All orders placed by the Buyer for Herb Guru Products are subject to the following Terms and Conditions.
Herb Guru Terms and Conditions exclude any other terms and conditions the Buyer may look to enforce.
No variation of any of Herb Guru Terms and Conditions are permitted unless specifically accepted by the Company by written correspondence.
There is no contract made by any purchaser and Herb Guru until Herb Guru accepts an order by giving written notice to the purchaser or Herb Guru attempts to deliver products to that purchaser.
Cookies & Privacy Notice – Customers
Herb Guru are committed to complying with the General Data Protection Regulation and the Data Protection Act 2018. Looking after the personal information you share with us is extremely important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised shopping experience.
This page is to help you understand
We can make changes to this notice but will notify you by updating it on our website. Herb Guru will be what is known as the ‘Data Controller’ of the personal data you provide to us. We will sometimes refer to ourselves in this notice as “we” or “us”. By Data Controller, this means Herb Guru determines the purposes and way in which any personal data is, or will be, processed.
Should you need to contact us please write to:
Data Protection, Herb Guru, 3 Orchard Way, Lower Kingswood, Surrey, KT20 7AD
or via firstname.lastname@example.org with the heading Security and Privacy Enquiry.
This privacy notice was last updated in January 2019
What information we collect when you register and why?
When you buy goods from us, you are entering into a contract with us. You will need to set up a Herb Guru Account before ordering from us, so we can set this up we will ask you to provide some personal information such as:
As an existing customer if you have shopped with us using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information. New customers and existing customers whose payment cards have expired will be asked if they would like to automatically store these details in order to speed up the payment process. If you set up a direct debit payment, we will also collect bank details from you.
How do we use your information
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
Here is a list of the ways that we may use your personal information
Set up your Herb Guru Account
Who we share your information with and why
Herb Guru work with a number of trusted suppliers, agencies and businesses in order to provide you the high quality goods and services you expect from us such as delivery companies, credit reference agencies, fraud prevention agencies and market research companies amongst others.
Some examples of the categories of third parties with whom we share your data are:
In order for you to receive your goods, Herb Guru work with a number of delivery partners. Again, we only pass limited information to them in order to ensure delivery of your items.
Herb Guru work with businesses who support our website and other business systems.
We work with marketing companies who help us manage our electronic communications with you or carry out surveys and product reviews on our behalf.
We work with trusted third party payment processing providers in order to securely take and manage payments.
Fraud prevention services
The personal data you have provided, we have collected from you, or we have received from third parties will be used to prevent fraud and money laundering, and to verify your identity.
Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details, device identifiers including IP address and vehicle details.
We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.
We process your personal data on the basis that it is necessary in the public interest or in exercising official authority for us to prevent fraud and money laundering, and to verify identity, in order to protect ourselves and to comply with laws that apply to us.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
Consequences of Processing
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details above.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.
Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
For more information or to exercise your data protection rights, please contact us using the contact details above. You also have a right to complain to the Information Commissioner’s Office, which regulates the processing of personal data.
Keeping in touch with you
We want to keep you up to date with information about new ranges, special offers and improvements to our website. When you set your account up, we will ask you if you want to receive this type of marketing information.
Herb Guru will not share your information with companies outside Herb Guru for their marketing purposes.
If you decide you do not want to receive this marketing information you can request that we stop by writing to the Data Protection Team via post to the address provided above, or email email@example.com – We will endeavour to update your file within 14 working days.
How long we keep your information
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.
We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes listed under how we use your information above. The only exceptions to this are where:
What are your rights
You are entitled to request the following from Herb Guru, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
If you have any general questions about your rights or want to exercise your rights please contact us via email.
You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.