Privacy Policy

This Privacy Policy explains how Garden Haven Ltd ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or purchase from us. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Garden Haven Ltd is a garden centre based in the United Kingdom. We are the data controller for personal information collected through this website.

2. What Information We Collect

We may collect the following categories of personal information:

• Identity data: your name
• Contact data: email address, phone number, delivery and billing address
• Transaction data: details of products you have purchased from us
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage data: information about how you use our website
• Marketing data: your preferences in receiving marketing from us and your communication preferences

We do not collect any special categories of personal data (such as health, race, religion, or biometric data).

3. How We Use Your Information

We use your personal information for the following purposes:

• To process and fulfil your orders, including dispatching and delivering plants and products
• To manage your account and respond to enquiries or complaints
• To send order confirmations, delivery updates, and other transactional communications
• To send our newsletter and marketing emails (only where you have consented)
• To improve our website, products, and services
• To comply with our legal obligations
• To prevent fraud and maintain website security

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract: processing is necessary to fulfil your order
• Legitimate interests: to run and improve our business, provided your interests are not overridden
• Consent: where you have opted in to receive our newsletter or marketing communications
• Legal obligation: where we are required to comply with applicable law

5. Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

• Payment processors (e.g. Stripe, PayPal) to handle secure transactions
• Delivery carriers to fulfil and track your orders
• Email service providers for transactional and marketing communications
• Website hosting and analytics providers

All third parties are required to keep your data secure and use it only for the purposes we specify. We will disclose your data if required to do so by law or in response to valid requests by public authorities.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Order and transaction records: 7 years (to comply with HMRC requirements)
• Marketing preferences: until you unsubscribe or withdraw consent
• General enquiry data: up to 2 years after your last contact with us

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: ask us to delete your data in certain circumstances
• Right to restrict processing: ask us to pause processing of your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at Sales@garden-haven.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to improve your browsing experience, analyse site traffic, and support marketing. Cookies are small text files stored on your device. We use the following types:

• Essential cookies: required for the website and checkout to function correctly
• Analytics cookies: help us understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies: used to deliver relevant advertising

You can control cookies through your browser settings. Please see our Cookie Policy for full details.

9. Security

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss, or disclosure. All payment transactions are encrypted using SSL technology. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please get in touch: