GDPR Privacy Policy Statement

This is our privacy policy and, if you landed here, it means that you want to learn how we process your personal data at

Mr Middleton Garden Shop Ltd. and how we protect your privacy. We won’t let you down!

Our Web Shop

Essential information we collect on our Web Site

In operating our store, it is essential for us to capture some information about your device, such as your IP address and information related to your visit when you browse our store. For example, this might include time-stamp, the last page or product you visited, the indication that you logged in. We do that in order to:

Remember who you are after you log in so that you do not need to authenticate at each click
Monitor if our website is running with the high performance we are dedicated to providing
Let you browse between products without having to start back from the home page at each click

Remember if you put something in your shopping cart before you decide to checkout; and control that your data is processed securely.  We call the information mentioned above “essential information” and we collect it through the use of cookies. Cookies are small text files that most websites uses. A website places cookies in the web browser and then reads the information collected through the cookies every time the user performs an action. We use cookies. Without enabling this mechanism and this kind of cookies (first-party cookies), we could not provide you with the smooth experience that you expect while you are navigating.  

Order information you expressly provide

If you buy something from our store, we will need more specific information about you. To fully process your order and ship the merchandise you selected, we need your personal data such as your first and last name, your email address and your shipping and billing address. We also use your contact and order information to send you communication related to the processing of your order. We will ask you to provide this information in our “checkout page” before letting you finalize your purchase with the payment.

Accounts

You can sign up for an account if you’d like. This will make us happy because it confirms your interest in our store. It should also make you happy because we will remember your information and, when you decide to buy our products, you do not have to provide all of your information over again you just have to log-in. Before registering your account, we will ask you to expressly provide your consent to this privacy policy.

By opening an account you give us your consent to also receive a weekly or monthly newsletter with our products, if you no longer want to receive our newsletter you can unsubscribe at any time by clicking on the Unsuscribe link or by contacting us directly.

Only if you give us your consent, we will open your account. We also you the possibility to easily withdraw your consent and delete your account. Just connect with us at the contact details at the bottom of the page.

Partial Purchases

If you have started to buy one of our products, but have not completed the purchase, you may have provided partial information, such as your email. In that case, we might send you an email to remind you about your interest. If you are not comfortable in receiving further emails of this kind, we will give you a simple opportunity to opt-out. Your privacy means a lot to us and we will stop sending you these communications right away.

Reviews

If you have completed a purchase, we will send you an email to ask you to review the product you bought. We want to be sure that whether you love your purchase or have a complaint, you can share your opinion with other customers.

Personalization

We also use some specific information related to your visit, such as the timestamp of your visit, the page or the product you viewed, where you are coming from (if you came to our store because you clicked on an advertisement or you just opened our direct link). This is very similar to the “essential information,” but we use it to provide you with a personalized experience. The information on your visit provides us with insights on your interests and allows us to send you relevant communications. We capture this information through cookies, called a "beacon," that we allow you to block.

Warehouse Open Days & Masterclass Events

At our open days and other events we record by video and take pictures which could include speakers , participants , and staff.

If you attend these events you should be aware that we may post the images on Facebook as well as using them to promote future events.

Should you wish to attend and do not want your photo taken , you should contact us in advance and we will try accommodate you.

Other uses of personal data

How do we process your information?

We use an external provider to run ourstore, BigCommerce.

BigCommerce is based in the US and is a participant in the EU-US Privacy Shield Framework and committed to providing best-in-class service and data protection. You can check its participation in the Privacy Shield here on the official site of The International Trade Administration (ITA), U.S. Department of Commerce.

Through BigCommerce, we also use other, highly specialized external providers to provide the most competitive services. For example [Realex,Paypal,Google Analitycs]

Payments

Our store is PCI-DSS compliant (a very strict industry standard with requirements for the security of credit card information), but we want to use accredited companies to process your credit card information. We use Realex and Paypal. We do not have access to payments details process thought Realex or PayPal and receive an ID number to verify your payment.

