Privacy & Cookies
This Policy is between you (the User of this Website) and Patton House Ltd (the owner and provider of this Website). This Policy applies to our use of any and all Data collected by us.
This Policy applies only to the actions of Patton House and Users in respect of Data including any Data collected with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.
For the purpose of the Data Protection Act 1998 (“the Act”), the data controller is Patton House Ltd, Patton House Farm, Bourton, Much Wenlock, Shropshire, TF13 6JP.
In this Policy the following terms shall have the following meanings:
“Data” means collectively all information that you submit to Patton House Ltd. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Act 1998;
“Patton House” and “us/we” means Patton House Ltd of, Patton House Ltd, Patton House Farm, Bourton, Much Wenlock, Shropshire, TF13 6JP.
“You/your” or ‘User” means any party that accesses the Website and who is not employed by Patton House and acting in the course of their employment by Patton House;
“Website” means the website that you are currently using (www.pattonhouse.co.uk) and any sub-domains of this site unless expressly excluded by their own terms and conditions.
“Services” means the online marketing platform MailChimp which Patton House use to hold any personal information you provide about yourself or about third parties and who enable Patton House to send and manage email campaigns.
TYPES OF data collected
When an order is placed on our website, we need to collect specific information in order to fulfil it. The information we hold will consist of, but not be limited to, the following:
This information is required to process and notify you of acceptance of your order. Credit card details are encrypted after entry and are not stored on our systems. We do not collect any sensitive data such as religion, race, biometrics or health data.
We recognise that data we hold on you us private and confidential. To ensure it remains that way it is stored securely and only accessible by designated staff.
We also collect data for the pursuit of legitimate interests.
If you give us information about another person, you confirm that the other person has appointed you to act on their behalf and agreed that you:
- Shall consent on their behalf to the processing of their personal data
- Shall receive any data protection notices on their behalf
- Shall consent on their behalf to the transfer of their personal data abroad.
HOW THIS DATA IS USED
The personal data you submit may be used for the following purposes:
- Fulfilling our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us
- Responding to the contents of your email to us
- Internal record keeping
- Improvement of our products and services
- Transmission by email of our news or other information we may consider to be of interest to you
- Contact for market research purposes which may be done using email.
LINKS TO OTHER WEBSITES
If you change your mind and no longer wish to receive any marketing emails, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of information, at any time, by contacting us at email@example.com.
Please note we may disclose your personal information if we are required by law to do so.
Our online shop is hosted by Shopify. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall and adhere to GDPR legislation. For more information, please read Shopify’s Terms of Service and Privacy Statement at www.shopify.com/legal/privacy
When you use a direct payment gateway to complete your purchase, Shopify stores your credit card data. Payments on our site are processed using Stripe a secure and trusted online payment gateway. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more information, please refer to Shopify’s Terms of Service and Privacy Statement.
We take all reasonable steps to protect your personal details. However, we cannot guarantee the security of any data you disclose on-line. You accept the inherent security risks of providing information and dealing on-line over the Internet and will not hold us responsible for any breach of security unless this is due to our negligence or wilful default.
CHANGES TO THIS POLICY
Patton House reserves the right to change this Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the Policy on your first use of the Website following the alterations. Please check back frequently to see any updates or changes to our Policy.
You have the right to ask us not to process your Data for marketing purposes. We will usually inform you (before collecting your Data) if we intend to use your Data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing at any time by contacting us at firstname.lastname@example.org
ACCESS TO DATA
The Act gives you the right to access Data held about you. Your right of access can be exercised in accordance with the Act. You can also request that we erase any personal data which we hold about you. This does not include any data we are obliged to keep for administrative, legal or security purposes.
ACCESS TO DATA
By using and browsing our website, you consent to cookies being used in accordance with our policy. If you do not consent, you must disable cookies in your browser settings, or refrain from using the site.
Questions about our Terms and Conditions and Privacy and Cookies Policy should be sent to email@example.com or by writing to us at: Patton House Ltd, Patton House Farm, Bourton, Much Wenlock, Shropshire, TF13 6JP.