Jasmine Cottage (“we” or “our” or “us”) are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you will be processed by us.
For the purpose of the Data Protection Act 1998 (the Act), and the General Data Protection Regulations (GDPR), from 25 May 2018, the data controller is Jasmine Cottage.
The information we collect from you
The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through this website; any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access.
How your information will be used
We will not share your information with other organisations, except in the case of any legal obligation, or if our assets are acquired by a third party, in which case personal data held by us about our customers may be one of the transferred assets.
We would like to contact you with marketing information about our products and services. The legal basis by which we do this is your consent, if you choose to give it.
We will not store your information any longer than is necessary for the function of our business requirements. If you have consented to marketing from us, we will only continue to store your information if we are using it for this purpose.
You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing, at any time, by using the unsubscribe function on a received marketing email or by contacting us.
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. From 25 May 2018, when GDPR becomes law, a reasonable Subject Access Request (SAR) can be made without a fee being charged. It will be carried out within one month. As part of a SAR, you may request that your personal data is corrected or deleted. The result of a deletion request may be affected by any outstanding bookings or orders in progress, or our obligation to keep tax records.
If you are not satisfied with our response you may contact the UK supervisory authority, the Information Commissioner’s Office, https://ico.org.uk to report your concern.