Your data, our care.

Who we are.

The Garden Hub is a trading name of Bravanta Group LLP (company number OC460266), registered at 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

When we say "we", "us" or "The Garden Hub" in this policy, we mean Bravanta Group LLP.

You can reach us at info@thegardenhub.co.uk or on WhatsApp at +44 7459 554 265.

What information we collect.

When you use our website or contact us, we may collect:

• Contact information — your name, email address, phone number, and delivery address when you make an enquiry or place an order.
• Order information — details of products you purchase, transaction amounts, and order history.
• Payment information — payments are processed securely by Revolut. We do not store or have access to your card details.
• Communications — messages you send us by email, WhatsApp, or through our website contact form.
• Marketing preferences — whether you have opted in to receive our newsletter.
• Technical data — your IP address, browser type, pages visited, and time spent on our site, collected automatically via cookies and analytics tools (see below).

How we use your information.

We use your information to:

• Process and fulfil your order, including arranging delivery and installation.
• Communicate with you about your order, including updates and aftercare.
• Respond to your enquiries and provide customer support.
• Send you our newsletter, if you have opted in (you can unsubscribe at any time).
• Improve our website and understand how visitors use it.
• Comply with our legal obligations.

Our legal basis for processing your data.

Under UK GDPR, we rely on the following lawful bases:

• Contract performance — processing your order and arranging delivery.
• Legitimate interests — responding to enquiries, improving our website, and detecting fraud.
• Consent — sending you marketing emails (you can withdraw consent at any time).
• Legal obligation — where we are required to retain records by law.

Who we share your data with.

To fulfil your order and run our business, we share certain information with trusted third parties:

We also reserve the right to share your data with other third parties where it is necessary to fulfil your order — for example, the courier who delivers your product, the supplier or manufacturer who builds it, an installer or electrician on the day of delivery, or a removal partner if you have asked us to take away an old unit. We share only what each partner needs to do their part, and only for the duration of the order.

• Our product supplier — who coordinates delivery and installation on our behalf. They will contact you directly to arrange this. They handle your contact and delivery details only for this purpose.
• Revolut — our payment processor, who handles all card transactions securely.
• Google — we use Google Analytics and Google Tag Manager to understand website traffic, and Google Ads to reach potential customers. Google may process your data as described in their privacy policy at policies.google.com/privacy.
• Meta (Facebook/Instagram) — we use Meta's advertising pixel to measure the effectiveness of our ads and to show relevant adverts to people who have visited our website. Meta may process your data as described at facebook.com/privacy/policy.
• Our email/newsletter system — hosted within our website; your email address is stored securely and used only to send newsletters you have opted in to.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

Cookies.

We use cookies to make the site work and to understand how visitors use it. You can manage cookie preferences in your browser at any time. For full detail on the cookies we set, please see our cookie policy.

How long we keep your data.

We retain personal data for as long as is necessary for the purposes it was collected. In practice:

• Order and customer records are kept for at least 6 years (in line with UK legal requirements for business records).
• Marketing data is retained until you unsubscribe or ask us to delete it.
• Website analytics data is retained in line with Google's standard retention settings.
• Saved checkouts. When you ask us to email you a checkout link — or when you enter your email address mid-checkout — we save a snapshot of your cart contents, accessory selections and contact details for 10 days, so you can pick up where you left off. We may send you up to two reminder emails (after one hour and one day) if you don't return, each with a one-click unsubscribe. We never save payment details. You can request deletion at any time via Tools → Erase Personal Data, or by emailing info@thegardenhub.co.uk.

Your rights.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Erasure — ask us to delete your data (subject to legal obligations to retain certain records).
• Restrict how we use your data in certain circumstances.
• Object to us processing your data for direct marketing at any time.
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@thegardenhub.co.uk.

Changes to this policy.

We may update this privacy policy from time to time. The most current version will always be available at thegardenhub.co.uk/privacy. The date at the top of this page shows when it was last updated.