Privacy Policy

Information Provided By You:

• Name,
  phone number, email address, postal and billing addresses, order history,
  usernames, and passwords
• Voluntary
  feedback via surveys, website reviews, and competitions
• Payment
  information (processed via third-party services like PayPal, Sage Pay,
  Shopify Payments)

Payment Data. Payment data (Payment by credit or
debit card) is stored by cookies - only if you enable it to remember for the
next time you make purchases. PayPal may also store data if you choose that
method of payment. You may find their privacy notice link(s) here: https://www.paypal.com/webapps/mpp/ua/privacy-full. 

All personal information that you provide to us must be
true, complete and accurate, and you must notify us of any changes to such
personal information. 

Automatically Collected Data:

• Log
  and usage data (e.g. IP address, browser type, time stamps, pages viewed)
• Device
  and location data (if permitted by your device)

Third-Party Sources:

• Information
  received from platforms like PayPal, Shopify, or Facebook depending on how
  you interact with our services.

We process your personal data for a variety of reasons
connected with your relationship with us. For each purpose we also indicate the
main lawful basis relied upon under the UK GDPR;
in many cases more than one basis will be relevant.

• Accepting
  and fulfilling orders – including picking, packing, despatching,
  shipping, tracking, processing returns and refunds.
  
  Legal bases: contractual necessity; legitimate interests.
• Managing
  user accounts – To operate and maintain customer accounts effectively.
  
  Legal bases: contractual necessity; legitimate interests.
• Providing
  services you request – such as product customisation, customer support
  or after‑sales care.
  
  Legal bases: contractual necessity; legitimate interests.
• Responding
  to your queries, complaints or disputes and establishing, exercising
  or defending legal claims.
  
  Legal bases: legitimate interests; legal obligation; contractual
  necessity.
• Sending
  administrative messages – Such as service updates, product
  notifications, or changes to policies and terms.
  
  Legal bases: contractual necessity; legal obligation; legitimate
  interests.
• Sending
  you direct marketing about our products or services where you have
  requested or consented to receive it.
  
  Legal bases: legitimate interests; consent (for electronic channels
  such as email or SMS).
• Building
  a customer profile so that we can tailor content, offers and
  advertising to your interests on our site and on social‑media platforms.
  
  Legal bases: legitimate interests; consent (for electronic marketing).
• Monitoring
  and managing our on‑going relationship with you, including
  communications and account administration.
  
  Legal bases: legitimate interests.
• Organising
  events, promotions or campaigns (including the use of photographs or
  other content you supply) and managing your participation.
  
  Legal bases: legitimate interests; consent (where we rely on your
  images or user‑generated content).
• Administering
  competitions or prize draws – If you opt to take part in any
  promotions or competitions.
  
  Legal bases: legitimate interests; consent.
• Managing
  our social‑media presence and interactions with you, including
  reposting or featuring your content (with your permission).
  
  Legal bases: legitimate interests; consent.
• Training
  our staff and maintaining service quality.
  
  Legal basis: legitimate interests.
• Performing
  identity, background and fraud‑prevention checks where necessary.
  
  Legal bases: legitimate interests; legal obligation.
• Complying
  with our legal obligations – for example consumer‑protection, tax,
  accounting, health‑and‑safety and data‑protection laws.
  
  Legal basis: legal obligation.
• Keeping
  and maintaining business records relating to our relationship.
  
  Legal bases: contractual necessity; legitimate interests; legal
  obligation.
• Preventing,
  detecting or prosecuting criminal activity and protecting the public.
  
  Legal bases: legitimate interests; legal obligation; public interest.
• Ensuring
  network and information security of our websites, apps and social‑media
  accounts (including monitoring for unauthorised access or malware).
  
  Legal bases: legitimate interests; legal obligation.
• Conducting
  analytics, market and product research to understand trends, improve
  our offering and benchmark against competitors. Where possible, data are
  anonymised or aggregated.
  
  Legal bases: legitimate interests.
• Business
  transfers – Your data may be shared as part of a business acquisition,
  sale, or merger.
  
  Legal bases: legitimate interests; contractual necessity.
• Posting
  testimonials or reviews – We may use personal information you include
  in any product reviews or testimonials on our website.
  
  Legal bases: consent; legitimate interests.

We do not sell your personal data. We only share it
with trusted service providers & parties that we employ or integrate with
may have access to information needed to perform their functions.

