Privacy Policy

HOMART LIMITED (trading as Garden Glow Supply) is the data controller for personal data collected through gardenglowshop.com. Company number 15257354, registered office 30 Uphall Road, Ilford, England, IG1 2JF. Contact for any privacy matter: support@homartuk.com.

This policy explains what we collect, why, how long we keep it and what you can do about it. It is written to the UK GDPR and the Data Protection Act 2018.

What we collect

Data	When
Name, email, delivery and billing address, phone number	When you order, ask for a scheme quote, or open a trade account
Order and quote history, including sketches, garden photographs and measurements you send us	When you buy or ask us to size a scheme
Email address alone	If you subscribe to our updates
Correspondence with us	When you email or call
Device and usage data — IP address, browser, pages viewed	Automatically, via Shopify and cookies
Business name, VAT number, purchase order references	Trade accounts only

We never see your full card number. Payments are processed by Shopify Payments and the card networks. We receive only a confirmation, the last four digits and the card type.

If you send us a photograph of your garden for a quote, please crop out anything you would not want us to hold — people, number plates, house numbers. We use it only to answer your question and we delete it with the quote.

Why, and on what lawful basis

Purpose	Lawful basis
Taking and fulfilling your order; arranging delivery; answering you	Contract — we cannot do it without this data
Sizing and quoting a lighting scheme	Contract, or steps taken at your request before a contract
Keeping accounting and tax records	Legal obligation — HMRC requires six years
Handling returns, guarantee claims and complaints	Legal obligation and legitimate interests
Fraud prevention and site security	Legitimate interests in protecting the business and our customers
Marketing emails	Consent — which you may withdraw at any time
Analytics and improving the site	Consent for non-essential cookies

Who we share it with

Only where it is needed to run the shop, and never for anyone else's marketing. We do not sell personal data.

Shopify Inc. — our ecommerce platform and payment processor.
Carriers and pallet networks — name, address and phone number, so they can deliver and call you about a booking.
Our suppliers and manufacturing partners — delivery details and the specification, for made-to-order schemes and directly shipped items.
Our accountants, and where legally required HMRC and other authorities.
Email and analytics providers, where you have consented.

Some providers operate outside the UK. Where data is transferred abroad it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, as the UK GDPR requires.

How long we keep it

Record	Retention
Order and transaction records	6 years after the end of the relevant tax year
Scheme quotes, sketches and garden photographs not converted to an order	12 months
Guarantee records	6 years from delivery
Marketing consent and email address	Until you unsubscribe, then a suppression record so we don't email you again
General correspondence	2 years
Website analytics	Per the provider's retention, typically 14 months

Cookies

Essential cookies keep your basket and session working and cannot be turned off. Non-essential cookies — analytics and any marketing tags — are set only with your consent, which you can give or refuse in the cookie banner and change at any time in your browser. Refusing them does not stop you buying anything.

Your rights

Under the UK GDPR you have the right to access a copy of your data, to rectification of anything inaccurate, to erasure where we have no overriding legal reason to keep it, to restriction while a dispute is resolved, to object to processing based on legitimate interests and to direct marketing at any time, to data portability, and to withdraw consent at any time.

Tax law obliges us to keep order records for six years, so erasure will not usually extend to those.

Email support@homartuk.com. We respond within one month, free of charge, and we may ask you to confirm your identity first.

Security

The site runs over HTTPS. Card data never reaches our systems. Access to customer records is limited to those who need it and protected by strong authentication. If a breach occurs that is likely to risk your rights, we will tell the ICO within 72 hours and tell you without undue delay.

Children

This shop is intended for adults and we do not knowingly collect data from anyone under 16. If you believe we hold a child's data, tell us and we will delete it.

Complaints

Please raise it with us first — most things are a misunderstanding we can fix. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113, ico.org.uk.