Privacy policy

Privacy Policy: Go To Garden

At Go To Garden, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: RH Dedicated Sales and Marketing, trading as Go To Garden 📧 gtgarden@rhdedicatedsales.uk 📞 +44 (0)7790 896074

1. What Data We Collect When you use our website or place an order, we may collect:

  • Identity data — name, username or similar
  • Contact data — email address, phone number, delivery address
  • Transaction data — details of products purchased and payments made
  • Technical data — IP address, browser type, device information, cookies
  • Communications data — emails or messages you send us

We do not collect or store full payment card details. Payments are processed securely by Shopify Payments.

2. How We Collect Your Data We collect data when you:

  • Create an account or place an order on our website
  • Contact us by email or phone
  • Subscribe to our newsletter or marketing communications
  • Browse our website (via cookies and analytics tools)

3. How We Use Your Data We use your personal data to:

  • Process and fulfil your orders, including passing necessary details to our suppliers and couriers for direct dispatch
  • Send order confirmations, dispatch notifications, and delivery updates
  • Respond to your enquiries and provide customer support
  • Comply with our legal obligations (e.g. VAT records, fraud prevention)
  • Improve our website and customer experience
  • Send marketing communications, where you have given consent

Our lawful bases for processing are:

  • Contract — processing your order
  • Legal obligation — tax and regulatory compliance
  • Legitimate interests — fraud prevention, improving our service
  • Consent — marketing emails (you can withdraw consent at any time)

4. Who We Share Your Data With We only share your data with trusted third parties where necessary:

  • Shopify — our e-commerce platform (data may be processed outside the UK; Shopify maintains appropriate safeguards)
  • Specialist suppliers — for direct dispatch of your order (name and delivery address only)
  • Couriers & delivery partners — to fulfil and track your delivery
  • Payment processors — Shopify Payments for secure transaction processing
  • HMRC — where required by law

We do not sell your personal data to any third party.

5. Cookies Our website uses cookies to improve your browsing experience and analyse site traffic. These include:

  • Essential cookies — required for the website to function
  • Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics)
  • Marketing cookies — used to deliver relevant advertising, where consent is given

You can manage your cookie preferences via the cookie banner on our website or through your browser settings.

6. Data Retention We retain your personal data only for as long as necessary:

  • Order records — 7 years (HMRC legal requirement)
  • Customer accounts — for the duration of your account plus 2 years
  • Marketing consent — until you withdraw consent
  • Enquiry records — 2 years from last contact

7. Your Rights Under UK GDPR, you have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a portable format
  • Object — object to processing based on legitimate interests or for marketing
  • Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us at gtgarden@rhdedicatedsales.uk. We will respond within 30 days.

8. Marketing Communications We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

9. Data Security We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Shopify's secure, encrypted platform.

10. Third-Party Links Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

11. Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: April 2026

12. Complaints If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): 🌐 www.ico.org.uk 📞 0303 123 1113