Privacy Policy
This Privacy Policy provides details about data collected on this website
Privacy Policy

Introduction
Shrub & Stone Gardeners is a trading name of S&S Gardeners Limited, company number 16103681. The following Privacy Policy sets out the basis upon which Personal Information is collected, used, stored and protected in connection with use of the Shrub & Stone Gardeners website.

Definitions
In this Privacy Policy:
“The Company” means Shrub & Stone Gardeners, being the trading name of S&S Gardeners Limited.
“Cookies” means small text files stored on a device when visiting the Website.
“Personal Information” or “Personal Data” means any information relating to an identified or identifiable natural person.
“Services” means the gardening services agreed to be provided by the Company.
“The Website” means the Shrub & Stone Gardeners website and any associated webpages, subdomains or online services operated by the Company.
In this Privacy Policy:
“The Company” means Shrub & Stone Gardeners, being the trading name of S&S Gardeners Limited.
“Cookies” means small text files stored on a device when visiting the Website.
“Personal Information” or “Personal Data” means any information relating to an identified or identifiable natural person.
“Services” means the gardening services agreed to be provided by the Company.
“The Website” means the Shrub & Stone Gardeners website and any associated webpages, subdomains or online services operated by the Company.

Information Collected
The Company may collect, store, use and process the following categories of Personal Information:
(a) information relating to use of the Website, including IP address, geographical location, browser type and version, operating system, referral source, device information, length of visit, page views and Website navigation activity;
(b) information relating to enquiries, requests, quotations, purchases, transactions or Services carried out between you and the Company, including information submitted through contact forms or other communications;
(c) information provided for the purpose of requesting quotations, proposals, updates, callbacks or further information relating to the Services;
(d) information provided for the purpose of subscribing to newsletters, marketing communications, email notifications or other Website services;
(e) records of communications between you and the Company, including email correspondence, telephone enquiries and messages submitted through the Website; and
(f) any other Personal Information voluntarily submitted to the Company.
The Website is not intended for use by children and the Company does not knowingly collect Personal Information from children. If the Company becomes aware that Personal Information has been collected from a child in circumstances where consent from a parent or guardian was required, the Company will take reasonable steps to delete such information where required by applicable law.

Cookies
Cookies are small text files stored on a device when the Website is accessed through a web browser. Cookies allow the Website to recognise a device, improve functionality, analyse Website usage and support security, performance and advertising activities.
The Company uses both session cookies and persistent cookies on the Website. Session cookies are temporary and are deleted when the browser is closed. Persistent cookies remain stored on a device until deleted or until they reach a specified expiry date.
The Website uses analytics and tracking technologies, including Google Analytics and Google Ads conversion tracking, to analyse Website traffic, understand user interactions, measure advertising performance and improve Website functionality, content and user experience. These services may collect information including IP address, browser type, device information, Website activity, page interactions, session duration and navigation behaviour through the use of cookies and similar technologies.
The Website may also use Google advertising features, including remarketing and interest-based advertising, which may display advertisements based on previous visits to the Website or other websites. Google may use cookies, including advertising cookies, to provide and measure advertisements and related services.
The Website uses Google reCAPTCHA to help protect forms, enquiries and the Website from spam, automated abuse and malicious activity. reCAPTCHA may analyse hardware and software information, device data and user interactions to determine whether use of the Website is by a human visitor. Information collected by reCAPTCHA is processed in accordance with Google’s privacy policy and terms of service.
Further information regarding how Google processes data may be found at: https://policies.google.com/privacy
Cookies may be controlled, restricted or deleted through browser settings and, where applicable, through the Website’s cookie preference tools. Blocking or disabling certain cookies may affect the functionality, performance or usability of the Website.
Non-essential cookies, including analytics, advertising and tracking cookies, are only used where consent has been provided through the Website’s cookie controls, except where otherwise permitted by applicable law.
Cookies are small text files stored on a device when the Website is accessed through a web browser. Cookies allow the Website to recognise a device, improve functionality, analyse Website usage and support security, performance and advertising activities.
The Company uses both session cookies and persistent cookies on the Website. Session cookies are temporary and are deleted when the browser is closed. Persistent cookies remain stored on a device until deleted or until they reach a specified expiry date.
The Website uses analytics and tracking technologies, including Google Analytics and Google Ads conversion tracking, to analyse Website traffic, understand user interactions, measure advertising performance and improve Website functionality, content and user experience. These services may collect information including IP address, browser type, device information, Website activity, page interactions, session duration and navigation behaviour through the use of cookies and similar technologies.
The Website may also use Google advertising features, including remarketing and interest-based advertising, which may display advertisements based on previous visits to the Website or other websites. Google may use cookies, including advertising cookies, to provide and measure advertisements and related services.
The Website uses Google reCAPTCHA to help protect forms, enquiries and the Website from spam, automated abuse and malicious activity. reCAPTCHA may analyse hardware and software information, device data and user interactions to determine whether use of the Website is by a human visitor. Information collected by reCAPTCHA is processed in accordance with Google’s privacy policy and terms of service.
Further information regarding how Google processes data may be found at: https://policies.google.com/privacy
Cookies may be controlled, restricted or deleted through browser settings and, where applicable, through the Website’s cookie preference tools. Blocking or disabling certain cookies may affect the functionality, performance or usability of the Website.
Non-essential cookies, including analytics, advertising and tracking cookies, are only used where consent has been provided through the Website’s cookie controls, except where otherwise permitted by applicable law.

