Your data will be held by Cambridge Herbs Limited trading as British Herb Kitchen and we are the Data Controller. We respect your privacy and this policy explains our commitment to protecting your personal information.
Whenever you provide us with personal information it is our legal duty to use it in line with all laws concerning the protection of personal information, including the GDPR and applicable data protection legislation. Our lawful bases for processing include: by contract (when you subscribe to our services), consent (when you give us your permission to contact you for marketing purposes), in compliance with a legal obligation or legitimate interests (except where your rights, freedoms and interests are overridden).
It is possible to view our site without providing any personal details. However, without registering your details you will not be able to order from us.
We’ll only ever ask for personal information from you in order to provide our service to you. And we’ll only collect information where it is specifically and knowingly provided by you. For example, we will ask for your name, email and physical address, telephone number and payment card details when you register with us or place an order.
We use your name and contact details for delivery and billing purposes and also to contact you relating to customer service issues. If you default on payments, we may disclose your relevant details to debt collection agencies. Whilst we use carefully selected parties to help us to manage your details, we will never share or sell your personal information for their marketing purposes without your permission. These parties include IT, marketing and delivery service providers and we assess their compliance to best practice data processes regularly.
Some organisations which provide services to us may transfer data outside of the European Union (EU) but we’ll only allow this if your data is adequately protected. We fulfil our registration obligations under the GDPR and applicable data protection legislation and comply with that legislation in our dealings with your personal data. The legislation protects your personal data by providing, amongst other things, that the data we hold about you should be processed lawfully and fairly. It should be accurate, relevant and not excessive. The information should, where necessary, be kept up to date and not retained for longer than is necessary. It should be kept securely to prevent unauthorised access by other people. You have the right to see what is held about you and correct any inaccuracies.
Should we sell or transfer any of our business assets, this may include a sale or transfer of our customer databases to third parties as part of a business sale. This may mean that your personal information may be transferred to countries outside the EEA. Any such sale or transfer of personal information will be under strict conditions of confidentiality and security. At any point you are able to change your data preferences and we would be happy to help you with that.
LINKS TO EXTERNAL SITES
Where our site contains links to other sites we are not responsible for the privacy practices or the content of such websites.