Privacy Policy

1. Who we are

Wright Garden is a trading name operated by Harry Wright, sole trader.

For data-protection purposes, Harry Wright is the controller responsible for the personal information described in this Privacy Policy.

2. Information we collect

The information we collect depends on how you interact with Wright Garden.

When you submit a quotation or enquiry, we may collect information such as:

• Your name and contact details.
• Your address, postcode or other location information relevant to the requested work.
• Information about your property or garden.
• Details about the services you are interested in.
• Your requirements, preferences and descriptions of the work you would like carried out.
• Photographs or other files that you choose to submit with your enquiry.
• Other information that you voluntarily provide when communicating with us.

The exact information requested by our quotation form may change over time as we improve the service.

3. Information collected automatically

When you visit our website, certain technical information may be processed as part of operating, securing and improving the website.

This can include:

• IP address or network information.
• Browser and device information.
• Pages requested and website interactions.
• Approximate information about how the website is being accessed.
• Technical logs relating to website security and operation.

Some of this information may be processed by infrastructure and technology providers used to operate the website, including Cloudflare and our hosting provider.

4. How we use your information

We use personal information for purposes including:

• Responding to enquiries.
• Preparing and providing quotations.
• Communicating with you about requested services.
• Providing services where you become a customer.
• Managing our customer and business records.
• Maintaining and securing our website and systems.
• Preventing abuse, fraud, spam and other malicious activity.
• Meeting legal, accounting, tax and regulatory obligations.
• Resolving disputes and establishing, exercising or defending legal claims.
• Improving our website and services.
• Sending marketing communications where you have provided appropriate consent.

5. Our lawful bases

Depending on what we are doing with your information, we rely on different lawful bases under applicable data-protection law.

Enquiries and quotations

When you request a quotation or contact us about our services, we may process your information because it is necessary to respond to your request and, where applicable, take steps at your request before entering into a contract.

Providing services

If you become a customer, we may process information where this is necessary to perform our agreement with you and manage the customer relationship.

Legal obligations

We may process and retain certain information where necessary to comply with legal, accounting, tax or other regulatory obligations.

Legitimate interests

Where appropriate, we may process information where this is necessary for our legitimate business interests, such as maintaining website security, preventing abuse, managing our business and protecting our legal rights.

Where we rely on legitimate interests, we will consider the impact on your rights and interests before processing your information.

Consent

We rely on consent where consent is required or where we choose to use consent as the appropriate lawful basis. This includes optional analytics and marketing activities. You can withdraw consent at any time where we rely on consent.

6. Quotation information and photographs

Information submitted through our quotation system is used to understand your requirements and prepare a quotation.

Photographs submitted with a quotation are stored with the relevant enquiry and are used for the purpose of assessing and preparing the requested quotation.

7. Storage of quotation information

Quotation information, including associated images, is stored on our cloud-hosted server infrastructure.

The information is stored in structured digital files and associated image files.

Access to the server is restricted. At present, administrative server access is controlled by SSH access held by the business operator.

We use Cloudflare infrastructure and a cloud/VPS hosting provider as part of operating and protecting the website.

We also use managed server backup services.

8. How long we keep information

We do not keep personal information indefinitely without a reason.

Quotation and customer information may be retained for as long as reasonably necessary for the purposes for which it was collected, including:

• Managing enquiries and quotations.
• Providing services.
• Maintaining appropriate business records.
• Accounting and tax requirements.
• Dealing with disputes or potential legal claims.
• Establishing, exercising or defending legal rights.

Our intended retention period for relevant business and quotation records is up to seven years where appropriate, particularly where the information forms part of financial, contractual, tax or other records for which a longer retention period may be justified.

Different information may be deleted sooner where there is no continuing business or legal reason to retain it.

9. Who we share information with

We do not sell your personal information.

We may share or allow access to personal information with organisations and individuals where this is necessary to operate the business or provide services.

• Our hosting/cloud infrastructure provider, which provides the server infrastructure on which the website and quotation information are stored.
• Cloudflare, which provides website infrastructure, security, DNS and analytics services.
• Google, where Google services such as Google Analytics are used with your consent.
• Proton, which provides the email service used for [email protected].
• Professional advisers or service providers, such as an accountant, where reasonably necessary.
• People assisting Wright Garden with providing services, where they need access to relevant information to perform their role.

Where another person assists with a customer's work, we will aim to limit the information shared to what is reasonably necessary for them to perform their role.

10. Email

Business email is provided through Proton's email infrastructure. If you contact Wright Garden by email, we may retain your correspondence and contact information for as long as reasonably necessary to respond to you, manage the customer relationship, maintain appropriate records or deal with legal or business requirements.

11. Analytics

We use analytics to understand how visitors use the website and to help us improve the website and quotation process.

We currently use:

• Cloudflare analytics.
• Google Analytics.

Google Analytics is treated as optional analytics.

Google Analytics is only activated after you have actively accepted analytics through our cookie consent mechanism. If you reject analytics, Google Analytics is not loaded by our website.

12. Cookies and similar technologies

Our website uses cookies and similar technologies.

We currently use an analytics_consent cookie to remember whether you have made a choice regarding analytics.

We use this information to ensure that your analytics preference can be respected when you continue using the website.

We may introduce additional cookies or similar technologies as the website develops. If we introduce non-essential technologies that require consent, we will provide appropriate information and obtain consent where required.

You can also control or delete cookies through your browser settings.

13. Marketing

We may offer you the opportunity to receive Wright Garden marketing communications, such as:

• Offers and promotions.
• Wright Garden news.
• Relevant service updates.
• Other occasional business communications.

Marketing will only be sent where we have an appropriate lawful basis to do so.

Where marketing is based on your consent, providing that consent is optional and is separate from submitting a quotation request.

We intend to limit marketing communications to no more than one communication per month.

You can withdraw marketing consent at any time by contacting us or by using an unsubscribe mechanism provided with the relevant communication.

14. International processing

Some of the technology and service providers we use may process information in countries outside the United Kingdom. Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is handled in accordance with applicable data-protection requirements.

15. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Our website uses encrypted HTTPS connections and is operated behind Cloudflare infrastructure, including a Cloudflare Tunnel.

We use security controls including content-security policies and Cloudflare's security and anti-abuse facilities.

Quotation information is stored on restricted server infrastructure, with administrative access controlled separately from ordinary website access.

Managed backup services are also used for our server infrastructure.

No internet-based system can be guaranteed to be completely secure. If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps.

16. Your rights

Depending on the circumstances and the lawful basis involved, you may have rights concerning your personal information, including the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete information where there is no valid reason for us to continue processing it.
• Ask us to restrict certain processing.
• Object to certain processing.
• Withdraw consent where we rely on consent.
• Request portability of information where the relevant legal conditions apply.

These rights are not absolute and may depend on the circumstances and the lawful basis on which we process your information.

17. How to make a privacy request

To ask about your personal information or exercise a data-protection right, contact:

Please provide enough information for us to understand your request and, where necessary, verify your identity. We will respond within the time period required by applicable data-protection law.

18. Complaints

If you have concerns about how Wright Garden has handled your personal information, please contact us first:

We will take reasonable steps to investigate and resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

19. Children's information

Wright Garden's services and quotation process are intended for adults and people acting in connection with a property or service requirement. We do not intentionally collect personal information from children through the quotation process.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. This may happen when our services, website functionality, analytics, cookies, technology providers or data-processing practices change.

We will update the "Last updated" date at the top of this page when changes are made.

We recommend checking this page periodically for the latest version.