The Pigeon Hut respects your privacy and is committed to protecting your personal data. This Privacy Notice explains which types of your personal data we collect by using The Pigeon Hut website, and how we handle the data.
The data controller is The Pigeon Hut, who will be referred in this policy as "we", "us" or "our", who will be responsible for how your personal data is collected, stored and processed. The person with responsibility for our data protection compliance is Chris Allen (our Data Protection Officer). They can be contacted via email at [email protected] or by phone on 07388 678818.
When you share your personal information with us, you have a right to expect that information to be treated with total confidentiality. Whether you have supplied your personal details online, by phone, by email or in a letter, we will use your personal data for the purposes explained in this privacy notice and for which they were initially collected, and only with a lawful reason to do so.
Our main reason for collecting personal information (which may include names, addresses, contact details including email addresses and business information) will be for the fulfilment of orders made by you for our hampers/goods, and for marketing our business to you in the ways more fully explained below. We will collect appropriate personal information for you and as necessary of the intended recipient of the hampers/goods that you are purchasing
Where someone is receiving a hamper/goods that was ordered by someone else, we will not use personal information of the recipient of the hampers/goods for any purposes other than as necessary to fulfil the order made by you (which may include gift messages to a recipient’s email address or mobile phone number if this service is requested by you during the checkout process), or if we need to contact the recipient regarding an issue with the order, its delivery or any item included in the order.
How We Collect Your Data
- When you buy from us and you create an account on our website
- When you subscribe to our newsletter
- When you contact us
- When you use social media to communicate with us
We will use your email address to send you targeted marketing information about our product offers and promotions via social media platforms. To do this, we will share your email address in a secure manner with social media organisations, who will match our advertising requirements to your social media profile. We have a legitimate business interest to send you product information via social media which we believe is of relevance to you; this is known as Interest-Based Advertising. However, should you wish to exercise your right to stop targeted social media marketing, you can do this at any time by changing your marketing preferences.
We actively use social media platforms as a way of connecting and getting closer to our customers to hear and understand what our customers think about us and our products and services. Occasionally, we may contact you directly via those social media platforms if we would like to share your comments or pictures with other customers or publish them in our marketing materials. We will always ask you if you are happy for us to use your data in this way and will keep any data that you provide to us, such as email address, confidential and secure.
Third Party Services
We use a third party service (Google Analytics) to improve the customer experience. This is intended to help us understand website traffic and usage; data is stored on Google servers in the United States and are not shared with anyone else but us.
In additional, to fulfil your order and as part of delivering our products and services to you, we will share your personal data with carefully chosen third party processors and partners who carry out a number of services on our behalf.
For example, we will use your personal contact details such as name, postal address, phone number and email address that you provide to us in respect of delivering products or services to you. We will share this information with our suppliers who directly despatch orders to you or our delivery partners who may contact you to arrange a convenient delivery time and provide you with updates as to when they will arrive.
Retention of Personal Data
Data will be stored for as long as is necessary for the purpose for which it was collected. Any personal data will not be used for marketing if you have asked us to stop providing marketing to you (other than to the extent necessary to prevent you from receiving further marketing.
We want to make sure that we only contact you with online content that you will find relevant and interesting. For this to work effectively, we collect information about your browsing activity using cookies when you are using our website. A cookie is a small text file which is placed onto your device (e.g. computer, smartphone or another electronic device) when you use our website. These cookies pass back to us your browsing information using your Internet Protocol ("IP") address as the identifier, which we combine with other anonymised, non-personalised and aggregated data, allowing us to determine what content and product information is most relevant to you when you are shopping online.
A popup will appear the first time you visit our website, asking you for permission to collect your cookies. Once approved, we consider you allow us using you cookies until further requested.
Right to Complain
You have the right to complain to the Information Commissioner, which you can do by contacting the ICO directly. Full contact details, including a helpline number, can be found on the ICO website (www.ico.org.uk). This website also has useful information on your rights and our obligations. However, please raise any concerns or issues with us first so that we may deal with this as quickly as possible for you.
Under certain circumstances, you have the right by law to request:
- access to your personal data. This enables you to ask to receive a copy of the personal data that we hold about you and to check that we are lawfully processing it.
- erasure of your personal data.
- object to processing of your personal data where we are relying on our legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- correction of the personal data that we hold about you.
- right to withdraw your consent (if that is the lawful basis for our use of your personal data).
- restriction of processing of your personal data.
- transfer of your personal data to another party.
Right to Access
You may wish to access a copy of the personal data we hold about you - known as a Subject Access Request. You can do so by submitting a request in writing to the Data Protection Manager. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
Alternatively, we may refuse to comply with your request in these circumstances. We will respond to your Subject Access Request as soon as possible and, in any event, within the statutory 30 days. However, in the event that we need more information from you to verify your identity, which we must do to ensure we disclose your personal data to the right person, the 30 day response period will only commence from the time that we have validated your identity. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Right to Erasure
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Right to Object to Processing
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Right to Request Correction
This enables you to have any incomplete or inaccurate personal data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Right to Withdraw Consent
This arises where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.