Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Greenfield Home & Garden Supplies Ltd collects, uses, discloses, stores, and protects personal data when you interact with us, including when you visit our premises, contact us by phone or email, make enquiries, place orders, arrange delivery, or otherwise use our services.
Greenfield Home & Garden Supplies Ltd acts as the data controller for the personal data described in this Privacy Policy.
Company details:
- Company name: Greenfield Home & Garden Supplies Ltd
- Address: Greenfield Home & Garden, 14 Station Road, St Ives, Cambridgeshire, PE27 5BH, United Kingdom
- Email: [email protected]
- Phone: +44 1480 762 934
This Privacy Policy is intended to provide clear information about our data handling practices in a professional and transparent manner.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your interactions with us:
- Identity data: name, title, and, where relevant, account or customer reference details.
- Contact data: address, email address, telephone number, and delivery details.
- Transaction data: details of products purchased, ordered, returned, exchanged, or delivered, payment status, invoices, and receipts.
- Communication data: correspondence with us by email, telephone, in person, or through any contact form or similar communication channel.
- Technical data: information such as device type, browser type, IP address, and basic usage information if you interact with our website or digital systems.
- Security and incident data: CCTV or access-control information where applicable at our premises, to the extent permitted by law.
We generally collect personal data directly from you. We may also receive data from third parties where necessary for order fulfilment, delivery, payment processing, fraud prevention, or legal compliance.
We do not intentionally collect special category personal data unless you provide it to us voluntarily and there is a lawful reason for us to process it.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our products and services;
- to process enquiries, quotations, purchases, refunds, exchanges, and deliveries;
- to communicate with you about orders, products, services, and customer support;
- to manage our business operations, administration, accounts, and records;
- to improve our products, services, and customer experience;
- to maintain security, prevent fraud, and protect our business, staff, and customers;
- to comply with legal, tax, accounting, and regulatory obligations;
- to resolve disputes and establish, exercise, or defend legal claims;
- to send marketing communications where permitted by law and, where required, with your consent.
4. Legal basis for processing
We only process personal data where we have a valid legal basis to do so. Depending on the circumstances, the legal basis may include:
- Contract: processing necessary to enter into or perform a contract with you, such as processing orders and delivering goods.
- Legal obligation: processing necessary to comply with applicable legal and regulatory requirements, including tax and accounting obligations.
- Legitimate interests: processing necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms, such as managing customer relationships, preventing fraud, improving services, and maintaining security.
- Consent: processing based on your consent, for example for certain marketing communications where required.
- Vital interests: processing where necessary to protect someone’s life or physical safety in exceptional circumstances.
- Public task or official authority: where applicable under law.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary and lawful for the purposes described in this Privacy Policy. These may include:
- delivery and logistics providers;
- payment service providers and card processing services;
- IT, hosting, cloud storage, security, and communication service providers;
- accountants, auditors, insurers, legal advisers, and professional consultants;
- government bodies, regulators, law enforcement agencies, and courts where required by law;
- fraud prevention, identity verification, and risk management services;
- other third parties involved in supporting our business operations.
We require third parties to handle personal data in accordance with appropriate confidentiality and data protection obligations. We do not sell your personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom, we take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms.
If you would like further information about international data transfers and the safeguards we use, you may contact us using the details provided below.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting, tax, and record-keeping obligations.
The retention period may vary depending on the type of data and the purpose of processing. In general:
- customer and transaction records are retained for the period required for business, tax, and legal purposes;
- correspondence and enquiry records are retained for a reasonable period after the matter has been closed;
- marketing records are retained until you unsubscribe or withdraw consent, or until they are no longer required;
- security records, where applicable, are retained for a limited period unless needed for investigation or legal reasons.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with applicable law and our internal retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request confirmation of whether we process your personal data and to receive a copy of that data.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of your personal data in certain circumstances.
- Restriction: the right to request that we limit the processing of your personal data in certain circumstances.
- Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: the right to object to processing based on legitimate interests and to object to direct marketing at any time.
To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding to your request.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
If you wish to withdraw your consent, please contact us at [email protected] or call +44 1480 762 934.
If you withdraw consent, we may no longer be able to provide certain services or communications to you where consent is necessary for that purpose.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we may try to resolve the issue directly.
You also have the right to lodge a complaint with the relevant data protection authority in the United Kingdom. The supervisory authority is the Information Commissioner’s Office (ICO).
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, secure storage, confidentiality obligations, staff training, and regular review of our data handling practices.
While we strive to protect your personal data, no system can be guaranteed to be completely secure. You should also take reasonable steps to protect your own information, including safeguarding your devices and account credentials where relevant.
12. Contact information
If you have any questions about this Privacy Policy, your rights, or the way Greenfield Home & Garden Supplies Ltd processes personal data, please contact us using the details below:
- Greenfield Home & Garden Supplies Ltd
- Greenfield Home & Garden, 14 Station Road, St Ives, Cambridgeshire, PE27 5BH, United Kingdom
- Email: [email protected]
- Phone: +44 1480 762 934
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or data protection practices. Any updated version will take effect when published unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Greenfield Home & Garden Supplies Ltd protects your personal data.