Privacy Policy

1. Data Controller Information

This privacy notice informs you of our privacy practices and how your personal data is collected, processed, and safeguarded when visiting happybundleloopster.garden (the "Site"). The data controller responsible for your personal data is:

2. What Personal Data We Collect

In keeping with data minimization principles, we strictly avoid gathering sensitive personal classifications. We may collect and process:

• Identity & Contact Information: Name, email address, and message contents submitted voluntarily via our contact and query validation forms.
• Technical & Network Identifiers: Truncated IP addresses (anonymized at the gateway level), browser brand and version, device viewport parameters, operating system, and routing logs.
• Aggregate Telemetry: Anonymized interaction figures showing filter clicks, table sort toggles, and document request counts.

3. Legal Bases for Processing Under UK GDPR

We process your data under the provisions of Article 6(1) of the UK General Data Protection Regulation:

• Legitimate Interests (Art. 6(1)(f)): Maintaining server perimeter security, diagnosing server errors, and preventing fraudulent automated scraping of our proprietary agronomic database.
• Consent (Art. 6(1)(a)): Operating optional analytical cookies via our persistent cookie banner preference storage.
• Contractual / Pre-Contractual Measures (Art. 6(1)(b)): Responding to formal technical inquiries, lab test inquiries, or validation disputes submitted through our contact channels.

4. Third-Party Processors & Commercial Links

We do not trade, sell, or lease your identifiable data to commercial marketers. We employ a limited roster of infrastructure partners who adhere strictly to UK GDPR requirements:

• Hosting Infrastructure: Dedicated edge servers located within the United Kingdom and EEA.
• Affiliate Networks: When you activate an outbound product hyperlink to a gardening retailer or seed distributor, an encrypted merchant identifier token is transmitted to record that the visit originated from happybundleloopster.garden. This tracking does not convey your name, address, or email to our database.

5. Retention of Personal Records

Inquiry form submissions are maintained for a maximum duration of 24 months to support ongoing comparative test tracking, after which emails and message records are purged. Server access telemetry logs are rotated and deleted automatically every 30 days.

6. Your Statutory Rights

Under UK data privacy legislation (Data Protection Act 2018 / UK GDPR), you hold clear legal rights:

• Right of Access: You may request copies of any personal records we maintain concerning you.
• Right to Rectification: You may request correction of erroneous or outdated data.
• Right to Erasure ("Right to be Forgotten"): You may instruct us to permanently purge your submitted inquiry data.
• Right to Restrict or Object: You may challenge processing founded upon legitimate interest grounds.

To exercise these rights, submit your request in writing to [email protected]. Requests are processed without administrative charge within 30 calendar days. You also maintain the right to lodge a regulatory complaint with the Information Commissioner's Office (ICO) at ico.org.uk.