Privacy

Your Privacy

We collect personal data when you use the Hedgehog Gardens website. Some of this data is provided directly by users, while some is collected automatically.

The data we collect includes:

• Usage data
• Email address
• First name
• Last name
• Phone number
• Company name
• IP address
•  

How We Use Your Data
We use this information to:

• Improve our website by analysing user behaviour
• Communicate with our users
• Engage with users on social networks and other platforms

If any additional data collection occurs, it will be specified at the time. Hedgehog Gardens is not responsible for any third-party data shared by users.

How and Where Your Data Is Stored
At Hedgehog Gardens, we store and use your data in accordance with the GDPR, taking reasonable security measures to prevent unauthorized access.

Keeping Your Data Safe
While we prioritize security and train our staff on data protection, we cannot guarantee that data transmitted over the internet is entirely secure. Sending data to us is done at the user’s own risk.

Your Rights
You have the right to ask us about the information we hold on you, and to request that your data be erased. All such requests should be sent to [email protected], and we will respond within 1 month.

Links to Other Websites
This privacy policy only applies to the Hedgehog Gardens website. Linked third-party websites have separate privacy policies that we do not control. If you access the Hedgehog Gardens website via a third-party link, please note that they may also send us personal information about you.

Changes to Our Privacy Policy
We reserve the right to change our privacy policy at any time. Updates will be listed on this page, and users are encouraged to review this page regularly. If you do not agree with a change, please discontinue using the website.

By continuing to use the Hedgehog Gardens website and voluntarily submitting your data, you agree to our privacy policy.

GDPR Data and Information Policy

We are transparent about how we manage data.

The Data We Hold Includes:

Client Information
Data required to manage campaigns, including:

• Names, phone numbers, email addresses, and addresses
• Website, social media, domain, hosting, advertising, and analytics logins (where provided)

This information is collected through a Client Questionnaire and is stored in Google Drive.

Elements may also be kept in our CRM, accounting software, project management, and communication tools, such as Infusionsoft, Xero, Teamwork, and Slack.

Leads and Contacts
If you request a gardening consultation, sign up for our mailing list, or inquire about our services, we may store data such as:

• Name, email address, and phone number (if provided)
• Information related to gardening needs

Data Consent
We specify how data will be used on each form. Consent may be withdrawn at any time by contacting us or unsubscribing from any of our emails.

The basis for processing client data is Contract, and for leads/contacts, it is Consent or Legitimate Interest.

Data and Privacy Notice
Data submitted to us is stored in our email marketing software so we can send relevant information and updates. Users can remove consent at any time by unsubscribing or requesting data deletion, which will be completed within 1 month.

Data Policy
Hedgehog Gardens collects and stores only the information necessary for providing our gardening services. This data is accessible to relevant team members only.

Risks and Impact Assessment

• Risk: Unauthorized access to contact information
  • Mitigation: Data is stored in cloud services with login protection and two-step verification.
• Risk: Unauthorized access by a former employee
  • Mitigation: Offboarding procedures quickly remove access upon termination.

Training
Staff receive training on:

• Password and account security
• Data handling and storage
• Device security

Right of Access
If an individual requests access to their data, this will be forwarded to our Data Protection Officer. We will provide full access within 1 month.

Data Disposal
Individuals have the right to be forgotten and can request data erasure. All related records will be deleted across systems.