Privacy Policy

Generated privacy notice – general business

You can download a Word or ODT version of this generated privacy notice by clicking “Download options” at the top of the page. Alternatively, you can copy and paste it. Both options will allow you to add your own branding or extra text to your new privacy notice, or personalise it by adding your own branding or logo. Remember – you must make sure the content is accurate and complete.

 

Please make sure you delete the green, orange and red instruction boxes before you publish your privacy notice.

You said you collect or use personal information about children, or you weren’t sure. If your products or services are likely to be accessed by people under the age of 18 you must make sure the way you present it is suitable for those children and can be understood by them. This could include using bite-sized information, diagrams, logos, videos or interactive content that will attract and interest children. For more information, see our guidance on designing data transparency for children. Please note, if you’re providing any online services, you must also consider the ICO Children’s Code.

Wildlife Garden Shop customer privacy notice

Registered name: Wild Gardeners Nature Recovery Ltd

This privacy notice tells you what to expect us to do with your personal information.

  •   Contact details
  •   What information we collect, use, and why
  •   Lawful bases and data protection rights
  •   Where we get personal information from
  •   How long we keep information
  •   How to complain

Contact details

Email

sales@wildlifegardenshop.co.uk

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  •   Names and contact details
  •   Addresses
  •   Purchase or account history
  •   Payment details (including card or bank information for transfers and direct debits)
  •   Account information
  •   Website user information (including user journeys and cookie tracking)
  •   Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts and guarantees:

  •   Names and contact details
  •   Addresses
  •   Payment details (including card or bank information for transfers and direct debits)
  •   Purchase history
  •   Account information, including registration details
  •   Information used for security purposes
  •   Marketing preferences

We collect or use the following information for service updates or marketing purposes:

  •   Names and contact details
  •   Addresses
  •   Marketing preferences
  •   Location data
  •   Purchase or viewing history
  •   Website and app user journey information
  •   Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

  •   Name
  •   Contact information
  •   Financial transaction information

We collect or use the following personal information for dealing with queries, complaints or claims:

  •   Names and contact details
  •   Address
  •   Payment details
  •   Account information
  •   Purchase or service history
  •   Customer or client accounts and records
  •   Financial transaction information

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

  •   Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  •   Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  •   Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

  •   Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  •   Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  •   Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  •   Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  •   Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  •   Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for legal requirements are:

  •   Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  •   Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  •   Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  •   Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  •   Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  •   Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Where we get personal information from

  •   Directly from you

Here is a clean, copy-and-paste version of the retention schedule table, formatted specifically for a customer-facing privacy policy.

How Long We Keep Your Personal Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Category of Data

What it Includes

Retention Period

Why We Keep It

Customer Account Data

Name, billing/delivery addresses, email, phone number, and purchase history.

6 years after your last purchase or account interaction.

To manage your account, handle product warranties, and resolve any consumer disputes.

Transaction & Financial Data

Order details and payment summaries. Note: We do not store your credit/debit card details; these are securely handled by our third-party payment processors.

6 years from the end of the financial year of the transaction.

To comply with UK tax (HMRC) and accounting laws.

Marketing Communications

Your email address and marketing preferences.

Until you unsubscribe or withdraw your consent.

We send marketing only with your consent. You can opt-out at any time via the unsubscribe link in our emails.

Customer Support & Enquiries

Emails, contact form submissions, and messages regarding order updates or returns.

1 year after your query is fully resolved.

To provide efficient customer service and refer back to recent issues if you contact us again.

Website & Analytical Data

IP addresses, cookie identifiers, and technical browsing data.

In line with our Cookie Policy (typically ranging from session-only to 2 years depending on the cookie type).

To maintain website security, prevent fraud, and understand how visitors use our store.

Here is the copy-and-paste text for your delivery couriers, payment gateways, and international data transfers sections, formatted perfectly for your privacy policy.

How We Share Your Personal Data

We share your personal data with trusted third-party service providers to help us run our shop, process your orders, and deliver your purchases.

  • Delivery Couriers & Logistics: We share your name, delivery address, email, and phone number with our delivery partners (such as Royal Mail, DPD, Evri, or DHL) so they can transport your items and provide you with shipping updates.
  • Payment Gateways: All financial transactions are processed securely through our third-party payment providers (such as Shopify Payments, Stripe, or PayPal). We share your transaction data with them to securely process your payment, prevent fraud, and handle refunds. Your full card details are encrypted and handled directly by these providers; we never store your payment card details on our servers.
  • Other Essential Services: We may also share minimal data with our e-commerce platform host, email marketing software, and customer support tools to manage your order from checkout to delivery.

International Data Transfers

As a UK-based online shop, we prioritize keeping your data secure. However, some of our third-party service providers (such as e-commerce platforms, payment processors, or analytics tools) may operate or store data outside the UK or the European Economic Area (EEA), including in countries like the United States.

Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
  • Where we use certain service providers, we may use specific approved contracts, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs), which give personal data the same protection it has in the UK.

Here is the copy-and-paste text for the Your Legal Rights section. This language is written to meet UK GDPR requirements while remaining easy for your customers to understand.

Your Legal Rights

Under UK data protection laws, you have specific rights regarding your personal data. You can exercise any of these rights at any time by contacting us using the details provided at the bottom of this policy.

  • Right of Access (Subject Access Request): You have the right to request a copy of the personal data we hold about you, along with information on how we use it.
  • Right to Rectification: You can ask us to correct or update any inaccurate or incomplete personal information we hold about you.
  • Right to Erasure (‘Right to be Forgotten’): You can request that we delete your personal data from our systems. Please note that we may not always be able to comply if we are legally required to keep the data (for example, for tax or accounting records).
  • Right to Restrict Processing: You have the right to ask us to temporarily suspend processing your data, such as while we verify its accuracy or look into a dispute.
  • Right to Data Portability: You can request that we transfer your personal data to you or directly to another service provider in a structured, commonly used electronic format.
  • Right to Object: You have the absolute right to object to us using your data for direct marketing. You can opt-out at any time using the unsubscribe link in our emails.
  • Right to Withdraw Consent: Where we rely on your consent to process your data (such as for marketing newsletters), you can withdraw that consent at any time.

No Fee Required: You will not have to pay a fee to access your personal data or to exercise any of your other rights.

Time Limit: We aim to respond to all legitimate requests within one calendar month. If your request is particularly complex, it may take longer, but we will keep you fully updated.



How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
 Wycliffe House
 Water Lane
 Wilmslow
 Cheshire
 SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

 

Last updated: 5th June 2026