Privacy Policy

Shopping Tempest Ltd. Customer Privacy Notice

This privacy notice tells you what to expect us to do with your personal information.


Our contact details

 

Email

contact@coloradospringsarborist.com


What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  • Names and contact details
  • Addresses
  • Date of birth
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Credit reference information
  • Health information (including dietary requirements, allergies and health conditions)
  • Health and safety information
  • Account information
  • Information relating to loyalty programmes
  • Website user information (including user journeys and cookie tracking)
  • Photographs or video recordings
  • Call recordings
  • Records of meetings and decisions
  • Identification documents
  • Information relating to compliments or complaints
  • Information relating to sponsorship

We collect or use the following information for the operation of customer accounts and guarantees:

  • Names and contact details
  • Addresses
  • Payment details (including card or bank information for transfers and direct debits)
  • Purchase history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

We collect or use the following information to prevent crime, prosecute offenders, or defend against legal action:

  • Names and contact information
  • Customer or client accounts and records
  • Criminal offence data (including Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
  • Call recordings
  • Financial transaction information
  • Information relating to health and safety

We collect or use the following information for service updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Marketing preferences
  • Location data
  • Recorded images, such as photos or videos
  • Call recordings
  • Purchase or viewing history
  • IP addresses
  • Website and app user journey information
  • Information relating to sponsorship
  • Records of consent, where appropriate

We collect or use the following information for research or archiving purposes:

  • Names and contact details
  • Addresses
  • Location data
  • Recorded images, such as photos or videos
  • Call recordings
  • Purchase or viewing history
  • IP addresses
  • Website and app user journey information
  • Personal information used for administration of research
  • Personal information used for the purpose of research
  • Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

  • Identification documents
  • Financial transaction information
  • Criminal offence data (including Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
  • Health and safety information

Lawful bases

Our lawful bases for collecting or using personal information to provide services and goods are:

  • Consent
  • Contract
  • Legal obligation
  • Legitimate interest:
    • We need to communicate with our partners and specialists to offer the services you are interested in. It will be needed to give you a quote, or specialist advice, or attend a job visit, assessment, etc.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

  • Consent
  • Contract
  • Legal obligation
  • Legitimate interest:
    • It’s necessary for contacting the customer and for arranging a quote or service to their address in order to carry out the work they requested.

Our lawful bases for collecting or using personal information to prevent crime, prosecute offenders or defend against legal action are:

  • Consent
  • Contract
  • Legal obligation

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent
  • Contract
  • Legal obligation
  • Legitimate interest:
    • We at times send important updates as to our services status, and useful information to clients or potential clients with regards to helpful tips, user guides, services offered and benefits, etc.

Our lawful bases for collecting or using personal information for research or archiving purposes are:

  • Consent
  • Contract
  • Legal obligation

Our lawful bases for collecting or using personal information for legal requirements are:

  • Consent
  • Contract
  • Legal obligation

Where we get personal information from

  • People directly
  • Debt collection agencies
  • Insurance companies
  • Third parties:
  • Website Visitors, Social Media Site Visitors

How long we keep information

DATA RETENTION POLICY WITH SCHEDULE


of Shopping Tempest Ltd

As part of the day-to-day running of our business, we collect and process personal data from a variety of sources. This personal information is collated in several different formats including letters, emails, legal documents, employment records, operations records, images and statements. The personal data is stored both as a hard copy and in electronic form.

 

Aims of the policy

Our business will ensure that the personal data that we hold is kept secure and that it is held for no longer than is necessary for the purposes for which it is being processed. In addition, we will retain the minimum amount of information to fulfil our statutory obligations and the provision of goods or/and services – as required by data protection legislation, including the General Data Protection Regulation (GDPR).


Retention

This retention policy (along with its schedule), is a tool used to assist us in making decisions on whether a particular document should be retained or disposed of. In addition, it takes account of the context within which the personal data is being processed and our business practices.

Decisions around retention and disposal are to be taken in accordance with this policy.

As and when the retention period for a specific document has expired, a review is always to be carried out prior to the disposal of the document. This does not have to be time-consuming or complex. If a decision is reached to dispose of a document, careful consideration is to be given to the method of disposal.


Disposal

Our business must ensure that personal data is securely disposed of when it is no longer needed. This will reduce the risk that it will become inaccurate, out of date or irrelevant.

The methods of disposal are to be appropriate to the nature and sensitivity of the documents concerned and include:

  • Non-confidential records: place in waste paper bin for disposal
  • Confidential records: shred documents
  • Deletion of Computer Records
  • Transmission of records to an external body
  • Cloud storage

The table below contains the retention period that we have assigned to each type of record. This will be adhered to wherever possible, although it is recognised that there may be exceptional circumstances which require documents to be kept for either shorter or longer periods.


Exceptional circumstances should be reported to contact@coloradospringsarborist.com

 

 

Commercial contracts:

Type of record

Retention period

Where is it stored?

Reason

Method of deletion

Contracts with suppliers

[6] years after last action

Cloud

Supply contract

Delete Electronically

Contracts signed as a deed

[12] years after last action

Cloud

Contract Record

Delete Electronically

Guarantees and indemnities

[i.e. state the term of the guarantee plus 6 years]

Cloud

Record of Guarantees and Indemnities

Delete Electronically

Purchase orders and invoices

[7] years after last action

Cloud

Record of Invoices

Delete Electronically

 

Marketing records:

Type of record

Retention period

Where is it stored?

Reason

Method of deletion

Mailing lists

[3] year after last action

Cloud

Follow-Ups

Marketing

Delete Electronically

Phone Numbers

3 years after last action

Cloud

Follow-Ups

Marketing

Delete Electronically

 

Who we share information with

Other organisations

 
  • Organisations we need to share information with for safeguarding reasons
  • Professional or legal advisors
  • Relevant regulatory authorities
  • External auditors or inspectors
  • Warranty and guarantee providers
  • Professional consultants
  • Organisations we’re legally obliged to share personal information with
  • Publicly on our website, social media or other marketing and information media (where appropriate)

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.


Your data protection rights

Under data protection law, you have rights including:

  • Your right of access – You have the right to ask us for copies of your personal data.
  • Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances.
  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
  • You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.
  • To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.