This Privacy Policy sets out how we collect, use and protect your personal information. ‘Personal information’ is information which identifies you or another person, or which is capable of doing so. (the “Site”) is owned by Whitehall Garden Centres Limited (“we” or “us”), a company registered in England and Wales under company number 04981754 whose registered office is at Corsham Road, Lacock, Chippenham, Wilts, SN15 2LZ.

We act as the data controller (as defined under Data Protection Legislation). As a data controller, we make an annual notification to the Information Commissioner’s Office and our registration number is ZA378077.

Please take the time to read this Privacy Policy, which is part of our Terms of Use. If you have any questions about this Privacy Policy or our use of your information you can contact us at You also have the right to make a complaint to the relevant data protection regulator about our use of your information (in most cases under this Privacy Policy the relevant data protection regulator will be the UK’s Information Commissioner’s Office).


We take your privacy seriously and are committed to maintaining the privacy and security of information you provide to us, and the choices you have regarding our collection and use of your information. This Privacy Policy applies to information we collect about you through the Site and when you otherwise communicate or engage with us (including at our premises). By visiting the Site or our premises you are acknowledging the practices described in this Privacy Policy.

We process your personal information as permitted by Data Protection Legislation, relying on various legal grounds to do so. These legal grounds are in order to pursue our legitimate interests (specific examples of this are listed in section 4 below), where required to do so by applicable law, to perform our contractual obligations to you or on the basis that you have provided your consent for us to do so (again, specific examples of this are listed in section 4 below). You may withdraw your consent to affected processing at any time by contacting us at

If you consent to us contacting you, we will always aim to be respectful, relevant and appropriate. If at any time you do not think that we have complied with this, please contact us straight away to let us know.

This Privacy Policy may change from time to time and, if it does, the up-to-date version will always be available on the Site. Please note that by continuing to use the Site you are acknowledging any updated versions.


We may collect and process the following information:

  • Information you give to us. You may give us information about you by filling in forms (e.g. on our ”Find Us” page), by creating an account on our Site, by providing delivery / contact information directly to us (e.g. when purchasing goods from our premises) or by otherwise contacting us. The information you give to us may include:
    • your name and title;
    • contact information, including telephone number, email address and postal address; and
    • information such as your preferences and interests.
  • Information we collect about you. Each time you visit the Site, we may automatically collect the following information:
    • web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and
    • information about your visit, including the full Uniform Resource Locators (URLs) clickstream to, through and from the Site (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs).
  • We may also collect CCTV footage which includes your image if you visit our premises.
    Information we receive from other sources.
    We may also obtain information about you from third parties, including (where specifically authorised by you and in order to authenticate your identity, validate a payment or otherwise obtain authorisation for your payments for products or services from us) from our payment service providers or from credit reference and fraud detection agencies. This information can include:


    • your name and title;
    • contact information, including your address and telephone number;
    • information such as debit or credit card details, cheque details or credit reports.


We may use your information for the following purposes:

  • to respond to any query that you may submit to us (in order to fulfil our legitimate interests in doing so);
  • to ensure that our Site’s content is presented in the most effective manner for you and your computer (in order to fulfil our legitimate interests in doing so);
  • we may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided, but only if you have given us your consent to do so;
  • from time to time, to contact you for market research purposes, but only if you have given us your consent to do so;
  • to customise the Site according to your interests, as further detailed in our separate Cookies Policy;
  • to administer the Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey responses (in order to fulfil our legitimate interests in doing so);
  • to allow you to participate in interactive features of our service and receive the full benefit of our account pages or features when you choose to do so (in order to fulfil our legitimate interests in doing so);
  • as part of our efforts to keep the Site safe and secure (in order to fulfil our legitimate interests in doing so);
  • to measure or understand the effectiveness of advertising we serve to you and others (in order to fulfil our legitimate interests in doing so), and in accordance with our Cookies Policy to deliver relevant advertising to you;
  • to comply with the law;
  • to enable us to comply with our obligations under any contract with you, including where you have purchased goods or services through the Site or from our premises; and
  • as we feel is necessary to prevent illegal activity, to operate our security and safety policies and / or to otherwise protect our legitimate interests.