Realex Payments have been accredited with the AIS (Account Information Security) certification by VISA and is one of the few companies in Europe to achieve this. This shows their commitment to above industry standard in every aspect of payment processing. All information when in transit via the internet is encrypted SSL to ensure confidentiality of sensitive data. All messages sent to Realex Payments and the responses from Realex Payments are authenticated using digitally signed digests. All requests are verified against a legal list of IP address and referring URLs. Realex Payments' technical infrastructure is located in secure co-location facilities that have 24x7 manned security and advanced building management systems along with environmental controls. Critical servers and applications are monitored constantly to threshold levels and Realex Payments staff is instantly alerted via their real time monitoring and alerting service. All connections to the financial institutions are over private dedicated leased circuits, backed up with ISDN lines and in certain cases VPN connections over the internet. The network is designed to be highly resilient with duplicate and triplicate systems in place depending on the critical nature of each component. Realex Payments are registered with the data protection commissioner as a "Data Processor". Cardholder information is encrypted and not displayed in our reporting systems.

Payapl has Privacy Policy to explain how they may collect, retain, process, share and transfer your personal data you use PayPal. Please see their privacy policy. Link

Shipping

We integrate with a number of shipping companies to fulfill your orders. DPD and Anpost and Shanahan Direct Marketing.  Partnering with highly specialised external companies allows us to focus on what we do best: selling great products.

DPD and An Post deliver your goods to do so they require your Name, Address, phone number and email address.

We integrate with Shanahan Direct Marketing to process catalogues delivery. In order to process for An Post-delivery they require the following information name and address.

 How can you control your personal data?  

If you are one of our customers who is in the EU, and we are specifically selling our products to the Member State where you are located, you have specific rights that we are honored to enforce without undue delay: Access, Correct, Erasure, Port, Object. If you cannot exercise your choice on your account page or if you do not have an account with us, please reach out to us, at the contact details at the bottom of this page. We will be more than happy to help.

 How long do we keep your data?  

We keep your data for as long as you have an account with us. We also keep some data for security investigation. Most importantly, we have specific obligations for fraud detection and tax reasons. Therefore, we might need to retain certain data even if you ask to delete it. If you order from us we will keep tax records for Revenue for seven years.

Do we have any legal obligations when handling your data?  

Many. We might need to share your personal information to comply with applicable legal obligations. Tax records for revenue or fraud detection. 

Ordering by Post or Phone

What personal information we collect by post and by phone

Information you give Mr Middleton Garden Shop if you order via the catalogue order form or phone our office, we collect the following information about you;

Your first name and surname

Your postal address

Your telephone number

Your email address

Payment details, if you attach a cheque to your order form, this is banked, and no details of your bank account are stored by us.

Who can you reach out to for privacy matters?

You can contact our Data Protection Officer Garret Quearney

garret@mrmiddleton.ie

58 Mary St Dublin 1 Ireland.

Requesting a copy of your personal information

You can request a copy of the personal information we hold on you. If you request this information, you will need to provide proof of your identity. We will return the information to you electronically .You are legally entitled to request this information under the General Data Protection Regulation, there is no charge for this service.

We will supply you the following information:

Your contact details: which may include your email address, phone and mobile numbers, and the date your contact details were last updated

Your transaction history: if you have ordered from us, you will receive details of your order, including products purchased, date of purchase and the cost of the products

Your marketing history: if we have marketed to you, we will send you details of the catalogues and emails we have sent you

Email correspondence: we will search our email server to see if your email address is in any email message headers, if we find it, we will send you the email(s)

Your rights Under GDPR

This privacy statement reflects the rights that you have under the General Data Protection Regulation, which specifically charges Mr Middleton Garden Shop with providing you access to your personal information, and to ensure that your data is used appropriately & securely with specific reference to the rights of you, the data subject. Those rights regarding your personal data are as follows:

The right to access a copy of your personal information that we hold

The right to object to our processing of your personal data, if doing so causes you distress

The right to prevent Mr Middleton processing your data for direct marketing purposes

The right to have inaccurate personal data rectified, or destroyed

The right to have your data erased from our IT infrastructure

The right to be informed about the collection and use of your data

Who can you reach out to for privacy matters?