As the supplier of goods or services to you within the UK, we are required to comply with UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018

We therefore confirm:

I, Jayne Haddon, am a sole trader, and therefore the data-controller of your personal information as it relates to my shop 'Arden Gnomes'.

When you place an order with 'Arden Gnomes', I will require your name, delivery address, telephone number and email address in order to process your order. You may also provide me with the name and delivery address of an alternative recipient should you wish me to supply to them direct. I will use these details SOLELY to process and deliver your order or to deal with any queries you/I have, related to that order.

The only circumstances in which I will share your data are in processing order, or in complying with the law. I will never use or pass on your information to third parties for marketing purposes or any other purpose, other than the circumstances listed below; neither will I add you to any mailing list without your explicit consent.

The circumstances in which I may share any of your relevant data are:

• With mail delivery companies or couriers in order to fulfil your order.

• To comply with any legal or tax obligations that I have.

Your details will only be held for as long as necessary and in order to process the transaction. I will securely store any data collected during that period. Personal data related to orders or customer queries will be retained for six years in order to comply with legal and regulatory requirements. After this time, your data will be deleted from my records.

You have the right to know what personal data I hold about you, and to ask for that data to be changed or deleted – please contact me at jayne@arden-gnomes.co.uk - if required.

You also have the right to complain to the ICO if you believe there is a problem with the way I handle your data.

Please note:

This privacy policy only relates to Arden Gnomes, it does not relate to the practices of third parties over whom I have no control. For example: Stripe (for payment processing).

This organisation has its own privacy policies which can be found at the following:

Stripe: https://stripe.com/gb/privacy

Policy update: 10/01/2023