Privacy Policy
Privacy Policy
Last updated: 29 March 2026
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. If you have any questions, please contact us at friendsofgreatdenham@gmail.com.
1. Who We Are
Friends of Great Denham is operated by Friends of Great Denham of, Friends Of Great Denham
United Kingdom. We are the data controller for the personal information collected through this website, and we process it in accordance with UK GDPR.
2. What Information We Collect
Information you provide to us
- When placing an order: Your name, email address, delivery and billing address, and order details.
- When creating an account: Your name, email address, and a password (stored securely — we never store it in plain text).
- When contacting us: Your name, email address, and the content of your message.
Information collected automatically
We may collect data about how you use our website, such as pages visited, time spent on pages, and the device and browser you use. This helps us improve our website and understand customer behaviour.
Children
We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have done so, we will delete that information promptly.
3. How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Send you order confirmations, dispatch updates, and related communications
- Handle returns, refunds, and complaints
- Manage your account if you have registered with us
- Improve our website and understand how customers use it
- Send marketing communications where you have given consent (you can opt out at any time)
- Comply with our legal obligations
4. Lawful Basis for Processing
We rely on the following legal bases to process your personal data:
- Contract: Processing necessary to fulfil your order and manage your account.
- Consent: For marketing emails — you can withdraw consent at any time by unsubscribing or contacting us.
- Legitimate interests: For website analytics, fraud prevention, and improving our services.
- Legal obligation: Where we are required to process data by law, such as for tax and financial records.
5. Sharing Your Information
We do not sell your personal data. We may share it with third parties only where necessary:
- Service providers: Such as delivery companies, payment processors, and email platforms who help us run our business and fulfil orders.
- Legal requirements: Where required by law or to protect our legal rights.
- Business transfers: If our business is sold or transferred, customer data may form part of that transaction.
We ensure all third-party providers handle your data securely and in line with UK GDPR.
Sub-processors we use
| Name | Service provided | Privacy policy |
|---|---|---|
| freewebstore | eCommerce platform, website hosting, and data storage | freewebstore.com/privacy.html |
6. Cookies
Our website may use cookies — small files stored on your device — to improve your browsing experience and help us understand how visitors use our site. You can control or disable cookies through your browser settings, though this may affect how some parts of the site work.
7. How Long We Keep Your Data
We only keep your personal data for as long as necessary for the purposes described in this policy.
| Data type | Retention period |
|---|---|
| Order and invoice records | 6 years (in line with HMRC requirements) |
| Account information | Until you delete your account or request erasure |
| Newsletter subscriptions | Until you unsubscribe |
| Customer communications | 6 years |
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Ask us to delete your data in certain circumstances.
- Portability: Request your data in a portable, machine-readable format.
- Objection: Object to us processing your data for marketing or on the basis of legitimate interests.
- Restriction: Ask us to limit how we process your data in certain circumstances.
- Withdraw consent: Where we process data based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at friendsofgreatdenham@gmail.com. We may ask you to verify your identity before acting on your request.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. No online system is completely secure, however, and we cannot guarantee absolute security of data transmitted over the internet.
10. Complaints
If you are unhappy with how we have handled your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. Changes to This Policy
We may update this policy from time to time. We will update the date at the top of this page when we do. Your continued use of our website after any changes are posted means you accept the updated policy.
12. Contact Us
Friends of Great Denham
Friends of Great Denham of
Friends Of Great Denham
United Kingdom
Email: friendsofgreatdenham@gmail.com