Personal Information
Personal Information submitted through the Website is used for the purposes described in this Privacy Policy and, where applicable, in relevant parts of the Website.
The Company may collect, use and process Personal Information for the following purposes:
(a) administering, operating, maintaining and improving the Website;
(b) personalising and enhancing the user experience and Website functionality;
(c) enabling access to and use of services, features or functionality available through the Website;
(d) responding to enquiries, providing quotations, arranging visits and supplying Services requested from the Company;
(e) communicating with users in relation to enquiries, appointments, quotations, Services, customer support or other service-related matters;
(f) issuing quotations, statements and invoices, collecting payments and maintaining financial and business records where applicable;
(g) sending administrative, operational or service-related communications necessary for the performance of a contract or to respond to enquiries;
(h) sending newsletters, updates, marketing communications or promotional materials relating to the Company’s services where consent has been provided or where otherwise permitted by applicable law;
(i) monitoring, analysing and improving Website performance, user interactions, marketing effectiveness and business operations through analytics and tracking technologies;
(j) maintaining Website security, preventing fraud, spam, malicious activity or unauthorised access and protecting the Website, systems and users; and
(k) dealing with enquiries, complaints, disputes or legal matters relating to the Website or the Services.
Where Personal Information is submitted for publication on the Website, such information may be published and otherwise used in accordance with the permissions granted by the individual submitting the information.
The Company does not sell Personal Information to third parties and does not disclose Personal Information to third parties for their direct marketing purposes without express consent.
Personal Information is processed on the following lawful bases under UK data protection law:
(a) Contract: where processing is necessary to provide Services, respond to enquiries, supply quotations or perform contractual obligations.
(b) Legal Obligation: where processing is necessary to comply with legal, regulatory, accounting, taxation or compliance requirements.
(c) Legitimate Interests: where processing is reasonably necessary for operating, managing, improving and securing the Website, Services and business operations, provided such interests are not overridden by individual rights and freedoms.
(d) Consent: where consent has been provided for specific processing activities, including marketing communications, analytics, advertising cookies and other non-essential tracking technologies.

Disclosures
Personal Information may be disclosed to employees, officers, contractors, agents, suppliers, professional advisers, service providers or subcontractors where reasonably necessary for the purposes set out in this Privacy Policy, including operation of the Website, provision of the Services, business administration, marketing, analytics, payment processing, hosting, technical support and security.
The Company may also disclose Personal Information:
(a) where required or permitted by applicable law, regulation or legal process;
(b) in connection with actual or prospective legal proceedings, claims, disputes or investigations;
(c) where reasonably necessary to establish, exercise or defend legal rights, enforce agreements or prevent fraud, security incidents or unlawful activity;
(d) to insurers, legal advisers, accountants, auditors or other professional advisers where reasonably necessary for business, legal or regulatory purposes;
(e) to a purchaser, prospective purchaser, investor or successor in connection with the sale, transfer, restructuring or acquisition of all or part of the business or assets of the Company; or
(f) where disclosure is reasonably requested or required by a court, regulatory authority, law enforcement authority or other competent authority.
The Website and the Company may use third-party providers and platforms, including analytics providers, advertising services, hosting providers, communication providers, customer management systems and security services, which may process Personal Information on behalf of the Company in accordance with their own privacy policies and applicable data protection laws.
Except as expressly provided in this Privacy Policy, the Company does not sell Personal Information and does not disclose Personal Information to third parties for their own direct marketing purposes without express consent.

