1. Introduction and company information
This Privacy Policy explains how GreenCraft Gardens Ltd collects, uses, stores, shares, and protects personal data when you use our website, contact us, request our services, or otherwise interact with us. It also explains your rights in relation to your personal data.
The data controller responsible for your personal data is:
GreenCraft Gardens Ltd
GreenCraft Gardens, Unit 4, The Maltings, Station Road, Sawbridgeworth, Hertfordshire CM21 9JX, UK
Email: [email protected]
Phone: +44 1279 842 617
This Privacy Policy applies to personal data we process in connection with our gardening and related services, including enquiries, quotations, site visits, project planning, installation, maintenance, aftercare, customer support, and use of our website and communication channels.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, company name, and job role.
- Contact data: address, email address, telephone number, and other communication details.
- Service-related data: property details, garden preferences, project requirements, access information, photographs, site notes, and instructions.
- Transaction data: quotations, invoices, payment status, purchase history, and related billing information.
- Technical data: IP address, browser type, device information, operating system, and website usage data.
- Marketing and communication data: your preferences for receiving marketing, survey responses, and correspondence history.
- Special category data: we do not ordinarily seek to collect special category data. If such data is inadvertently provided, we will process it only where permitted by applicable law and where necessary.
We may collect personal data directly from you, from third parties who refer you to us, from our service providers, or automatically through our website and related technologies, such as cookies and analytics tools where used.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and provide quotations;
- to assess project requirements and deliver gardening services;
- to arrange appointments, site visits, deliveries, and service attendance;
- to manage customer relationships and provide customer support;
- to issue invoices, process payments, and administer contracts;
- to keep business and financial records;
- to improve our website, services, and customer experience;
- to send service-related communications and, where permitted, marketing communications;
- to protect against fraud, misuse, and security incidents;
- to comply with legal and regulatory obligations; and
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the context, we rely on one or more of the following legal bases:
- Contract: where processing is necessary to enter into or perform a contract with you, including providing quotations and carrying out services.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as managing enquiries, improving services, securing our systems, and maintaining records, provided those interests are not overridden by your rights and interests.
- Consent: where you have given clear consent, for example for certain marketing communications or optional cookies where applicable.
- Legal obligation: where processing is required to comply with laws, regulations, tax rules, accounting requirements, or lawful requests from authorities.
- Vital interests: in rare circumstances, where processing is necessary to protect someone’s life.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:
- IT, hosting, email, and cloud service providers;
- accountants, auditors, legal advisers, and other professional advisers;
- payment processors and banking partners;
- subcontractors, suppliers, and delivery or logistics partners involved in completing our services;
- website analytics, security, and marketing service providers where used;
- public authorities, regulators, courts, or law enforcement where required or permitted by law.
We require third parties to handle personal data in accordance with applicable data protection requirements and to use appropriate safeguards.
6. Data transfer to third countries
Some of our service providers may store or process personal data outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK.
Where we transfer personal data internationally, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place. These may include relying on adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms as required by applicable law.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, or regulatory requirements.
Retention periods will vary depending on the nature of the data and our relationship with you. By way of example:
- enquiry and quotation records may be retained for a reasonable period after the enquiry ends;
- customer and contract records may be retained for the duration of the relationship and for an appropriate period afterwards;
- financial and tax records are typically retained for the period required by law;
- marketing data is retained until you unsubscribe, withdraw consent, or object where applicable.
When personal data is no longer required, we will delete it securely or anonymise it where appropriate.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to receive a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise your rights, please contact us using the details in the Contact Information section below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
If you withdraw consent, we may still be able to process your personal data where another lawful basis applies, such as contract or legal obligation.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your personal data has been processed unlawfully or your rights have been infringed. In the UK, this is the Information Commissioner's Office (ICO).
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of our security practices.
While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. You are responsible for taking appropriate steps to protect your own devices and account access where relevant.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
GreenCraft Gardens Ltd
GreenCraft Gardens, Unit 4, The Maltings, Station Road, Sawbridgeworth, Hertfordshire CM21 9JX, UK
Email: [email protected]
Phone: +44 1279 842 617
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on this page with an updated effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how GreenCraft Gardens Ltd processes personal data.