Privacy Policy for Greenbough Orchard Services

Effective date: 8 July 2026

1. Introduction and company information

This Privacy Policy explains how Greenbough Orchard Services collects, uses, discloses, and protects personal data in connection with its orchard-related business activities, including customer enquiries, service delivery, site visits, communications, and related administrative operations.

Greenbough Orchard Services is the data controller responsible for your personal data for the purposes described in this Privacy Policy.

Company details:

• Name: Greenbough Orchard Services
• Address: 14 High Street, Cropthorne, Pershore, Worcestershire WR10 3LJ, UK
• Email: [email protected]
• Phone: +44 1386 792 458

This Privacy Policy applies to personal data collected through our website, email, telephone, written correspondence, in-person interactions, service enquiries, and any other communications relating to our orchard services.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, title, and business or organisation name.
• Contact data: address, email address, telephone number, and other communication details.
• Enquiry and correspondence data: information you provide when contacting us, including service requests, feedback, and messages.
• Service and transaction data: details relating to orchard services, bookings, quotations, invoices, payments, and service history.
• Technical data: IP address, browser type, device information, and website usage data where applicable.
• Location data: where relevant to site visits, service delivery, or access arrangements.
• Marketing preferences: your communication preferences and consent choices.

We collect personal data directly from you, from your authorised representatives, from publicly available sources where lawful, and from service providers or business partners where necessary for our operations.

We do not intentionally collect special category data unless you choose to provide it and we have a lawful basis to process it.

3. Purpose of data processing

We process personal data for the following purposes:

• to respond to enquiries and provide quotations;
• to deliver orchard services and manage customer relationships;
• to arrange site visits, access, and operational logistics;
• to issue invoices, process payments, and maintain financial records;
• to communicate with customers, suppliers, and other contacts;
• to manage our website, systems, and internal administration;
• to comply with legal, tax, accounting, and regulatory obligations;
• to prevent fraud, misuse, and security incidents;
• to improve our services, processes, and customer experience;
• to send marketing communications where permitted by law and, where required, with your consent.

4. Legal basis for processing

We only process personal data where we have a lawful basis to do so. Depending on the context, our legal bases may include:

• Contract: processing necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
• Legal obligation: processing necessary to comply with applicable legal and regulatory requirements.
• Legitimate interests: processing necessary for our legitimate business interests, such as managing enquiries, operating and improving our services, maintaining security, and administering our business, provided those interests are not overridden by your rights and freedoms.
• Consent: processing based on your consent, for example for certain marketing activities or where required by law.

Where we rely on legitimate interests, we assess the impact on your rights and interests and take appropriate safeguards.

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

• IT and hosting providers;
• email, communications, and document management providers;
• accountants, auditors, and professional advisers;
• payment processors and banking partners;
• delivery, logistics, and site support providers;
• legal, regulatory, and law enforcement authorities where required;
• subcontractors or service partners involved in orchard-related work.

We require third parties to handle personal data securely and in accordance with applicable data protection requirements. We do not sell personal data.

6. Data transfer to third countries

Where personal data is transferred outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that the transfer is lawful and that your data receives an adequate level of protection. These steps may include:

• using countries recognised as providing adequate protection;
• entering into standard contractual clauses or equivalent safeguards;
• implementing additional technical and organisational measures where appropriate.

If you would like more information about international data transfers, you may contact us using the details below.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting requirements.

Retention periods vary depending on the type of data and the purpose of processing. In general:

• customer and service records are kept for the duration of the relationship and for a reasonable period thereafter;
• financial and tax records are retained for the period required by law;
• enquiry records are retained for as long as needed to manage the enquiry and any follow-up;
• marketing data is retained until you opt out or withdraw consent, where applicable.

When personal data is no longer required, we will delete it or anonymise it securely.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• Access: to request confirmation of whether we process your personal data and obtain a copy of it.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we limit the processing of your personal data in certain circumstances.
• Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, transmission to another controller.
• Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain services or communications that depend on that consent. We will inform you if this is the case.

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

Website: https://ico.org.uk

11. Data security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures may include:

• access controls and password protection;
• secure storage and restricted access to records;
• staff awareness and confidentiality obligations;
• regular review of systems and security practices;
• backup and recovery procedures where appropriate.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

• Greenbough Orchard Services
• Address: 14 High Street, Cropthorne, Pershore, Worcestershire WR10 3LJ, UK
• Email: [email protected]
• Phone: +44 1386 792 458

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted in an appropriate location and will take effect from the date stated in the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how Greenbough Orchard Services processes personal data.