Privacy Policy

We welcome you to www.greenshorticulture.co.uk. In the below Privacy Policy, we inform you about the scope of the processing of your personal data.

What is personal data?

Personal data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not personal data. This includes, for example, the number of users of a website.

Why do we have a privacy policy and what law applies?

Both the UK`s Data Protection Act 2018 (DPA), and the General Data Protection Regulation ("GDPR"), require us to inform you how we process your personal data when you are visiting our website and engage in our services. Doing so we will only use your personal data in accordance with the DPA, the GDPR, and only as described in this privacy policy. 

Responsible for data processing

Responsible for data processing in accordance with the provisions of the DPA and GDPR is:

Greens Horticulture LTD
Toterdown Bridge Trading Estate
Albert Road
Bristol, BS2 0XH, UK  

Web: www.greenshorticulture.co.uk 

E-Mail: info@greenshorticulture.co.uk

Phone: 0117 971 3000

Facebook: https://www.facebook.com/Greens.Horticulture/

Instagram: https://www.instagram.com/greens_horticulture/ 

What are the legal bases for processing your personal data? 

Of course, to process your personal data, we not only need to have a purpose such as you are sending us an enquiry or entering into a contract with us, but we also need to have a lawful basis to do so. The processing of your personal data may be based on the following legal grounds: 

• consent serves as our legal basis for processing operations where we obtain your consent for a specific processing purpose.

• contract, insofar as the processing of personal data is necessary for the performance of a contract, e.g., if you book an appointment. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in the case of enquiries about availability or the services in general.

• legal obligation, insofar as we are subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations or archiving contractual data.

• legitimate interest, applies on the basis of our legitimate interests, e.g., when using service providers as part of the website. Our interest is directed towards the use of a user-friendly, appealing, and secure presentation as well as optimisation of the website, which serves our business interests as well as meeting your expectations.

What are your Rights

In accordance with the DPA and GDPR, you can in relation to us processing your personal data rely on the following rights:

• The right to information,

• The right to erasure,

• The right to rectification,

• The right to data portability,

• The right to restriction of data processing,

• The right to object to data processing.

 To assert these rights, please contact us at any time using the details provided. 

You also have the right to lodge a complaint with your local data protection supervisory authority or the Information Commissioner`s Office (ICO), which is the relevant authority in the UK. 

The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK and their website can be found at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO or any other supervisory authority.

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal Personal Data about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. 

We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your Personal Data.

When you send a data subject access request 

If you believe that the personal data, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing or withdraw your consent, please contact us. 

We may ask you to provide proof of identity before we can answer your requests. Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of Personal Data, notably where such requests would not allow us to provide our service to you anymore.

The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. 

You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.

Where do we get your data from? 

Normally quite simple: you provide it to us. Perhaps you provide it during the processing of the purchase transaction or enter it in our newsletter sign up form when you create an account, place and order or when you message us. It is basically up to you whether you enter personal or business data (e-mail addresses, names, addresses) on our website. Other, purely technical data is automatically collected by our IT systems as soon as you open our website. These are, for example, the time of the page call or the Internet browser used.

Duration of data storage

We only store your personal data for a certain period of time. For example, if you have ordered something from us then the retention periods under tax and commercial law are decisive: by law, we must store order or service-related data and the associated addresses for up to 6 years. We delete your data that we have stored for marketing purposes when you request us to do so, revoke your consent to store it or the purpose for storing the data no longer applies. 

Data processing

The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

a) Log file during website visit

We log your website visit. In doing so, we process:

• Name(s) of our accessed website(s),

• date and time of the access,

• the amount of data transferred,

• the browser type and version,

• the operating system you use,

• the referrer URL (the previously visited website),

• your IP address,

• the requesting provider.

The legal basis for data processing is our legitimate interest in the ongoing provision and security of our website. The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period. The legal basis our legitimate interest.

b) Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.

c) Hosting

To provide our website, we use the services of web hosting services of Visualsoft who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf. The legal basis for the data processing is our legitimate interest in providing our website. 

d)  Contacting us

If you contact us per e-mail, phone, or social media, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details (e-mail address and phone number) -if provided by you- and your message.

We also offer to contact us via the messaging service WhatsApp. If you contact us via WhatsApp on the occasion of a specific transaction, we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with the provision of a contractual or pre-contractual measure to process and respond to your request. 

We are present in various "social media" platforms (currently, Facebook and Instagram) in order to communicate with our customers, interested parties and users registered there and to be able to inform them about our offers there. We would like to point out that you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating). 

The legal basis of the data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations and/or our legitimate interest in processing your enquiry.

e) Contract fulfilment and data management in the context of service provision

We process various data within the framework of the provision of our services and for the initiation and processing of the existing contractual relationship between you and us for example when you create a user account, or order one of our products or your voice recording when you use our voice search feature. As such we process your data and all information that is necessary in the context of fulfilling the services, exclusively for the purpose of processing and handling the contractual relationship. This includes in particular support, correspondence with you, invoicing, fulfilment of our accounting and tax obligations.

f) Creation of a customer account, processing of orders, use of customer data, and Guest orders

If you wish to create an account, prior registration is necessary. We only collect the data required for registration and process your name, address, phone number, email address to create a user account. We process the data you provide in a customer account created by us in our merchandise management system provided by Visualsoft. If you do not wish to create a permanent customer account, you can also order as a guest.

