Privacy Policy

This privacy policy explains how we collect, store and process your personal data for the purposes of direct marketing by email. Personal data is any information that can be used to identify a living individual, either directly or indirectly. It can refer to obvious things like your name and address, but also to online identifiers such as IP addresses.

Who are we?

Graham and Green
92 Walcot Street
Bath
Somerset
BA1 5BG

Phone number: 01225 418 200
Email address: mailorder@grahamandgreen.co.uk
Registered company number: 01262819
ICO registration number: ZA191724

How do we collect your personal data?

We collect your personal data for the Graham and Green newsletter and email marketing when:

  • you sign up to the newsletter with your email address on the homepage of our website
  • you create a Graham and Green account and opt-in to receive email marketing from us
  • you complete an online order and opt-in to receive email marketing before checking out
  • you enter a competition that we are running and opt-in to receive email marketing when you enter
  • you request a Graham and Green catalogue and also opt-in to receive marketing
  • you fill in the form on the ‘email sign up’ page on our website

What personal data do we collect and how do we use it?

When you sign up to our newsletter and email marketing, we collect your email address so that we can send you this information. We may also use your name, address, date of birth and order history so that we can personalise the marketing emails we send to you.

We do this with your consent and you can opt-out of these emails at any time using the ‘unsubscribe’ link featured in all of our emails to you. You will not receive any more marketing emails from Graham and Green if you do this, but we will still send you transactional emails, for example an order confirmation if you make a purchase from us.

How long do we keep your information for?

We will continue to send email marketing to you:

a) until you opt-out; or
b) until you stop actively interacting with the marketing emails we send to you for a period of 18 months.

In both of these cases, we will maintain your email address on a suppression list for 24 months, so that we know not to contact you.

Do we share your information with anybody?

We use Ometria, Magento and Microsoft Navision to help manage our marketing database. These companies may store and/or process your personal data outside of the EEA. We have ensured that there are suitable safeguards in place for the protection of your personal data outside of the EEA.

  • Read Ometria’s Privacy Policy here
  • Read Magento’s Privacy Policy here
  • Read Microsoft’s Privacy Policy here

Your rights

You have various rights relating to the processing of your personal data for direct marketing. These are:

  • The right to be informed – this privacy notice explains to you how your personal data is processed by us for direct marketing.
  • The right to access – you can request that we provide you with all of the personal data that we hold about you. We will provide this to you free of charge within one month of your request.
  • The right to rectification – we like to make sure that the information we have about you is correct. You can manage your personal details within your Graham and Green account to ensure that they are up to date, or you can contact us to let us know if we have any incorrect information about you by using the information provided in the ‘Who are we?’ section on this page.
  • The right to erasure – you have the right to have your data ‘erased’ by Graham and Green under specific situations.
  • The right to restrict processing – you have the right to restrict processing in certain situations such as: where you contest the accuracy of your personal data, we will restrict the processing until you have verified the accuracy of your personal data / where you have objected to processing and we are considering whether our legitimate grounds override your legitimate grounds / when processing is unlawful, and you oppose erasure and request restriction instead / where we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.
  • The right to object - You have the right to object to the processing of your personal data. Remember you can opt out at any time from our marketing communications using the preference centre in your Graham and Green account, by using the ‘unsubscribe’ function in our marketing emails or by contacting us using the information provided in the ‘Who are we?’ section on this page.

How to contact us

If you want to talk to us about anything in this privacy policy, find out more about your rights or to enforce your rights, please contact us using the information provided in the ‘Who are we?’ section on this page and our team will be happy to help.

Not happy?

If you feel that we have not processed your data according to the law, then you have the right to make a complaint with the ICO here.