Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Green Haven Organics Ltd collects, uses, discloses, stores, and protects personal data when you visit our website, place an order, contact us, subscribe to our communications, or otherwise interact with us. We are committed to handling personal data lawfully, fairly, transparently, and securely.
Data controller: Green Haven Organics Ltd
Registered/business address: Green Haven Organics, Unit 4, Willowbrook Business Park, Needham Market Road, Stowmarket, Suffolk, IP14 2AD, UK
Email: [email protected]
Telephone: +44 1449 703 826
This Privacy Policy applies to personal data processed by Green Haven Organics Ltd in connection with our organic products, customer support, marketing activities, and related business operations.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, username, or similar identifier.
- Contact data: billing address, delivery address, email address, and telephone number.
- Order and transaction data: products purchased, order history, payment status, returns, refunds, and delivery information.
- Account data: login credentials, account preferences, and saved details if you create an account.
- Communication data: messages, enquiries, complaints, feedback, and correspondence with us.
- Technical data: IP address, browser type, device information, operating system, time zone, and website usage data.
- Marketing and preferences data: consent preferences, communication choices, and product interests.
- Special category data: we do not intentionally collect special category data unless you voluntarily provide it and it is necessary for a specific purpose, in which case we will process it only where permitted by law.
We collect personal data directly from you, automatically through website technologies such as cookies and similar tools, and from third parties such as payment processors, delivery providers, analytics providers, and fraud prevention services.
3. Purpose of data processing
We process personal data for the following purposes:
- to register and manage customer accounts;
- to process and fulfil orders, including delivery and after-sales support;
- to take payment, issue invoices, process refunds, and prevent fraud;
- to communicate with you about your order, enquiries, and customer service requests;
- to send marketing communications where permitted by law and/or where you have consented;
- to improve our website, products, services, and customer experience;
- to analyse usage trends and assess the effectiveness of our marketing;
- to maintain security, protect against unlawful activity, and detect technical issues;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims.
As an organic business, we may also use personal data to manage product availability, customer preferences, subscription or repeat-order arrangements, and communications relating to product sourcing, seasonal availability, and delivery updates.
4. Legal basis for processing
We rely on one or more of the following legal bases, as applicable:
- Contract: where processing is necessary to enter into or perform a contract with you, including fulfilment of orders and customer support.
- Legal obligation: where processing is required to comply with law, tax rules, accounting requirements, or regulatory obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include fraud prevention, service improvement, website security, and limited direct marketing where permitted.
- Consent: where you have given clear consent, for example for certain marketing communications or cookies where required.
- Vital interests: in rare cases where processing is necessary to protect someone’s life or safety.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Policy, including:
- Payment service providers to process card and online payments;
- Delivery and logistics providers to deliver orders;
- IT, hosting, and cloud service providers to support our website, systems, and data storage;
- Customer relationship and email service providers to manage communications and marketing;
- Analytics providers to help us understand website use and improve performance;
- Professional advisers such as lawyers, accountants, insurers, and auditors;
- Public authorities, regulators, and law enforcement where required by law or necessary to protect rights, safety, and security.
We require third parties to process personal data only in accordance with our instructions, applicable law, and appropriate confidentiality and security obligations.
6. Data transfer to third countries
Some of our service providers may be located outside the UK and/or the European Economic Area. Where personal data is transferred internationally, Green Haven Organics Ltd will take appropriate steps to ensure that the data is protected in accordance with applicable privacy laws.
These safeguards may include:
- transfers to countries recognized as providing an adequate level of protection;
- use of standard contractual clauses or equivalent transfer mechanisms;
- implementation of additional technical and organisational measures where appropriate.
You may contact us for further information regarding international transfers and the safeguards we use.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, reporting, and dispute-resolution requirements.
- Order and transaction records: retained for the period required by tax and accounting laws and business record-keeping obligations.
- Customer service communications: retained for a reasonable period after resolution of the matter.
- Marketing data: retained until you withdraw consent, unsubscribe, or object where applicable.
- Technical and analytics data: retained for a period necessary to operate, secure, and improve our services.
When personal data is no longer required, we will delete it or anonymise it securely.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete data.
- Erasure: to request deletion of your data in certain circumstances.
- Restriction: to request limitation of processing in certain circumstances.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and/or request transfer to another controller where applicable.
- Objection: to object to processing based on legitimate interests and to direct marketing at any time.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. This includes the right to unsubscribe from marketing emails by using the link in the message or by contacting us directly.
Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal, nor will it affect processing carried out on other lawful grounds.
10. Right to complain
If you have concerns about how Green Haven Organics Ltd handles your personal data, we encourage you to contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom. If you are located outside the UK, you may have the right to contact your local supervisory authority as well.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include access controls, encryption where appropriate, secure hosting, staff confidentiality obligations, regular system updates, and procedures for responding to suspected security incidents.
While we work to protect your data, no online transmission or storage system can be guaranteed to be completely secure.
12. Contact information
If you have any questions, requests, or concerns regarding this Privacy Policy or our processing of personal data, please contact:
Green Haven Organics Ltd
Green Haven Organics, Unit 4, Willowbrook Business Park, Needham Market Road, Stowmarket, Suffolk, IP14 2AD, UK
Email: [email protected]
Telephone: +44 1449 703 826
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any revised version will be posted on our website with an updated effective date where applicable.
We encourage you to review this Privacy Policy periodically so that you remain informed about how Green Haven Organics Ltd processes personal data.