In the context of order processing, your name, address, phone number, email address, and purchases so that you can complete your purchase(s). The processing is based on the fulfilment of the purchase contract with you and any follow-up of the purchase. Data processing in the case of a guest order for goods is carried out in the same way.

g) Order confirmation/dispatch confirmation

In order to process the contract and provide you with our services, for example the web shop or to send you your order, we process name, address, phone number (optional), email address to send you customer service information, order confirmations, contract documents or payment processing information. We are obliged to send you these documents in order to comply with our legal information obligations for an effective conclusion of a contract with you. The processing of your data is therefore necessary to fulfil our legal information obligations for an effective conclusion of a contract with you.

h) Customised offers, marketing and advertising 

If we receive your e-mail address in connection with the sale of a product or service, we will use the e-mail address for direct marketing of our own similar goods or services, unless you have objected to the processing. The data is used on the basis of our legitimate interest and in the interest of promoting the sale of our goods or services. You have an uncomplicated option to object, e.g., via the unsubscribe link in every e-mail.

Disclosure or transfer of personal data

We do not transfer or disclose your information to third parties unless there is a legal basis for such disclosure. Example of such a basis is typically consent from you or a legal basis that requires us to disclose the data.

For the operation and optimisation of our website and our services and for the processing of contracts, various service companies work for us, e.g., for central IT services or the hosting of our website, for the payment and delivery of products, or order fulfilment, to whom we pass on the data required for the fulfilment of the task (e.g., name, address).

The personal data collected by us will be passed on to the company commissioned with the delivery (i.e., DPD Local, Yodel and Royal Mail) within the framework of the contract processing. The legal basis for the transfer of data is the fulfilment of a contract and our legitimate interest.

When payments are made your payment data (e.g., payment amount, information on the payment method used, details of the payee) as well as your confirmation that the payment data (inc. Bank Transfer) is correct and received will be collected and processed for the purpose of making the payment and fulfilment of the contract and transmitted to the credit institution commissioned with the payment (PayPal and Opayo (formerly SagePay) GPay and Apple Pay). This processing only takes place insofar as it is actually necessary for the execution of the payment. We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider. 

Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection measures at the companies we commission. We therefore agree on specific data security measures with these companies and monitor them regularly.

We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g., due to official or court orders, or if we are entitled to do so, e.g., because this is necessary for the prosecution of criminal offenses or for the exercise and enforcement of our rights and claims.

If we use service providers in third countries, we take additional measures to ensure an adequate level of data protection for the transfer of personal data and thus ensure that the transfer is generally permissible and that the special requirements for a transfer to a third country are met (e.g., by concluding standard contracts and additional guarantees, supplementary technical and organisational measures such as encryption or anonymisation).

Analytics and Tracking

Google Analytics

On the basis of our legitimate interests and your consent (i.e., interest in the analysis, optimisation and economic operation of our website) Google Analytics, a web analytics service provided by Google Inc. of 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous user profiles can be created from the processed data.

The IP address transmitted by your browser will not be merged with other data from Google. You can prevent the storage of cookies by setting your browser accordingly. You can also prevent the collection of the data generated by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.  

Google Tag Manager 

We use Google Tag Manager, a web analytics service provided by Google Inc. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. No cookies are set, and no Personal Information is collected. The Google Tag Manager triggers other tags that may collect data. The Google Tag Manager does not access this data. 

If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager. More information on the Google Tag Manager can be found at the following link: http://www.google.com/tagmanager/use-policy.html. This service transmits data to the USA. 

Facebook Ads and Conversion 

We also place ads on Facebook, (Meta Platform Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company Meta Platform Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA formerly Facebook) and also use the "visitor action pixel" (Conversion Tracking) of Facebook within our website.

With your consent, Facebook Conversion Tracking stores and processes information about your user behaviour on our website and uses cookies for this purpose, which are stored locally on your device if you have reached our website via a Facebook advertisement.

We use Facebook Conversion Tracking for marketing and optimisation purposes, in particular to analyse the use of our website and to be able to improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour, we want to improve our offer and make it more interesting for users. This is also our legitimate interest in the processing of the above data by the third-party provider.

You can object to the collection by the Facebook pixel and use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare the objection via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform independent. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices.

Automated decision-making

Automated decision-making including profiling pursuant to does not take place.

Security

State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorised access from outside. In addition, technical and organisational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons.

Links to other providers

Our website also contains - clearly recognisable - links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements of the law become known.

Personal data and children 

Our services are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal data from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact. 

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Concerns and Contact

If you have any concerns about a possible compromise of your privacy or misuse of your personal data on our part, or any other questions or comments, you can contact using the following contact details:

Greens Horticulture LTD
Toterdown Bridge Trading Estate
Albert Road
Bristol, BS2 0XH, UK  

Web: www.greenshorticulture.co.uk 

E-Mail: info@greenshorticulture.co.uk

Phone: 0117 971 3000

This Privacy Policy was last updated on Tuesday, 27 September 2022.