Your data protection rights under UK GDPR
Last updated: October 2024
plum-petal is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we fulfil our obligations as a data controller.
plum-petal Garden Services is the data controller for personal information collected through this website and our services. We are responsible for deciding how we hold and use personal information about you.
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. This is provided through our Privacy Policy and this GDPR information page.
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. Contact us with the correct information and we will update our records.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:
You can request that we limit how we use your data while concerns are resolved, such as when you contest the accuracy of the data or object to our processing.
Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have rights regarding automated decision-making, including profiling. We do not currently use automated decision-making processes that produce legal or similarly significant effects.
To exercise any of these rights, contact us at:
Email: [email protected]
Post: plum-petal Garden Services, Unit 7, Kirkstall Industrial Park, Commercial Road, Leeds LS5 3AE
Please provide sufficient information to identify yourself and specify which right you wish to exercise. We may need to verify your identity before processing your request.
We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, but we will inform you within the first month if this is necessary.
We process personal data under the following lawful bases:
We conduct Data Protection Impact Assessments (DPIAs) when introducing new technologies or processing activities that are likely to result in high risk to individuals' rights and freedoms.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
If you are dissatisfied with how we have handled your personal data or a request regarding your rights, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.