top of page

Privacy Policy

​Effective Date: 03 - August - 2025
Last Updated: 03 - August - 2025
Business Name: Marshall's Garden
Website: www.marshallsgarden-jamsandpreserves.co.uk
Data Controller Contact: marshallsgarden25@gmail.com

This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

​

1. What Personal Data We Collect

 

We may collect and process the following categories of personal data:

a. Information You Provide Directly:

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment details (processed securely through third-party providers)

  • Any messages or inquiries you send us

b. Information We Collect Automatically:

  • IP address

  • Device type

  • Browser type and version

  • Pages visited and time spent

  • Cookies and usage data (see Section 6)

 

2. Legal Basis for Processing

 

We process your personal data under the following legal bases:

  • Contractual necessity: To fulfil orders and deliver products

  • Consent: For marketing communications and optional cookies

  • Legal obligation: For tax, accounting, or regulatory purposes

  • Legitimate interests: To improve our services, prevent fraud, and analyse website performance

 

3. How We Use Your Personal Data

 

We use your personal data to:

  • Process and ship your orders

  • Communicate with you about orders or inquiries

  • Send updates, promotions, or newsletters (if you consent)

  • Improve website functionality and user experience

  • Meet legal or tax obligations

 

4. Sharing and Disclosure

 

We may share your data with trusted third-party service providers for:

  • Payment processing (e.g., PayPal)

  • Order fulfilment and shipping

  • Email marketing (only if you opt in)

  • Analytics and website performance (e.g., Google Analytics)

These third parties act as data processors and are bound by contractual obligations to safeguard your information.

​

5. Data Transfers Outside the EU

 

If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • The recipient country has an adequacy decision by the European Commission

  • Use of Standard Contractual Clauses (SCCs)

  • Data processing agreements that include GDPR-compliant terms

 

6. Cookies

 

Our website uses cookies to enhance your browsing experience. You will be asked to consent to non-essential cookies when visiting the site.

Types of cookies used:

  • Essential cookies: Required for core functionality like checkout

  • Analytics cookies: To understand how visitors use our website

  • Marketing cookies: For tailored promotions (only if you consent)

You can manage your cookie preferences through your browser settings or via the cookie banner.

​

7. Data Retention

 

We retain personal data only for as long as necessary:

  • For order fulfilment and related obligations

  • For record-keeping and legal compliance

  • For marketing communications (until you unsubscribe or withdraw consent)

Afterwards, your data is securely deleted or anonymised.

​

8. Your Rights Under the GDPR

 

You have the following rights regarding your personal data:

  • Right to access – You can request copies of your personal data.

  • Right to rectification – You can request correction of inaccurate or incomplete data.

  • Right to erasure (right to be forgotten) – You can request deletion of your data.

  • Right to restrict processing – You can request limits on how we use your data.

  • Right to object – You can object to data processing under certain conditions.

  • Right to data portability – You can request your data in a structured format.

  • Right to withdraw consent – You can opt out of marketing at any time.

To exercise any of these rights, contact us at [Insert Email Address]. We may require verification of your identity.

​

9. Data Security

 

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL encryption for all website transactions

  • Secure third-party payment processors

  • Access controls and employee training

However, no system is 100% secure, and we cannot guarantee absolute security.

​

10. Complaints

I

f you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (DPA).

​

11. Changes to This Policy

 

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and material changes will be communicated to you by email or website notice.

​

12. Contact Us

 

For questions about this policy or your personal data:

Marshall's Garden
Email: marshallsgarden25@gmail.com
Address: 1B Oxford Street Burton-on-Trent DE14 3PG
Phone: 07472864487

bottom of page