Home Garden Privacy Policy

This Privacy Policy explains how Home Garden collects, uses, stores, and protects personal data relating to customers in our service area. It also explains your rights under the General Data Protection Regulation and how you can exercise them. This Privacy Policy applies to all Home Garden customers in our operating area, including individuals who visit our website, make enquiries, or purchase our products or services.

1. Who we are and scope of this policy

Home Garden is a business that provides gardening products and related services to customers in our area. In doing so, we act as the data controller for the personal data described in this Privacy Policy. This means that we are responsible for deciding how and why your personal data is used and for ensuring that it is handled in accordance with applicable data protection laws.

This Privacy Policy applies to all personal data that we process about customers, prospective customers, and users of our services within our service area. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.

2. What personal data we collect

We collect and process different categories of personal data depending on how you interact with us. This may include:

Identity and contact details: name, title, postal address, billing address, delivery address, and other contact details you provide.

Account and order information: details of purchases and orders, customer account identifiers, and order history.

Communication data: information you provide when you contact us, make an enquiry, submit feedback, or otherwise communicate with us.

Payment and transaction data: payment method details and transaction records. Payment card details are processed securely by our payment service providers and are not stored in full by Home Garden.

Usage and technical data: information about how you use our website or online services, such as access times, device information, and approximate location data, where this is collected through cookies or similar technologies and where legally permitted.

Preference data: your marketing preferences, product interests, and service preferences, where you choose to share these with us.

3. How we collect your personal data

We collect personal data in several ways, including:

Directly from you when you place an order, request a quote, create an account, contact us for support, or otherwise communicate with us.

Automatically when you interact with our website or digital services, for example through cookies and similar tracking technologies, in accordance with applicable law.

From third parties such as payment service providers, delivery partners, and marketing partners, where this is necessary to provide our services or where you have given consent to those third parties.

4. Lawful bases for processing your data

We only process your personal data where we have a lawful basis under the General Data Protection Regulation. Depending on the specific processing activity, we rely on the following lawful bases:

Performance of a contract: to process and fulfill your orders, manage your customer account, provide services you have requested, and handle customer service and support enquiries.

Compliance with legal obligations: to comply with legal and regulatory obligations, such as record-keeping, tax requirements, and responding to lawful requests from public authorities.

Legitimate interests: to manage and improve our business, operate and secure our website, prevent fraud, protect our rights and the rights of others, and conduct limited direct marketing to existing customers where permitted. When we rely on legitimate interests, we balance our interests against your rights and expectations and process data in a proportionate way.

Consent: where required by law, for example for certain types of marketing communications or for the placement of non-essential cookies. When we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

5. How we use your personal data

We use your personal data for the following purposes:

To provide our products and services, including processing your orders, arranging delivery, managing payments, and providing customer support.

To communicate with you about your orders, service updates, changes to terms, and important information relating to your use of our services.

To manage and improve our business operations, including internal administration, troubleshooting, data analysis, testing, and research.

To personalize your experience, including remembering your preferences and providing content and offers relevant to your interests, where legally permitted.

To send you marketing communications about Home Garden products and services, where you have given consent or where we are otherwise permitted under applicable law. You can opt out of marketing communications at any time.

To protect our business and our customers, including preventing fraud, misuse of our services, and ensuring the security of our systems.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal, accounting, or reporting requirements.

In general, we keep customer account and order information for as long as you remain an active customer and for a period afterwards, as required by applicable laws relating to contracts and financial records. Communication data may be kept for a reasonable period to handle enquiries, resolve disputes, and improve our services.

When personal data is no longer required for the purposes set out in this Privacy Policy, or once any applicable retention period has expired, we securely delete or anonymize it.

7. Data sharing and processors

We do not sell your personal data. We may share your personal data with selected third parties where necessary for the purposes described in this Privacy Policy and where this is permitted by law. These third parties may act as data processors on our behalf or as separate controllers.

We may engage data processors to provide services such as payment processing, order fulfilment and delivery, customer relationship management, information technology support, data hosting, analytics, and marketing services. These service providers only process personal data on our instructions and are required to protect it with appropriate technical and organizational measures.

We may also share personal data with professional advisers such as accountants, auditors, or legal advisers, where necessary to obtain professional services, and with public authorities where we are required to do so by law or in order to protect our rights or the rights of others.

If personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other mechanisms recognized under data protection law.

8. Security of your personal data

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include access controls, data minimization, encryption or pseudonymization where appropriate, secure storage systems, and regular review of our security practices. While we strive to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security.

9. Your data protection rights

As a data subject under the General Data Protection Regulation, you have several rights in relation to your personal data processed by Home Garden. These rights apply to all Home Garden customers in our area and include:

Right of access: you have the right to obtain confirmation as to whether we process your personal data and to request access to that data.

Right to rectification: you have the right to request the correction of inaccurate or incomplete personal data.

Right to erasure: you have the right to request the deletion of your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.

Right to restriction: you have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or our legitimate interests.

Right to data portability: you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where the processing is based on consent or contract and carried out by automated means.

Right to object: you have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to the processing of your personal data for direct marketing.

Right to withdraw consent: where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time.

You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data does not comply with data protection law.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process your personal data.

Your continued use of Home Garden services after any update to this Privacy Policy will be treated as acceptance of the updated terms, to the extent permitted by law.