Privacy policy

1. Who we are

GardenTec Innovations Ltd (“GardenTec”, “we”, “us” or “our”) is the controller of the personal information described in this notice. You can contact us at contact@gardentec.uk or Park Farm House, Park Road, Stevington, Bedford, MK43 7QF.

We are committed to handling personal information fairly, transparently and in accordance with applicable UK data-protection law, including the UK GDPR and the Data Protection Act 2018.

2. Information we collect

• Enquiry and contact information: your name, email address, telephone number, preferred contact method, enquiry type, message and the page from which you contacted us.
• Customer and transaction information: billing and delivery addresses, order, payment-confirmation, delivery, warranty and support records where you later become a customer.
• Verification information: information reasonably required for identity, address, fraud-prevention, Know Your Customer or Anti-Money Laundering checks where these are applicable to a transaction.
• Technical information: security and operational information such as IP address, browser/device information and request logs processed by our hosting and security providers. GardenTec does not add raw IP addresses to enquiry or CRM records.
• Optional analytics information: after you opt in, approved non-personal page, product, basket and enquiry journey events, a query-free page address and allowlisted campaign attribution values. Query strings, referrers and enquiry/contact fields are not sent through this analytics event route.

Please do not include special-category, financial, identity-document or other unnecessary sensitive information in the public enquiry form.

3. Why we use information and our lawful bases

• Responding to enquiries and requested demonstrations or quotations: to take steps at your request before a possible contract and, for general enquiries, for our legitimate interest in answering genuine requests and operating our business.
• Orders, delivery, support and warranty: to perform a contract with you and manage our customer relationship.
• Accounting, tax and other legal duties: to comply with legal obligations.
• Security, identity verification and fraud prevention: to comply with applicable legal obligations and for our legitimate interests in protecting customers, GardenTec and payment or delivery services.
• Marketing: only where permitted by law and, where required, with your separate consent. Agreeing that we may respond to an enquiry does not subscribe you to marketing.

The contact-method choice and confirmation on our enquiry form tell us how you want us to answer that specific request. They are recorded as enquiry-response evidence and are not treated as marketing consent.

4. Who receives information

Authorised GardenTec staff may access information where needed for their role. We may also use contracted hosting, security, identity/address verification, payment, professional-advice and delivery providers, or disclose information to regulators and law-enforcement bodies where required. We do not sell personal information and do not share customer information with other organisations for their own marketing.

Providers must process information only for the agreed service and under appropriate contractual and security controls.

After optional analytics consent, Google Analytics receives the approved usage events needed to produce aggregated website statistics. Google states that individual IP addresses from UK users are not logged or stored. We keep Google advertising, remarketing, Google signals and enhanced measurement disabled.

5. Location and international transfers

GardenTec prefers UK or UK/EEA service locations where the selected service supports them. Some suppliers may process or provide controlled support from other countries. Where personal information is transferred outside the UK, we require a lawful transfer mechanism and appropriate safeguards. You may contact us for information about the safeguards relevant to your data.

Google Analytics may involve international processing. Google describes the transfer frameworks and contractual safeguards used for its analytics services; GardenTec reviews those safeguards before production use.

6. Retention and security

We keep enquiry information only while it is needed to answer and manage the request, conduct proportionate follow-up, resolve complaints and establish or defend legal claims, according to the approved GardenTec retention schedule. If an enquiry becomes an order, customer, warranty or support record, the corresponding contractual, legal and accounting period applies. Invoice and accounting records are normally retained for at least six years where UK law requires this.

The public website sends enquiry details to a private, access-controlled CRM record. We use encrypted transport, restricted staff access, validation, audit and recovery controls appropriate to the service. No internet service is completely risk-free, but we take proportionate steps to protect information.

7. Cookies, analytics and automated decisions

Essential storage may be used to operate and secure the website. Optional Google Analytics is off by default and its tag is not loaded until you select “Allow optional analytics”. When allowed, Google Analytics uses first-party _ga cookies and approved non-personal events to help us understand product discovery and enquiry journeys. The staging property retains event data for two months and user-associated data for fourteen months.

Advertising and remarketing remain off. We suppress automatic page views, remove query strings and referrers, and send only the controlled events and campaign fields described above. You can withdraw analytics consent at any time using the same on-page control; GardenTec then deletes accessible Google Analytics cookies, disables collection and stops forwarding events. We do not use the public enquiry to make solely automated decisions that have legal or similarly significant effects on you.

8. Your rights

Depending on the circumstances and lawful basis, you may ask for access to, correction, erasure, restriction or transfer of your personal information. You may also object to processing based on legitimate interests and withdraw consent where processing relies on consent. These rights can be subject to legal limits and retention duties.

To exercise a right, contact contact@gardentec.uk. We may need to verify your identity before acting on a request.

9. Questions and complaints

Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner's Office through ico.org.uk/make-a-complaint.

10. Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. We will publish the updated date and provide additional notice where a change materially affects how we use personal information.