Privacy Policy

1. Who is responsible for your personal information

This Privacy Policy explains how personal information submitted through gelatinflower.com is handled. The controller for the website is T & V Niedzwiedz, Address: Mitcham. The contact details provided for privacy enquiries are tel.: +447754384251 and e-mail: [email protected]. The VAT information supplied for publication is VAT ID: GB 144981390, VAT Registration Date: 2016-05-10.

We aim to process personal information lawfully, fairly and transparently in accordance with the UK GDPR, the Data Protection Act 2018 and other applicable UK data-protection rules. This policy is intended to explain what information may be processed through the website, why it is processed, how long it may be kept and what rights may be available to the individual concerned.

2. Information you may provide to us

When you submit an enquiry, the website may collect your name, email address, telephone number if you choose to provide it, the enquiry topic and the message you enter. We ask visitors not to place detailed medical records, care assessments, diagnoses or other highly sensitive information in the general web form. If further information is genuinely needed for a later conversation, the appropriate method of providing it can be discussed separately.

If you contact us outside the web form using the contact details published on this website, we may process the information contained in that communication and any information reasonably necessary to respond. If you communicate on behalf of another person, you should only provide information you are entitled to share.

3. Technical and usage information

Like most websites, basic technical information may be processed when a browser requests a page, such as IP address, browser type, device information, date and time of access, requested page and security-related logs. This information may be required to deliver pages, maintain security, investigate errors and protect the website from misuse.

Optional analytics or marketing technologies are not treated as essential. Where such technologies are used, they should be activated only where an appropriate legal basis and, where required, valid consent are in place. More information about website storage and access technologies is provided in the Cookie Policy.

4. Why information is used

Information submitted in an enquiry may be used to read, route and respond to the request, to keep a proportionate record of the communication, to take steps requested by you before any possible agreement, and to protect the legitimate operational interests of the website and organisation. Information may also be processed where necessary to comply with legal obligations or to establish, exercise or defend legal rights.

Where consent is the appropriate basis for a specific optional activity, consent must be freely given, specific, informed and capable of being withdrawn. Withdrawing consent does not make earlier processing unlawful, but it means future processing based solely on that consent should stop unless another lawful basis genuinely applies.

5. Legal bases

Different processing activities can rely on different legal bases. Enquiry handling may be necessary to take steps at your request before entering into a possible agreement, or may be supported by legitimate interests in answering genuine enquiries and administering communications. Certain records may need to be retained to comply with a legal obligation. Optional cookies or similar technologies may require consent under the Privacy and Electronic Communications Regulations 2003 as amended.

We do not treat consent as a catch-all basis for every use of personal information. The lawful basis should reflect the actual purpose and context of the processing.

6. Special-category information

Information about health can be special-category personal data and requires additional protection. The public web form is deliberately framed for general enquiries and does not ask for medical or clinical details. If sensitive information becomes relevant to a later care-related discussion, the circumstances and lawful condition for processing should be considered before that information is requested or recorded.

Please avoid including information about another person’s health, medication, diagnosis, disability or care records in a general web enquiry. If you accidentally send information that is not needed, it may be removed or restricted where appropriate.

7. Sharing and service providers

Personal information may be made available to people or service providers who need it for legitimate website operations, communication, hosting, security, maintenance or professional advice. Access should be limited to what is necessary for the relevant task and subject to appropriate confidentiality and data-protection arrangements.

Where a third-party service is used in a way that changes how personal information is processed, the relevant privacy information should identify the purpose of that processing and the role of the provider as required by law.

8. International transfers

If a service provider processes personal information outside the United Kingdom, any restricted transfer must be handled using a lawful transfer mechanism and appropriate safeguards where required. The precise mechanism depends on the destination, recipient and service involved.

If an international transfer becomes relevant to the website or enquiry process, information about the destination and the relevant safeguard should be provided where legally required.

9. How long information is kept

Personal information should be retained only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, keeping appropriate business records, dealing with disputes and meeting legal obligations. Retention periods can differ depending on the type of communication and whether it leads to any further relationship.

Information that is no longer needed should be deleted, anonymised or securely restricted as appropriate. Security logs and technical records may be kept for a limited period where needed to investigate incidents, maintain site integrity or comply with legal requirements.

10. Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed about processing, request access to personal information, ask for inaccurate information to be corrected, request erasure, request restriction, object to certain processing, and receive certain information in a portable form. Rights are not absolute and the applicable right depends on the legal basis and context.

Where processing is based on consent, you may withdraw that consent. You may also raise a concern with the Information Commissioner’s Office if you believe your data-protection rights have been infringed. We encourage you to contact us first if you would like us to explain or address a privacy concern.

11. Security

Reasonable technical and organisational measures should be used to reduce the risk of unauthorised access, accidental loss, misuse or alteration of personal information. No internet transmission can be guaranteed to be completely secure, so visitors should avoid sending unnecessary confidential information through open web forms.

Access to enquiry information should be limited to those who require it for the stated purpose. Where a personal-data breach creates a risk that triggers legal notification duties, the incident should be handled in accordance with applicable UK requirements.

12. Cookies and similar technologies

The website uses or may use storage and access technologies for functions such as maintaining essential preferences and, where enabled with the required permission, optional analytics or marketing functions. Non-essential technologies should not be activated merely because a visitor continues browsing.

The Cookie Policy explains categories, purposes, consent choices and how preferences can be changed. Where consent is required, a clear positive choice should be obtained before the relevant optional technology is used.

13. Changes to this policy

This Privacy Policy may be updated when the website, processing activities or applicable law change. The “Last updated” date at the top of the page indicates the current version. Material changes should be reflected in the text so visitors can understand how their information is handled.

Questions about this Privacy Policy can be directed to T & V Niedzwiedz using the contact information stated above.