Data Transfers
Data Transfers
Personal Information may be stored, processed and transferred in countries in which the Company, its service providers or its third-party systems operate.
The Company may use third-party providers and platforms, including hosting providers, analytics services, advertising platforms, customer communication systems, cloud storage providers and technical support services, some of which may process Personal Information outside the United Kingdom.
Where Personal Information is transferred outside the United Kingdom, the Company will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable UK data protection law. Such safeguards may include reliance on adequacy regulations, international data transfer agreements, standard contractual clauses or other legally recognised transfer mechanisms.
By submitting Personal Information and using the Website, you acknowledge that certain third-party providers used by the Company may process or store information in jurisdictions outside the United Kingdom where data protection laws may differ from those in the United Kingdom.
Personal Information submitted for publication, reviews, testimonials or other public areas of the Website may be accessible worldwide through the internet. The Company cannot control or prevent the use, misuse, copying or further distribution of publicly available information by third parties.
Personal Information may be stored, processed and transferred in countries in which the Company, its service providers or its third-party systems operate.
The Company may use third-party providers and platforms, including hosting providers, analytics services, advertising platforms, customer communication systems, cloud storage providers and technical support services, some of which may process Personal Information outside the United Kingdom.
Where Personal Information is transferred outside the United Kingdom, the Company will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable UK data protection law. Such safeguards may include reliance on adequacy regulations, international data transfer agreements, standard contractual clauses or other legally recognised transfer mechanisms.
By submitting Personal Information and using the Website, you acknowledge that certain third-party providers used by the Company may process or store information in jurisdictions outside the United Kingdom where data protection laws may differ from those in the United Kingdom.
Personal Information submitted for publication, reviews, testimonials or other public areas of the Website may be accessible worldwide through the internet. The Company cannot control or prevent the use, misuse, copying or further distribution of publicly available information by third parties.

Information Security
The Company takes reasonable technical, organisational and security measures to protect Personal Information against accidental or unlawful destruction, loss, misuse, alteration, unauthorised disclosure, unauthorised access or other unlawful processing.
Personal Information may be stored on secure servers, cloud-based systems or third-party platforms protected by appropriate technical and organisational safeguards, including access controls, authentication measures, encryption technologies, firewall protection and restricted administrative access where reasonably appropriate.
Electronic transactions and transmission of data through the Website are protected using SSL or similar encryption technology where applicable.
The Company also uses reasonable security measures designed to protect the Website, forms, systems and services from spam, malicious activity, automated abuse, unauthorised access and security threats, including the use of third-party security and verification services such as Google reCAPTCHA.
While the Company takes reasonable steps to protect Personal Information, transmission of information over the internet is inherently insecure and no method of electronic transmission, storage or security can be guaranteed to be completely secure.
Where login credentials, passwords or account access details are used, users are responsible for maintaining their confidentiality and security. The Company will never request passwords outside of authorised login or authentication processes.
The Company takes reasonable technical, organisational and security measures to protect Personal Information against accidental or unlawful destruction, loss, misuse, alteration, unauthorised disclosure, unauthorised access or other unlawful processing.
Personal Information may be stored on secure servers, cloud-based systems or third-party platforms protected by appropriate technical and organisational safeguards, including access controls, authentication measures, encryption technologies, firewall protection and restricted administrative access where reasonably appropriate.
Electronic transactions and transmission of data through the Website are protected using SSL or similar encryption technology where applicable.
The Company also uses reasonable security measures designed to protect the Website, forms, systems and services from spam, malicious activity, automated abuse, unauthorised access and security threats, including the use of third-party security and verification services such as Google reCAPTCHA.
While the Company takes reasonable steps to protect Personal Information, transmission of information over the internet is inherently insecure and no method of electronic transmission, storage or security can be guaranteed to be completely secure.
Where login credentials, passwords or account access details are used, users are responsible for maintaining their confidentiality and security. The Company will never request passwords outside of authorised login or authentication processes.

Data Retention
Personal Information is retained only for as long as reasonably necessary for the purposes for which it was collected and processed, including compliance with legal, regulatory, accounting, taxation, insurance, dispute resolution and reporting requirements.
Retention periods may vary depending on the nature of the information, the purpose for which it was collected, legal obligations and the Company’s legitimate business requirements.
In general:
(a) enquiry, quotation and correspondence records may be retained for a reasonable period in order to manage communications, respond to enquiries, maintain business records and deal with follow-up matters;
(b) client, contractual, transactional, invoicing and payment records may be retained in accordance with legal, taxation, regulatory, accounting and insurance obligations;
(c) Website usage data, analytics information and technical logs may be retained for security, analytics, operational and performance monitoring purposes for a reasonable period;
(d) marketing preferences and marketing-related Personal Information may be retained until consent is withdrawn, an unsubscribe request is made or the information is no longer required for the relevant purpose; and
(e) information relating to complaints, disputes, legal matters or enforcement activity may be retained for as long as reasonably necessary to establish, exercise or defend legal rights.
Where Personal Information is no longer required, the Company will take reasonable steps to securely delete, anonymise or otherwise dispose of the information in accordance with applicable law and reasonable data retention practices.