We may share data with:

• Shopify
  (store platform)
• Payment
  providers: PayPal, Sage Pay,
  Opayo, Shopify Payments
• Email
  services: Mailchimp, Sendy
• Analytics
  tools: Google Analytics
• Marketing
  platforms: Facebook Ads,
  Google Ads
• Order‑management
  software: Linnworks
• Web
  infrastructure: Cloudflare
• Direct
  mail, Shipping couriers & postal services

You may object to any automated profiling used for targeted
advertising by adjusting cookie settings or contacting us.

Under the UK GDPR, we rely on the following primary legal
bases to process your personal data:

• Contractual
  necessity – where we need to process your data to fulfil a contract
  with you, such as completing an order or providing services you have
  requested.
• Legitimate
  interests – where processing is necessary for our business operations,
  provided your interests and fundamental rights do not override those
  interests. This includes activities like improving our services, managing
  customer relationships, fraud prevention, staff training, and marketing
  (except where consent is required).
• Consent
  – where you have given us clear permission to process your data for a
  specific purpose, such as receiving marketing via email or SMS, or when
  using non-essential cookies.
• Legal
  obligation – where we are required to process your data to comply with
  a legal duty, such as tax, accounting, health and safety, or consumer
  protection laws.
• Public
  interest – in rare cases, where processing is necessary for reasons of
  substantial public interest, such as preventing or detecting criminal
  activity.

Some services (e.g., Shopify, Google, Facebook) may transfer
data outside the UK. In these cases, we ensure that appropriate safeguards
(e.g., adequacy regulations, standard contractual clauses) are in place.

We will keep your information for a necessary time to carry
out the purposes outlined in this privacy policy, the timeframe required by
law or until you request that the Data be deleted. This retention period may be
longer if required or permitted by law. In order to comply with legal,
tax, or regulatory requirements, data may be stored on backup or archival media
once deleted.

You have the right to request a copy of the information that
we hold about you. If you would like a copy of some or all of your personal
information, you may email us at sales@all-green.co.uk.or write to us at:  

All-Green (South West) Ltd, Units 1&2, Common
Lane, Halstock, Yeovil, BA22 9FD, United Kingdom 

We may make a small charge for this service. We want to make
sure that your personal information is accurate and up to date. You may ask us
to correct or remove information you think is inaccurate. If you are an
account holder, you may update information by logging in to your account
settings via www.all-green.co.uk 

If you request to delete your account, we may retain some
information in our files for order management, to prevent fraud, troubleshoot problems,
assist with any investigations or comply with applicable legal
requirements. 

If we are relying on your consent to process your personal
information, you have the right to withdraw your consent at any time. - This
will not affect the use of information that is processed before its
withdrawal. 

Opting out of email marketing: You can unsubscribe from our marketing email list
at any time by clicking on the unsubscribe link in the emails that we send to
you or by contacting us directly. However, we may still communicate with you to
send you service-related emails for the use of your account, to respond to
service requests, or for other non-marketing purposes.  

Your Data Protection Rights

You have the right to:

• Access
  your data
• Correct
  inaccuracies
• Request
  erasure ("right to be forgotten")
• Restrict
  or object to processing
• Request
  data portability
• Withdraw
  consent at any time
• Lodge
  a complaint

To exercise your rights, email:
sales@all-green.co.uk

We use cookies and similar technologies on our website for
the following purposes:

• Remember
  user preferences
  
  To store choices you’ve previously made, such as your preferred language,
  region, or items in your shopping cart. This helps personalise your
  experience and prevents the need to re-enter information on repeat visits.
• Enable
  website functionality
  
  These cookies are essential for the operation of our website. They support
  features such as secure login, page navigation, and access to protected
  areas. Without these, the website may not function correctly.
• Analyse
  site usage
  
  To understand how visitors interact with our website, we use analytics
  tools (e.g., Google Analytics). This helps us identify trends, diagnose
  issues, and improve the performance and content of our website. These
  cookies collect information in an anonymous or aggregated form.
• Personalise
  content and advertising
  
  We may use cookies to deliver content and advertisements that are more
  relevant to your interests, based on your browsing behaviour. These may
  also limit how often you see an ad and help us measure the effectiveness
  of our marketing campaigns.

Non-essential cookies (e.g., those used for analytics
and advertising) are only placed on your device with your explicit consent.
You can control or withdraw your cookie preferences at any time via your
browser settings or you can also use our on-site cookie banner to withdraw or
change consent at any time. If you do leave cookies turned on, please ensure
you sign off when you finish using a shared computer. 

Our services are not intended for children under 13. We do
not knowingly collect data from children. If we discover this has occurred, we
will delete the data immediately.