Privacy policy.
1. Introduction Stark Strand Garden Design Ltd ("we", "us", or "our") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
This policy applies when you visit our website, contact us, or work with us as a client, supplier, or collaborator.
We act as the data controller for the personal information we collect and use.
2. Contact Details Email: enquiries@starkstrand.co.uk
If you have any questions about this policy or how your data is handled, please contact us via email.
3. What Information We Collect and How We Use It We may collect and process the following personal information:
Client enquiries design projects, and contracts: Name, address, email, phone number, project details, correspondence. This is necessary to perform our services under contract.
Accounts and payments: Bank details, invoices, and payment history. Collected for legal and contractual purposes.
Updates, newsletters, and marketing: Name, email, marketing preferences. Collected with your consent.
Business records and legal compliance: Contact and financial information. Collected to comply with legal obligations.
Queries, feedback, and complaints: Name, email, correspondence. Processed based on legitimate interests or contract.
Project features on website or social media: Photographs and project details. Collected with your consent.
We only collect the information necessary for the purposes above.
4. How We Collect Your Information Directly from you – through emails, forms, or meetings.
From suppliers, contractors, or partners – when working collaboratively on a project.
Visitors to Our Website and Social Media Platforms: When you visit our website or social media pages (such as Instagram), we may collect limited information through platform analytics. This may include data such as the number of visits, general location, and engagement levels.
We use this information to understand audience interests and improve our services and communications. We do not access or store personal data from these analytics, and any data processed is anonymised.
If we feature your project or images on our social media or website, we will only do so with your consent.
Cookies and Tracking: Our website may use cookies and similar technologies to improve user experience and gather anonymised analytics. Non-essential cookies will only be used if you provide your consent via our cookie banner. You can manage your cookie preferences at any time.
5. Data Retention We retain your personal information only for as long as necessary for the purposes we collected it, including to satisfy legal, accounting, or reporting requirements.
Typical retention periods: Client records: up to 7 years after project completion. Marketing contacts: until you withdraw consent or unsubscribe. Enquiry correspondence: up to 2 years after your last interaction.
After these periods, your data is securely deleted or anonymised.
6. Who We Share Your Information With We never sell your personal information. We may share data only when necessary with: - Professional advisers (e.g., accountants, legal advisors) - Subcontractors, suppliers, or delivery partners directly involved in your project - IT and cloud service providers (e.g., secure email, file storage, website hosting) - Regulatory or legal authorities, where required by law.
All third-party service providers must respect confidentiality and process data in accordance with UK GDPR.
7. Data Security
We have implemented appropriate security measures to prevent personal data from being accidentally lost, used, or accessed without authorisation.
Access to your data is limited to us as the business owners and any trusted contractors or service providers who need it for legitimate business purposes, such as IT support or accounting.
All third parties processing personal data on our behalf are required to handle it securely and in accordance with UK GDPR.
8. Your Data Protection Rights Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Your right to erasure - You have the right to ask us to delete your personal information.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
Your right to object to processing - You have the right to object to the processing of your personal data.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
9. Changes to This Policy
We review our Privacy Policy regularly. Updates will be published on our website, and the most recent version will always apply.
10. Complaints and Your Right to Withdraw Consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us via enquiries@starkstrand.co.uk
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF