Cookies in use with this site
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you sign up to our newsletter, a session cookie is added to your device, so the site knows you have already submitted the form. This cookie stays on your computer until you close your web browser or a few hours have passed.
Similarly, if you complete one of our other forms, such as our contact, volunteering or ‘become a friend’ form, a session cookie will be placed on your device.
If you go to our contact page, google cookies will be placed on your computer. Our contact form uses a hidden test to make sure form submissions are from ‘humans’ and not spam / scamming robots. Google’s Recaptcha does this by analysing your behaviour on the page and by information to do with your browser settings etc. This does not include any direct personal information, or the content of the form you submit to us.
Site visitors with accounts:
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Who we are
Our website address is: https://www.sydenhamgardenflowers.com and information on this page relates to interacting with Sydenham Garden via this website, email and how we handle the information we receive from you.
What personal data we collect and why we collect it
COURSE / EVENT REGISTRATION
We collect contact details and name of bookings (also for room hire on the contact form). Also sometimes payment details.
COMMENTS LEFT ON NEWS ARTICLES ON OUR WEBSITE
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string, to help stop spam.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. It is possible in some cases, visitors to the website could download and extract any location data from images on the website.
If you use one of our contact forms we instantly send the information you submit to our Microsoft server, which is based in the UK. The data is not stored on any other servers, including the WordPress servers that our website uses. The information is then retained in line with our retention policy.
We can take no responsibility for third party groups or companies recommended / mentioned on this site.
We are not responsible for the content of external websites linked to from pages on this website. We do our best to make sure everything is as it should be. Let us know if you spot something, which you think shouldn’t be on the site.
WHO WE SHARE YOUR DATA WITH
This website is hosted in the UK. Any information you send us using our website based forms will be stored on our UK based, Microsoft servers, except for email subscriptions, which are stored at www.mailchimp.com. All data is retained in line with our retention policy.
Web developers/designers who work on this site will be able to see any data submitted via the site. We currently use Design Now, and you can read their terms here.
The website is built with WordPress who do not share any personal data with anyone. Depending on features we add and remove from time-to-time, some anonymised data will be shared with developers and software companies inside and outside the E.U.
Reporting data regarding our project outcomes and how we spend grant funds is shared with our funders and commissioners on a regular basis. Any case studies or information about individuals is anonymized and photographs are only shared with the express permission of the subject. This might be worth keeping in as we might do cases studies/stories on some of our folk as part of our marketing
If you comment on one of our news posts, your submitted info may be checked through a third-party automated spam detection service.
HOW LONG WE RETAIN YOUR DATA
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Form data from our website is cleared on a daily basis and information we receive via email is processed and moved to secure databases on receipt.
WHAT RIGHTS YOU HAVE OVER YOUR DATA
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
HOW WE PROTECT YOUR DATA
Data security is managed through a contract with Poppy IT services, which includes remote monitoring, real-time alerts, and automatic updates. All team members with access to data receive training.
DO YOU HAVE PROCESSES FOR PAPER BASED DATA?
Paper based data is kept in a locked cupboard in a locked office. Access is only provided to those staff members who need it.
WHAT DATA BREACH PROCEDURES WE HAVE IN PLACE
If there is a suspected data breach, Sydenham Gardens DPO is informed and will make the decision on what action to take. We are committed to transparency and will immediately report any breaches to the ICO (supervisory body) within 72 hours and if the breach might have an impact on any individuals, we would inform those individuals, as quickly as possible.
(Only applies to website admins)
Smush sends images to the WPMU DEV servers to optimize them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.
Smush uses a third-party email service (Drip) to send informational emails to the site administrator. The administrator’s email address is sent to Drip and a cookie is set by the service. Only administrator information is collected by Drip.