Privacy policy

Last updated: 3 October 2026

Pengilly Landscapes ("we", "us", "our") respects your privacy. This policy explains how we collect, use, share and protect personal data when you visit www.pengillylandscapes.co.uk, buy from us or contact us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Pengilly Landscapes, Alwoodly House, Burnhams Rd, Great Bookham, Leatherhead KT23 3BA, United Kingdom. Email: info@pengillylandscapes.co.uk. Phone: +44 1372 456700.

2. Personal data we collect

  • Identity and contact data: name, email address, phone number, billing and delivery address

  • Order data: products bought, order value, order history, returns and refunds

  • Payment data: payment method and transaction confirmation. Full card details are handled by our payment processors and are never stored by us

  • Communication data: messages you send us by email, phone or contact form

  • Technical data: IP address, browser type, device information and pages visited, collected through cookies and similar technologies

  • Marketing data: your preferences for receiving emails from us, if you choose to subscribe

3. How we use your data and our lawful basis

Purpose

Lawful basis

Processing and delivering your order, handling returns and refunds

Performance of a contract

Answering your questions and providing customer support

Legitimate interests / contract

Preventing fraud and keeping our store secure

Legitimate interests

Keeping accounting and tax records

Legal obligation

Sending marketing emails

Consent (you can withdraw at any time)

Improving our website through analytics

Consent for non-essential cookies

4. Who we share data with

We share personal data only where needed to run our business:

  • Shopify – our e-commerce platform, which hosts the store and processes checkout

  • Payment processors – to take and refund payments securely

  • Couriers (Royal Mail, DPD, FedEx) – to deliver your order; we share your name, address and contact details

  • Professional advisers – such as accountants, where required

  • Authorities – where the law requires us to

We do not sell your personal data.

5. International transfers

Some of our service providers, including Shopify, may process data outside the UK. Where this happens, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

6. Cookies

We use essential cookies to make the store work, such as keeping items in your basket. With your consent, we also use analytics and marketing cookies. You can change your choices at any time using the cookie banner or your browser settings.

7. How long we keep data

We keep order and transaction records for six years to meet UK tax and accounting requirements. Customer service messages are kept for up to two years. Marketing data is kept until you unsubscribe.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to delete your data, where we have no legal reason to keep it

  • Restrict or object to how we process your data

  • Receive your data in a portable format

  • Withdraw consent at any time, where we rely on consent

To use any of these rights, email info@pengillylandscapes.co.uk. We will respond within one month.

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted checkout and restricted access to customer records.

10. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.