morgan. You can opt out of these communications at any time, by emailing info@promoflowers.com or calling 0333 400 0033.
Requesting a copy of your personal information
You can contact Thompson & Morgan using the information below, to request a copy of the personal information we hold on you. If you request this information, you will need to provide proof of your identity. We will return the information to you electronically in a text file. You are legally entitled to request this information under the General Data Protection Regulation, there is no charge for this service.
To create an online request for a copy of your personal information, please visit our Subject Access Request portal at https://sar.thompson-morgan.com.
We will supply you the following information:
- Your contact details: which may include your email address, phone and mobile numbers, your previous address, your previous or second email address, your communications preferences and the date your contact details were last updated
- Your transaction history: if you have ordered from us, you will receive details of your order, including products purchased, date of purchase and the cost of the products
- Your marketing history: if we have marketed to you, we will send you details of the catalogues and emails we have sent you
- Email correspondence: we will search our email server to see if your email address is in any email message headers, if we find it, we will send you the email(s)
To request a copy of your personal information via post, please write to: Data Protection Officer, Thompson & Morgan, Poplar Lane, Ipswich, Suffolk, IP8 3BU.
How to control your personal information on the Thompson & Morgan website
If you do not want to receive communications from Thompson & Morgan, you can change your preferences by emailing info@promoflowers.com.
Your rights
This privacy statement reflects the rights that you have under the General Data Protection Regulation, which specifically charges Thompson & Morgan with providing you access to your personal information, and to ensure that your data is used appropriately & securely with specific reference to the rights of you, the data subject. Those rights regarding your personal data are as follows:
The right to access a copy of your personal information that we hold
The right to object to our processing of your personal data, if doing so causes you distress
The right to prevent Thompson & Morgan processing your data for direct marketing purposes
The right to object to decisions being taken using automated means that includes your personal data
The right to have inaccurate personal data rectified, or destroyed
The right to have your data erased from our IT infrastructure
The right to data portability
The right to be informed about the collection and use of your data
You can find out more about your rights regarding your personal data in the UK from the Office of the Information Commissioner www.ico.org.uk.
Definitions
In this section of our privacy policy we want to explain what some of the terms in the policy mean, for the avoidance of any doubt. If you cannot find the definition you require, or are still unsure about the meaning of any aspect of this privacy policy, please email info@promoflowers.com to request more information.
Data Controller: under the General Data Protection Regulation (GDPR), organisations that collect, process and store your personal information are defined as Data Controllers, which makes Thompson & Morgan the Data Controller for your personal data collected from our website.
Data Subject: GDPR classifies individuals as data subjects. So you, the customer or enquirer of Thompson & Morgan are a data subject under GDPR if you purchase or enquire about our products.
Data Processor: a data processor is an organisation other than the data controller, who processes your personal data on behalf of the data controller. A good example of this is PayPal, who are one of the payment processing options for any products that you buy online. The data processors who handle your personal information gathered by our website have the same duty of care in handling your personal information.