Secret Trees
Privacy Policy
Contents
What is this?
Introduction:
Data Controller
Data we will collect from you
Data we collect through our Website
Storing your personal data
Uses made of the data
Disclosure of Information
Marketing
Is your Data transferred outside the EEA?
Your rights
…to be informed about our processing
…to have access to your data and details of our processing
…to object to some processing
…to have some data deleted
…to limit how your personal data is used
…to take some of your data elsewhere
…to query automated decision-making
…to have data corrected
What is this?
Information for you about why and how your personal data is processed by Secret Trees. We, Secret Trees (“We” “Our” “Us” “Secret Trees”), are committed to protecting and respecting your privacy.
Introduction:
When we say “Secret Trees”, we mean “Secret Trees Limited”, a new age agricultural company who produces industrial hemp. We are based in Latvia – an EU member state.
Our only business is to grow, refine and sell hemp. We don’t trade, swap, or make money from personal data in any other way.
European Data protection law gives you rights (pleas see below), and we want to make sure we’re doing right by you. If you have any questions, concerns or requests about your data, or if you think there is any info missing, unclear or incorrect then please do get in touch with us at contact@secrettrees.io
This Privacy Policy explains how we use any personal data you provide to us during or arising out of:
a) your use of Our website at the domain name, https://secrettrees.io/;
b) all correspondence, related submissions, content or other material exchanged between Secret Trees and you;
c) all interactions with Secret Trees made via our Website or other communications channels;
d) details you provide to Us using our “Contact Secret Trees” form on Our Website.
Personal data is any information which personally identifies you, and can include your name, address or email address. Please read the following carefully to understand our views and practices regarding your
personal data and how we will treat it. By accessing, browsing or otherwise using our Website you confirm that you have read and agree to this Privacy Policy.
Data Controller
Our Website is owned and operated by Secret Trees, which for the purpose of data protection laws makes us the data controller. Article 4 (7) of the General Data Protection Regulation defines a Data Controllers as:
‘the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data’
Data we will collect from you
We retain information which is provided by you directly and information that is passively or automatically collected from you. Specifically, Secret Trees will collect and process the following data from you:
Information that you provide when filling in forms on Our Website. This includes information you provide when you complete our “Contact Secret Trees” form;
Information that you provide when corresponding with us;
Details of your visits to our Website including, but not limited to, traffic data, location data, weblogs and other communication data and the resources and links that you access;
Information you provide about yourself any time you contact us or follow us through social media or when you take part in our promotions, competitions or submit reviews about us; and
Any other information which you may provide to Us when using our Website.
We do not collect sensitive personal data or special category personal data but if you ever disclosed such information to us then we would treat this information in accordance with the additional protection it is given under data protection laws.
Please see our Cookies Policy for more information.
Storing your personal data
Secret Trees will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. The personal information that you provide will be retained by us in accordance with applicable laws and our internal retention policy. We will only hold your personal information on our systems for as long as is necessary for the relevant purpose for which it was collected. We will take all reasonable steps to destroy or de-identify personal information we hold if it is no longer needed for the purpose for which it was collected.
Uses made of the data
We use data held about you for the following reasons and in the following ways:
When there is an obligation arising from a contract entered into between you and us:
To provide you with information about products and/or services which you request from us;
To notify you about changes to our products and/or services.
When necessary for our legitimate interests:
To ensure that content from our Website is presented in the most effective manner for you and for your computer; and
To allow you to participate in interactive features of our service.
When you consent:
For certain types of targeted marketing and advertising purposes which are subject to your consent; and
To allow us to contact you to discuss your product query or complaint received via Our “Contact Secret Trees” form on our Website or social media.
When there is a legal and/or regulatory obligation:
To comply with applicable laws where we are obliged to retain and/or disclose certain information; and
For internal and external auditing purposes.
Disclosure of Information
We sometimes need to share your data with third parties who help us provide our services.
We will never share your personal data with other companies or organisations for their own marketing or promotional purposes. We also make sure that any third parties who have access to your personal data have reviews and processes in place to keep it confidential and only use it in ways that you would reasonably expect.
We will disclose your personal data to third parties:
As part of Our services we use a number of third party organisations to help (e.g. fulfilment providers). These organisations act as data processors and will be strictly controlled in how they may/may not use your data and Secret Trees will remain responsible for the protection of your data. Such selected third parties include:
business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you.
If we go through a business transition such as a merger, acquisition by another company, or sale of all or a portion of our assets, your data may be one of the transferred assets and you acknowledge that such transfers may occur and are permitted by this Privacy Policy;
If Secret Trees are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Website Terms and Conditions of use and other agreements; or to protect the rights, property, or safety of Secret Trees, our community, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Marketing
Where you have provided us with the appropriate consents to our general marketing, We will send you marketing materials about other products or services offered by Secret Trees.
