Privacy Policy

Personal data is used to provide our services, manage contracts and support customer relationships. We process contact details to respond to enquiries and schedule site visits, process orders and deliver products, and to issue invoices and warranties. Project and site data are used to produce bespoke designs, structural calculations and installation plans. Technical and usage data help us maintain and improve our website and digital services. Where required by law we retain transactional and contractual records for accounting and regulatory compliance. We may communicate service-related information such as scheduling, maintenance reminders and safety notices by email or phone. We do not sell personal data. Where we rely on consent (for example marketing communications or optional cookies) you can withdraw consent at any time without affecting processing necessary for contract performance. For certain services we may share data with trusted third parties such as certified installers, couriers, payment processors and professional advisors; those parties act either as processors on our instructions or as separate controllers with contracts or lawful bases in place. Any transfer of data outside the UK is subject to appropriate safeguards or adequacy mechanisms in line with data protection requirements.

We keep personal data only for as long as necessary to fulfil the purposes described, to meet legal or regulatory obligations, or to maintain our contractual relationships. Typical retention periods vary by category: enquiry records are normally retained for up to 3 years, contract and warranty documentation for up to 7 years to satisfy accounting and legal requirements, and application materials for recruitment up to 6 months unless otherwise agreed. We implement technical and organisational measures to safeguard data, including secure storage, access controls, encryption for sensitive records, regular backups and vendor due diligence. Access to personal data within our organisation is limited to staff who require it to perform their roles. Where we engage third-party processors such as payment providers or cloud storage, we use written agreements to ensure they meet security and confidentiality obligations. We perform periodic reviews of our security posture and update measures to address changing risks.

If you have questions about this Privacy Policy or wish to make a request regarding your personal data, contact us at [email protected] or call +44 20 7946 0958. We may update this policy to reflect changes in our services, legal obligations, or operational practice; material changes will be posted on this page with an updated effective date. This policy was prepared with regard to UK law and applies to data processed by Greenhouse Grove Ltd in connection with our UK operations. For contract-specific data treatments we will provide clear privacy notices at the relevant point of collection. We are committed to maintaining transparent and responsible data practices so that customers, suppliers and site contacts can have confidence when working with us.