Last updated: May 2026

RaisedGardenBed ("we", "us", "our") is committed to protecting your privacy 
and handling your personal data in a transparent, responsible manner in 
accordance with the UK General Data Protection Regulation (UK GDPR) and 
the Data Protection Act 2018.

1. WHO WE ARE
Our website is raisedgardenbed.co.uk. For any privacy-related questions, 
contact us at info@raisedgardenbed.co.uk.

2. DATA WE COLLECT
When you place an order or contact us, we may collect:
- Full name and delivery address
- Email address and phone number
- Payment information (processed securely by Shopify Payments — 
  we never store your full card details)
- IP address and browsing behaviour on our website (via cookies)

3. HOW WE USE YOUR DATA
We use your personal data to:
- Process, fulfil and deliver your order
- Send order confirmation, dispatch notification and tracking information
- Respond to customer service enquiries
- Comply with our legal obligations
- Improve our website and customer experience (anonymised analytics only)

4. LEGAL BASIS FOR PROCESSING
We process your data on the following legal bases:
- Contract: to fulfil your order
- Legal obligation: to comply with UK law (e.g. tax records)
- Legitimate interest: to improve our service and prevent fraud

5. DATA SHARING
We do not sell your personal data. We may share it with:
- Shopify Inc. (our e-commerce platform provider)
- Payment processors (Shopify Payments, Stripe)
- Delivery couriers (solely to fulfil your order)

All third parties are required to handle your data securely and in 
compliance with applicable data protection law.

6. DATA RETENTION
We retain your personal data for as long as necessary to fulfil the 
purposes outlined above, and in accordance with our legal obligations 
(typically 6 years for financial records under UK law).

7. YOUR RIGHTS
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Request a portable copy of your data

To exercise any of these rights, contact us at info@raisedgardenbed.co.uk. 
We will respond within 30 days. You also have the right to lodge a complaint 
with the Information Commissioner's Office (ICO) at ico.org.uk.

8. COOKIES
Our website uses cookies to enhance your browsing experience and analyse 
site traffic. You can control cookie settings through your browser. 
For more information, see our Cookie Policy.

9. SECURITY
We implement appropriate technical and organisational measures to protect 
your personal data against unauthorised access, loss or disclosure. 
All data is transmitted via SSL encryption.

10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Any changes will be 
posted on this page with an updated date.