1. Introduction and company information

This Privacy Policy explains how GreenCraft Gardens Ltd collects, uses, stores, shares, and protects personal data when you use our website, contact us, request our services, or otherwise interact with us. It also explains your rights in relation to your personal data.

The data controller responsible for your personal data is:

GreenCraft Gardens Ltd
GreenCraft Gardens, Unit 4, The Maltings, Station Road, Sawbridgeworth, Hertfordshire CM21 9JX, UK
Email: [email protected]
Phone: +44 1279 842 617

This Privacy Policy applies to personal data we process in connection with our gardening and related services, including enquiries, quotations, site visits, project planning, installation, maintenance, aftercare, customer support, and use of our website and communication channels.

2. Data collection and processing

We may collect and process the following categories of personal data:

We may collect personal data directly from you, from third parties who refer you to us, from our service providers, or automatically through our website and related technologies, such as cookies and analytics tools where used.

3. Purpose of data processing

We process personal data for the following purposes:

4. Legal basis for processing

We only process personal data where we have a lawful basis to do so. Depending on the context, we rely on one or more of the following legal bases:

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

We require third parties to handle personal data in accordance with applicable data protection requirements and to use appropriate safeguards.

6. Data transfer to third countries

Some of our service providers may store or process personal data outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK.

Where we transfer personal data internationally, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place. These may include relying on adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms as required by applicable law.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, or regulatory requirements.

Retention periods will vary depending on the nature of the data and our relationship with you. By way of example:

When personal data is no longer required, we will delete it securely or anonymise it where appropriate.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

To exercise your rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw consent, we may still be able to process your personal data where another lawful basis applies, such as contract or legal obligation.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your personal data has been processed unlawfully or your rights have been infringed. In the UK, this is the Information Commissioner's Office (ICO).

11. Data security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of our security practices.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You are responsible for taking appropriate steps to protect your own devices and account access where relevant.

12. Contact information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

GreenCraft Gardens Ltd
GreenCraft Gardens, Unit 4, The Maltings, Station Road, Sawbridgeworth, Hertfordshire CM21 9JX, UK
Email: [email protected]
Phone: +44 1279 842 617

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on this page with an updated effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how GreenCraft Gardens Ltd processes personal data.

8/30/2026 Home