Privacy & Security policy

Your data and privacy

British Hardwood Tree Nursery Limited is committed to protecting your personal data and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

We work with our customers, partners, and service providers to ensure that personal data is handled responsibly, securely, and in accordance with legal requirements.

What information do we collect?

We may collect and store personal information that you provide to us directly, for example by:

• Completing an enquiry or contact form
• Making a purchase or transaction
• Subscribing to our newsletter

This information may include your name, contact details, and any other information you choose to provide.

What do we use personal information for?

We use personal data for the following purposes:

• To respond to enquiries and provide requested information
• To process and fulfil orders or transactions
• To communicate with you about our products and services (where you have agreed)
• To improve our services, website, and customer experience

We only collect and use personal data where it is necessary for legitimate business purposes and in accordance with applicable law.

E-mail communications

If you subscribe to our newsletter, you may receive occasional emails about our products, services, and company news. You can unsubscribe at any time using the link provided in every e-mail.

We use a third-party provider, Mailchimp, to manage and deliver our email communications. Mailchimp uses tracking technologies, including pixels, to collect information about email engagement, such as whether emails are opened and which links are clicked.

This information helps us monitor and improve the effectiveness of our communications.

Access to your information and correction

You have the right to request access to the personal data we hold about you, as well as to request correction or deletion of inaccurate or incomplete information. To make a request, please contact us at [email protected].

Information to improve our site

We collect information about how visitors use our website to help us improve its performance and usability.

This may include data such as your IP address, browser type, device information, pages visited, and how you navigate our site. We collect this information using cookies and similar technologies, including analytics tools and tracking mechanisms.

Where possible, we use this data in an aggregated manner. However, some of this data (such as IP addresses or online identifiers) may be considered personal data under applicable data protection laws.

We do not attempt to identify individual users from this data unless you choose to provide personal information through forms or transactions.

Cookies and similar technologies

Our website uses cookies and similar technologies to enhance your browsing experience and to better understand how our website is used.

These technologies may collect information about your device and browsing behaviour. This information may be used for analytics, website functionality, and performance improvement, and may be processed by third-party providers acting on our behalf.

You can manage or disable cookies through your browser settings. Please note that restricting cookies may impact the functionality of the website.

Data retention

We will only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.

If you have subscribed to our newsletter, we will retain your information for as long as you remain subscribed.

Storage

Your personal data is stored securely and is processed within the United Kingdom or in accordance with appropriate data protection safeguards.

List of cookies we collect

The table below lists the cookies we collect and what information they store.

COOKIE name	COOKIE Description
CART	The association with your shopping cart.
CATEGORY_INFO	Stores the category info on the page, that allows to display pages more quickly.
COMPARE	The items that you have in the Compare Products list.
CURRENCY	Your preferred currency
CUSTOMER	An encrypted version of your customer id with the store.
CUSTOMER_AUTH	An indicator if you are currently logged into the store.
CUSTOMER_INFO	An encrypted version of the customer group you belong to.
CUSTOMER_SEGMENT_IDS	Stores the Customer Segment ID
EXTERNAL_NO_CACHE	A flag, which indicates whether caching is disabled or not.
FRONTEND	Your sesssion ID on the server.
GUEST-VIEW	Allows guests to edit their orders.
LAST_CATEGORY	The last category you visited.
LAST_PRODUCT	The most recent product you have viewed.
NEWMESSAGE	Indicates whether a new message has been received.
NO_CACHE	Indicates whether it is allowed to use cache.
PERSISTENT_SHOPPING_CART	A link to information about your cart and viewing history if you have asked the site.
POLL	The ID of any polls you have recently voted in.
POLLN	Information on what polls you have voted on.
RECENTLYCOMPARED	The items that you have recently compared.
STF	Information on products you have emailed to friends.
STORE	The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE	Indicates whether a customer allowed to use cookies.
VIEWED_PRODUCT_IDS	The products that you have recently viewed.
WISHLIST	An encrypted list of products added to your Wishlist.
WISHLIST_CNT	The number of items in your Wishlist.

Transaction security

We take the security of your personal and payment information seriously and use appropriate technical and organisational measures to protect it.

All online transactions on our website are processed securely using SSL (Secure Socket Layer) encryption, which helps protect data transmitted between your browser and our systems.

We use trusted third-party payment providers, including Opayo and PayPal, to process payments. Payment card details are handled directly by these providers and are not stored on our website systems.

Opayo and PayPal maintain high levels of security and compliance, including adherence to the Payment Card Industry Data Security Standard (PCI DSS). These providers are responsible for securely processing and storing your payment information in accordance with their own privacy and security policies.

You can verify that you are using a secure connection by checking for the padlock symbol in your browser’s address bar.

Payment authorisation ("shadow" transactions)

When you place an order, your card issuer may temporarily reserve funds to confirm that sufficient balance is available. This is known as a payment authorisation.

If a transaction fails after authorisation, the reserved amount may still appear on your account for a short period. This is controlled by your bank or card provider and is typically released within a few working days.

If you have questions about an authorisation or need funds released sooner, please contact your card issuer directly.

Links to other websites

Our website may contain links to other websites or services. We are not responsible for the content or privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal data.

Updates to this policy

We keep our privacy policy under regular review and may update it from time to time. Any changes will be posted on this page.

Last updated: February 2026