1. Overview
This Privacy Policy explains how GreenHaven Garden Care collects, uses and protects personal information supplied through this website, by email, by telephone or in person.
2. Data controller
The data controller is Sujata Tamang, trading as GreenHaven Garden Care, based at 195B Heene Road, Worthing, West Sussex, BN11 4NN, United Kingdom.
3. Information collected
Depending on how you interact with the business, the following may be collected: name, email, telephone, postal address, garden location, service requirements, photographs shared with an enquiry, and correspondence records.
4. Legal basis
Personal data is processed on the basis of legitimate interest (responding to enquiries), contract (delivering agreed services), consent (marketing where applicable) and legal obligation (tax and accounting).
5. Payments
Payments are processed by Stripe. GreenHaven Garden Care does not receive or store customer card details. Stripe's own privacy policy applies to payment processing.
6. Cookies
See the separate Cookie Policy.
7. Storage and retention
Enquiry and customer data is retained only for as long as required to deliver the service, respond to queries and comply with legal obligations (typically up to six years for accounting records).
8. Sharing
Personal information is not sold. Data is shared only with service providers essential to the business, such as Stripe (payments), the website host and, where required, HMRC.
9. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict, object to and port your personal data, and to lodge a complaint with the ICO (ico.org.uk).
10. Contact
Privacy enquiries: contact@greenhavengardencare.co.uk.
11. Security
Reasonable technical and organisational measures are in place to protect personal data, including secure email accounts and restricted device access.
12. Children
Services are aimed at adult residential customers. Personal information is not knowingly collected from children.
13. International transfers
Data is processed in the UK/EEA. Where a service provider (such as Stripe) operates internationally, standard contractual safeguards apply.
14. Automated decision-making
No automated decision-making or profiling with legal effect takes place.
15. Changes
This policy may be updated from time to time. Material changes will be reflected on this page.
This document should be reviewed against the business's actual operating practices before publication.