Privacy policy

The short version

We collect what we need to sell you a garden building and get it delivered: your name, address, email and phone number. We pass your name, address and phone to the manufacturer, because they are the ones who build it and deliver it to you. We keep order records for seven years because HMRC requires it. We don't sell your information to anyone, and we only email you marketing if you've asked us to.

The rest of this page sets that out properly.

Who we are

We are Heavenly Garden Store, an online retailer of garden buildings and outdoor products based in London. We are the data controller for the information described here. Our full company details are at the bottom of this page.

If you have a question about anything here, email info@heavenlygardenstore.com or message us on WhatsApp on 0333 050 4282.

What we collect

When you order — your name, delivery address, billing address, email address and phone number.
When you pay — payment is handled by Shopify Payments. We're told the payment succeeded and we see the last four digits of the card. We never see or hold your full card details.
When you contact us — by email, phone or WhatsApp: your contact details and whatever you tell us, including any photographs you send us of your garden or access.
When you create an account — your email address and sign-in details.
When you browse — pages viewed, what you put in your basket, the device and browser you're using, and an approximate location from your IP address.

Why we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for everything we do with your information. Here is ours.

To fulfil your order — placing it with the manufacturer, arranging delivery, handling returns, damage and warranty claims. Basis: performing our contract with you.
To answer your questions, before and after you buy. Basis: our legitimate interest in running the business and looking after customers.
To keep records for accounting, VAT and consumer law. Basis: our legal obligations.
To prevent fraud and keep the site secure. Basis: our legitimate interest in protecting the business and our customers.
To send you marketing, only if you've asked us to. Basis: your consent, which you can withdraw at any time.

Who we share it with, and why

This is the most important section, because of how we work.

We don't hold stock. Every product we sell is built and delivered by its manufacturer, direct to you. To make that happen we pass your name, delivery address and phone number to the manufacturer of the product you've bought, so they can produce your order and contact you to arrange a delivery date.

We pass on only what they need to deliver to you. We don't pass on your payment details, your browsing history, or anything else you've told us. Each manufacturer is a separate data controller for the information we give them and handles it under their own privacy policy.

We also use these companies to run the business:

Shopify — our shop platform and payment processing
Google — our business email and file storage
Our accountant, for financial records

We will also share information where the law requires it — for example in response to a court order — or if the business is ever sold or transferred.

We do not sell your personal information to anyone, and we never will.

Where your information goes

Our manufacturers are based in the United Kingdom and the European Union. Some of our service providers process information outside the UK. Where that happens, the transfer is covered by UK-approved safeguards — either an adequacy decision or the International Data Transfer Agreement.

How long we keep it

Order and transaction records — seven years. HMRC requires this.
Enquiries that don't become orders — two years.
Marketing contacts — until you unsubscribe, then we keep a record that you did so we don't contact you again.
Account details — until you ask us to close your account.

Cookies

Our site uses cookies that are necessary for it to work — keeping your basket, keeping you signed in, keeping the checkout secure. We also use cookies that tell us how the site is being used, so we can improve it.

You can control non-essential cookies through the banner when you first visit, and through your browser settings at any time. Blocking the necessary ones will stop parts of the site working.

Your rights

Under UK data protection law you can ask us to:

Give you a copy of the information we hold about you
Correct anything that's wrong
Delete it, where we don't have a legal reason to keep it
Stop or restrict what we're doing with it
Send it to you, or to someone else, in a portable format
Stop using it for marketing — you can also do this with the unsubscribe link in any email

Email info@heavenlygardenstore.com and we'll respond within one month. There's no charge. We may need to check who you are before we act on a request.

Children

Our site isn't aimed at children and we don't knowingly collect information about anyone under 13. If you're a parent or guardian and think we have your child's information, contact us and we'll delete it.

Security

We use Shopify, which keeps your information on secure servers and handles payments to card industry standards. We limit who inside the business can see your information to those who need it to do their job. No system is perfectly secure, so please don't send us anything sensitive by email.

Complaints

If you're unhappy with how we've handled your information, tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we handle your information we'll update this page and change the date below. Last updated 9 October 2026.

Company details

Heavenly Garden Store is a trading name of MCLEAN ENTERPRISE LTD
Registered in England and Wales, company number 13125475
Registered office: 124 City Road, London, EC1V 2NX
VAT registration number 494900954
info@heavenlygardenstore.com · 0333 050 4282