Privacy Policy
Privacy Policy
Last updated: May 2025
M COLLECTIVE LTD ("we", "us", "our") operates gardenhomespace.com. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or place an order with us.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
M COLLECTIVE LTD
Company No: 17231398
23A Capworth Street, London, E10 5DD, United Kingdom
📧 info@gardenhomespace.com
📞 +44 7789 410869
2. What Personal Data We Collect
We may collect the following categories of personal data:
Data you provide directly:
- Name, email address, phone number
- Billing and delivery address
- Order history and purchase details
- Account login credentials (if you create an account)
- Communications with our customer service team
- Newsletter subscription preferences
Data collected automatically:
- IP address and approximate location
- Browser type and operating system
- Pages visited, time on site, referring website
- Cookies and similar tracking technologies (see Section 7)
We do not store payment card details. All payments are processed securely by our payment providers (Shopify Payments, Stripe, or PayPal) in compliance with PCI DSS standards.
3. Why We Use Your Data (Purpose & Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Process and fulfil your orders | Contract performance |
| Send order confirmation and shipping updates | Contract performance |
| Handle returns, refunds and complaints | Contract performance / Legal obligation |
| Send marketing emails and offers | Consent (opt-in only) |
| Improve our website and services | Legitimate interests |
| Prevent fraud and ensure security | Legitimate interests / Legal obligation |
| Comply with accounting & tax obligations | Legal obligation |
| Display personalised ads (Google Ads) | Consent (via cookie banner) |
4. Who We Share Your Data With
We only share your data with trusted third parties who need it to provide services to us:
- Shopify Inc. — e-commerce platform and data hosting (Canada/US, with Standard Contractual Clauses)
- Payment processors (Stripe, PayPal, etc.) — secure payment processing
- Delivery & logistics providers — to ship your orders
- Google LLC — analytics (Google Analytics), advertising (Google Ads, Merchant Center)
- Email marketing platforms — to send newsletters you have subscribed to
- Accounting/legal advisors — where required by law
We never sell, rent, or trade your personal data to third parties for their own marketing purposes.
5. Data Retention
- Order data: Retained for 7 years (UK tax/accounting legal requirement)
- Customer accounts: Retained while your account is active or until you request deletion
- Marketing data: Retained until you unsubscribe or withdraw consent
- Analytics data: 26 months (Google Analytics default)
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — Request a copy of the data we hold about you
- Right to rectification — Correct inaccurate or incomplete data
- Right to erasure — Request deletion of your data ("right to be forgotten")
- Right to restriction — Ask us to limit how we use your data
- Right to portability — Receive your data in a portable format
- Right to object — Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent — At any time, for consent-based processing
To exercise any of these rights, contact us at info@gardenhomespace.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
7. Cookies
We use the following types of cookies:
- Essential cookies — Required for the website to function (cart, checkout, session). No consent needed.
- Analytics cookies — Google Analytics to understand site usage. Requires consent.
- Marketing cookies — Google Ads, remarketing. Requires consent.
- Preference cookies — To remember your settings. Requires consent.
You can manage your cookie preferences via our cookie banner or by adjusting your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to shop on our site.
8. International Data Transfers
Some of our service providers (e.g. Shopify, Google) may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK ICO, to protect your data.
9. Data Security
We take data security seriously. Our website uses SSL/TLS encryption (HTTPS). Access to personal data is restricted to authorised personnel only. Our payment partners are certified to PCI DSS standards.
While we take all reasonable precautions, no transmission over the internet is 100% secure. If you suspect a data breach, please contact us immediately.
10. Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected a child's data, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of last update. We recommend reviewing it periodically.
12. Contact & Complaints
For any privacy questions or to exercise your rights:
M COLLECTIVE LTD
📧 info@gardenhomespace.com
📞 +44 7789 410869
📍 23A Capworth Street, London, E10 5DD, United Kingdom