sowandgrowseeds.com is dedicated to ensuring the protection and privacy of our customers and visitors to our websites. We comply with the EU and UK General Data Protection Regulation (GDPR) and other applicable data protection laws. Below, we outline how we collect, process, protect, and store the Personal Data of our customers and website visitors, who are the Data Subjects to whom this Privacy Notice applies.
Collection of Data
The type of Personal Data we collect and process depends on the nature of our business relationship with you. The following is a list of the Personal Data we may collect and process:
- Full name
- Address
- Email address
- Phone number
- Age
- Payment details
- IP address
- Non-personal browsing habits and click patterns
- Information about your usage of our website, such as pages visited, products viewed, products added to your shopping cart, purchase history, etc.
- Information you provide through interactions with our website or communication with us, such as responses to surveys, polls, or emails
- Any queries or calls you log with our customer service or sales department
You can browse our website without providing any Personal Data. However, to enhance your shopping experience, we offer the ability to register an account. Account registration is not required to make purchases, but when you add items to your cart, a file is created on our server to store purchase details. This file is uniquely linked to your browsing session and cannot be accessed by anyone else. When you complete your order, we collect Personal Data to process and deliver it.
Processing of Data
All Personal Data we process is provided directly by you for one of the following reasons:
- To create your account.
- To process and deliver your orders.
- To handle refunds, cancellations, and customer queries.
- To respond to inquiries via our website, email, social media, or telephone.
- For internal record-keeping, accounting, and financial purposes.
- To improve our products and services.
- To periodically send promotional emails about new products, special offers, or other relevant information.
- To conduct market research through email, phone, fax, or mail.
- To customize our website according to your interests.
- To collect and process data using first-party and third-party cookies, as explained in our Cookies Notice.
- To comply with regulatory obligations or legal proceedings.
We may share your Personal Data with the following recipients/categories of recipients:
- Payment Gateway partners
- Search Engine Optimization Partners
- Warehouse service providers and courier companies
- Our Spanish affiliate company – Tiger Uno Distribuciones S.L
- Cloud Services and other online platform service providers
- Google Analytics
- User and website analytics service providers
- Companies providing website and business support services (e.g., tax, accounting, IT maintenance)
- Regulatory authorities or legal entities as required by law
Marketing
You can restrict the collection or use of your personal information for direct marketing by:
- Selecting the appropriate option when filling in a form on our website.
- Changing your preference at any time by contacting us.
We will not sell, distribute, or lease your Personal Data to third parties without your permission unless required by law. We may use your Personal Data to send you promotional information about third parties if you have agreed to receive such communications.
Cross-Border Transfers
As a global business, we operate inside and outside of the UK and EU/EEA and use suppliers worldwide. Some of these countries may not provide the same level of data protection as the UK and EU/EEA. If we transfer your Personal Data to a country with different protection laws, we ensure it is safeguarded according to UK GDPR and other applicable regulations. You can contact us for more details on how we protect transferred Personal Data.
Security and Storage
We are committed to ensuring your Personal Data is secure. To prevent unauthorized access or disclosure, we have implemented suitable physical, electronic, and managerial procedures.
All sensitive data is transmitted via an industry-standard 128-bit secure socket layer connection. We do not store your payment details.
We retain your Personal Data only as long as necessary for processing purposes or legal/business reasons. Generally, if your user profile remains inactive for 18 months or longer, we will close it. However, we have legal and regulatory obligations to retain Personal Data for up to six years after account closure. We only retain the minimum necessary data and do not use it for other purposes.
Your Data Protection Rights
Under UK GDPR, you have the following rights:
- Right of access: Request copies of your Personal Data.
- Right to rectification: Request corrections to inaccurate or incomplete data.
- Right to erasure: Request deletion of your Personal Data in certain circumstances.
- Right to restrict processing: Request processing limitations under specific conditions.
- Right to object to processing: Object to data processing under certain conditions.
- Right to data portability: Request data transfer to another organization or yourself in certain circumstances.