We may share your personal information with any other member of the Whitehall group of companies from time to time.

If we share your information with third parties they will process your information as either a data controller or as our data processor and this will depend on the purposes of our sharing your personal data. We will only share your personal information in compliance with the Data Protection Legislation.

We may disclose your information to third parties when:

  • you specifically request this;
  • those third parties provide services to us in relation to the Site, our premises or our business more generally;
  • other companies’ products and services may interest you (and we have collected your consent to third party marketing);
  • in the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets;
  • if the Site or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets; or
  • if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or to protect the rights, property or safety of the Site, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

The third parties include:

  • business partners, clients, suppliers and sub-contractors for the performance of any contract we enter into with them or you or as necessary to enable the provision of the Site or the provision of our goods and services to you; and
  • analytics and search engine providers that assist us in the improvement and optimisation of the Site.

We may share some broader statistics and customer profiling information with third parties and other companies, but the data is anonymised, so you would not be identifiable from that data. We will not rent or sell our users’ details to any other organisation or individual.

In order to make secure payments over the Site, we may ask you from time to time to register with (and provide your information directly to) payment security providers such as the operators of “Verified by Visa” or “MasterCard SecureCode”. In those circumstances, the privacy policy made available by those third party providers will explain how they collect and use your information in order to ensure the payments you make are secure. The security information you provide will not be shared with us.


The personal information that we collect from you may (in the future) be transferred to, and stored at, a destination outside of the European Economic Area (“EEA”) or outside the UK, in the event that leaves the EEA. It may also be processed by staff operating outside the EEA / UK who work for us or one of our suppliers. We will take all steps reasonably necessary to ensure that your personal information is treated securely and ensure that any such transfer is made in accordance with this Privacy Policy and Data Protection Legislation. If any such transfer affects you in the future, you can contact us for more information.

We follow strict security procedures as to how your personal information is stored and used, and who sees it, to help stop any unauthorised person getting hold of it. All personal information you register on this Site will be located behind a firewall. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Unfortunately, the transmission of information via the internet is not completely secure and although we do our best to protect your personal information, we cannot guarantee the security of your personal information.

We will keep your information stored on our systems for only as long as it takes to provide our goods or services to you or to otherwise fulfil the purpose for which we collected it (as described above). The third parties we engage to provide services on our behalf will keep your personal information stored on their systems for as long as is necessary to provide their services. We will not store your information for longer than is reasonably necessary or required by law.


Even if you have consented to the processing of your personal information for marketing purposes (by ticking the relevant box) as described above, you have the right to ask us to stop processing your personal information for such purposes. You can exercise this right at any time by contacting us at

The Site may, from time to time, contain links to and from the websites of advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

You are entitled to receive the personal information that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that information to another data controller. The types of information that can be provided are those set out in paragraph 3.1 above. You can exercise this right by contacting us at

Data Protection Legislation also give you the right to access information held about you. You are entitled to be told by us whether we or someone else on our behalf is processing your personal information; what personal information we hold; details of the purposes for the processing of your personal information; and details of any third party with whom your personal information has been shared. In the event that an access request is unfounded, excessive or especially repetitive, we may charge a ‘reasonable fee’ for meeting that request. Similarly, we may charge a reasonable fee to comply with requests for further copies of the same information (in each case that fee will be based upon the administrative costs of providing the information). Sometimes you may be asked to provide proof of identity before we show you your personal information – that’s so we can prevent unauthorised access. You also have rights to rectify such information, object to or restrict our processing of or request the deletion of the personal information we hold about you in certain circumstances – and these and all other rights mentioned above can be exercised at any time by contacting us at


Questions, comments and requests regarding this Privacy Policy should be addressed to:
Peter Self
Whitehall Garden Centre, Corsham Road, Lacock, Chippenham, Wiltshire, SN152LZ
01249 730204

Alternatively, you can contact us through the “Find Us” section of this Site.


For the purposes of this Privacy Policy, “Data Protection Legislation” is defined as all applicable data protection and / or privacy laws in the UK, including (to the extent they apply) the General Data Protection Regulation (Regulation (EU) 2016/670) (“GDPR”), the Data Protection Act 2018 and / or any equivalent legislation amending, supplementing or replacing the GDPR.