You have the right to object to the use of your personal data for marketing purposes. You can exercise your right to prevent such processing at any time by emailing us at contact@secrettrees.io or by clicking “unsubscribe” on the relevant email communication(s).
Is your Data transferred outside the EEA?
The data we collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). Your data may be processed by staff operating outside the EEA who work for us or for one of the third parties to whom We may disclose your personal data (see Disclosure of Information above).
We will only transfer your data outside of the EEA where we have taken appropriate steps to make sure it is carefully protected, for example by entering appropriate contracts approved by data protection regulators with those relevant third parties.
At the time that the General Data Protection Regulation became applicable, the third countries which ensure an adequate level of protection were: Andorra, Argentina, Canada (only commercial organisations),
Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and USA (if the recipient belongs to the Privacy Shield). Data transfer to these countries is expressly permitted.
Secret Trees’ website is hosted by Cloudflare in the US and is currently covered under the Privacy Shield Framework.
Information on their policies, procedures and security controls can be found at https://www.cloudflare.com/en-gb/gdpr/introduction/
Changes to our Privacy Policy
We reserve the right to change the contents of our Website. Any changes we may make to our Privacy Policy in the future will be posted on this page. It is your responsibility to familiarise yourself with this Privacy Policy regularly. Your continued use of our Website following the posting of any such changes will constitute your acceptance of the revised policy.
Your rights
Data protection law gives you rights to help you understand and control how personal data about you is used. This section explains what these rights are and what Secret Trees has in place to help you exercise them.
Your rights are….
…to be informed about our processing
You have the right to have a clear explanation of the processing of your personal data provided to you – we hope that’s what we have achieved with this privacy policy!
…to have access to your data and details of our processing
Exercising this right is known as “making a subject access request” and you have the right to ask us:
whether we are processing your personal data
why we are doing so
under what lawful basis we are processing your data
the categories of personal data about you which we are processing
whether the data is being sent outside the EU
the names of any other Data Controllers your data has been passed to, and the purpose and lawful basis for the transfer
how long we’re going to keep the data, or what criteria we’ll use to decide whether to keep it
for a copy of the data we are processing.
…to object to some processing
Objecting to direct marketing
You have the right to ask us to stop processing your personal data for direct marketing purposes, and if you make this request we will stop sending you marketing and exclude your data from any analytics or reporting we do for marketing.
Objecting to processing based on legitimate interests
You can object to any processing of your personal data where that processing is based on legitimate interests. When you make an objection, we will decide on a case-by-case basis whether we should cease the processing of your personal data.
If we consider that we have compelling interests that outweigh your preferences (which might be to keep our IT systems secure, or maintain auditing and accounting records) then we will explain our reasoning to you.
…to have some data deleted
This right is sometimes referred to as “the right to be forgotten”. It only applies in narrow circumstances, where:
have withdrawn your consent and there is no further legitimate interest in continuing to process the data,
your objection to our processing under legitimate interests outweighs those interests,
the processing of your personal data is no longer necessary,
there is a law that requires the data to be deleted, or
the processing is unlawful (we work hard to make sure this is never the case!)
– you have the right to have your data erased from our systems and files.
Secret Trees can’t erase any data which we are required by law to process, but we will highlight and explain this to you if your request includes this data.
…to limit how your personal data is used
Under some circumstances, you can limit how your personal data is used by us if:
the personal data we are processing is inaccurate
the data is no longer necessary for the original purpose of processing but needs to be kept for potential legal claims, or
you have objected to processing carried out under legitimate interests and we’re still in the process of determining whether there is an overriding need to continue processing
You have the right to restrict the processing. This means that the data will only be processed:
with your consent,
for the establishment, exercise or defence of legal claims, to protect someone else’s rights, or
if there is an important public interest justification for processing
…to take some of your data elsewhere
The right of data portability says that you can ask for any data that we process by automated means (which means ‘using a computer’) which
you provided to us either on the basis of consent or
because it was necessary for a contract that you are directly a party to;
To be provided back to you in a computer-based format, or sent directly to another Data Controller. This is mostly intended for you, the individual end user or consumer, to be able to switch providers without your data being held hostage.
…to query automated decision-making
Secret Trees don’t do any automated decision-making or automated profiling, but if we did, you would have the right to ask us to explain the logic behind any such decisions and for the decision to be reviewed by a human being, if the decision had an effect on your rights or freedoms.
…to have data corrected
Rectification
If any of the data we hold on you is inaccurate or out of date, please let us know so that we can correct it as quickly as possible.
