Privacy Policy

5. How we share your data 

We may share your data with:  
5.1. Service providers: Such as payment processors, delivery services, and IT support. 
5.2. Legal authorities: If required by law or to protect our rights. 
5.3. Marketing partners:  
We will not: 

• Sell your personal or sensitive data to anyone else, without your specific consent.
• Give any third party direct real-time access to your data. We do not provide access into our system from outside.
• Share tracking IDs or cookies with advertisers, insurance companies, or any other third parties. 

6. Cookies and tracking technologies 

6.1. We track user actions within our website and engage in anonymous statistical analysis to improve your experience, both via our website and in our app.  
6.2. You can manage your cookie preferences via your browser settings. 
 
For more information on how we use cookies, please review our Cookie Policy here. 
 

7. Your rights under GDPR 

There are a number of inherent rights you have as a user of our site through GDPR. These include: 
7.1. Access: Request a copy of the personal data we hold about you. 
7.2. Rectification: Correct inaccurate or incomplete data. 
7.3. Erasure: Request deletion of your data where applicable. 
7.4. Restriction: Limit the processing of your data. 
7.5. Portability: Obtain a copy of your data in a portable format. 
7.6. Objection: Object to processing based on legitimate interests or direct marketing. 
7.7. Withdraw Consent: At any time for data processed with your consent. 
 
To exercise your rights, please contact us at dpo@evergreenwell.co.uk 
 
We usually act on requests and provide information free of charge but may charge a reasonable fee to cover our administrative costs of providing the information for baseless or excessive/repeated requests or further copies of the same information. 

Alternatively, we may be entitled to refuse to act on the request. 

Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will come back to you and let you know. 

8. How we protect your data 

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including: 
8.1. Encrypted data storage. 
8.2. Secure payment processing. 
8.3. Regular system monitoring and updates. 

9. Data retention 

We will retain information on any active customers until either the customer is no longer active, or the site is no longer active. Personal data (such as your name or address) and the store's data are purged 2 years after it becomes inactive (frozen, closed). Non-personal data (such as financial information) is retained. 

If you wish to make a request to have your data removed from our servers, please contact us via hello@evergreenwell.co.uk. 

10. International data transfers 

Where data is transferred outside the UK, we ensure it is protected through adequate safeguards, such as Standard Contractual Clauses. 

11. Updates to this privacy policy 

We may update this policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on our website, and where significant, we will notify you directly.