Your Rights
Under applicable UK data protection law, you may have the following rights in relation to your Personal Information:
(a) the right to request access to Personal Information held by the Company;
(b) the right to request correction of inaccurate, incomplete or outdated Personal Information;
(c) the right to request erasure of Personal Information in certain circumstances;
(d) the right to request restriction or suspension of processing in certain circumstances;
(e) the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes;
(f) the right to request transfer of Personal Information to another organisation or directly to you, where technically feasible and applicable;
(g) the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
(h) the right not to be subject to certain automated decision-making or profiling where applicable under law.
Requests relating to Personal Information may be submitted using the contact details published on the Website.
The Company may require reasonable evidence of identity before responding to any request relating to Personal Information in order to protect privacy and security.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. Further information is available at: https://ico.org.uk/
Under applicable UK data protection law, you may have the following rights in relation to your Personal Information:
(a) the right to request access to Personal Information held by the Company;
(b) the right to request correction of inaccurate, incomplete or outdated Personal Information;
(c) the right to request erasure of Personal Information in certain circumstances;
(d) the right to request restriction or suspension of processing in certain circumstances;
(e) the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes;
(f) the right to request transfer of Personal Information to another organisation or directly to you, where technically feasible and applicable;
(g) the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
(h) the right not to be subject to certain automated decision-making or profiling where applicable under law.
Requests relating to Personal Information may be submitted using the contact details published on the Website.
The Company may require reasonable evidence of identity before responding to any request relating to Personal Information in order to protect privacy and security.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. Further information is available at: https://ico.org.uk/

Third-Party Websites
The Website may contain links to third-party websites, platforms, services, embedded content or external resources. Such links are provided for convenience and informational purposes only and do not constitute approval, endorsement or recommendation by the Company.
The Company has no control over and accepts no responsibility or liability for the privacy practices, policies, content, availability, security or operation of any third-party websites or services.
Access to and use of third-party websites or services is entirely at the user’s own risk. Users should review the applicable privacy policies and terms of any third-party websites or services before submitting Personal Information or using those websites or services.
The Website may contain links to third-party websites, platforms, services, embedded content or external resources. Such links are provided for convenience and informational purposes only and do not constitute approval, endorsement or recommendation by the Company.
The Company has no control over and accepts no responsibility or liability for the privacy practices, policies, content, availability, security or operation of any third-party websites or services.
Access to and use of third-party websites or services is entirely at the user’s own risk. Users should review the applicable privacy policies and terms of any third-party websites or services before submitting Personal Information or using those websites or services.

Updating Information
The Company aims to ensure that Personal Information held is accurate, complete and up to date. Users should notify the Company as soon as reasonably practicable if any Personal Information held by the Company requires correction, updating or amendment.
Where appropriate, the Company may take reasonable steps to verify updated information before making changes to its records.
The Company aims to ensure that Personal Information held is accurate, complete and up to date. Users should notify the Company as soon as reasonably practicable if any Personal Information held by the Company requires correction, updating or amendment.
Where appropriate, the Company may take reasonable steps to verify updated information before making changes to its records.

Contact
If you have any questions regarding this Privacy Policy, the handling of Personal Information or the Company’s data protection practices, please contact the Company using the contact details published on the Website or through the Website contact form.
If you have any questions regarding this Privacy Policy, the handling of Personal Information or the Company’s data protection practices, please contact the Company using the contact details published on the Website or through the Website contact form.

Policy Updates
The Company may update this Privacy Policy from time to time. Any revised version will take effect from the date it is published on the Website unless otherwise stated. Users are responsible for reviewing this Privacy Policy periodically to remain aware of the current version.
The Company may update this Privacy Policy from time to time. Any revised version will take effect from the date it is published on the Website unless otherwise stated. Users are responsible for reviewing this Privacy Policy periodically to remain aware of the current version.

Data Controller
For the purposes of applicable UK data protection law, the Company is the data controller responsible for Personal Information collected through the Website.
