Privacy & Cookies policy

 

Greenshop Paints customer privacy notice

Registered name: Eleventh Green Ltd

This privacy notice explains how we collect, use and protect your personal information when you visit or make purchases from our website.

At Greenshop we are committed to safeguarding and preserving the privacy of our visitors. This Policy explains what happens to any personal data that you provide to us, or that we collect from you whilst you visit our site and how we use cookies on this website.

We do update this Policy from time to time so please do review this Policy regularly.

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  •  Names and contact details

  • Addresses

  • Purchase or account history

  • Payment details (IE CCV card information) is not stored by use, only by the card processor used to facilitate the transaction. (Paypal / Stripe / Shopify / Link etc). Our website only holds the last 4 digits of the card, and a transaction ID to link to the sale. 

  • Website user information including user journeys and cookie tracking

  • Communications and correspondence such as emails, messages or enquiries you send to us

We collect or use the following information for service updates or marketing purposes:

·         Names and contact details

·         Addresses

·         Marketing preferences

·         Location data

·         IP addresses

·         Website and app user journey information


Lawful bases and your data protection rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information.

When you purchase goods or services from us, we process your personal information because it is necessary to fulfil a contract with you. For example, we need to process your details in order to accept payment, deliver products and provide customer support.

Where you choose to receive marketing communications from us, we rely on your consent to send those communications.

Under UK data protection law you have a number of rights in relation to your personal data. These include the right to request access to your personal information, request correction of inaccurate data, request deletion of your data, restrict or object to how your data is used, and request transfer of your data to another organisation.

You also have the right to withdraw consent for marketing communications at any time.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Where we get personal information from

We collect personal information directly from you when you place an order, contact us or subscribe to marketing communications. We may also collect information automatically through technologies used on our website, such as cookies and analytics tools.

 How long we keep information

We only keep personal information for as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements.

Typical retention periods include:

·         Order and transaction records - retained for up to 6 years to comply with UK tax and accounting requirements

·         Customer account information - retained while an account remains active or as needed to provide services

·         Marketing consent records - retained until consent is withdrawn or the individual unsubscribes

·         Website analytics data - retained for a limited period based on analytics settings

·         Customer service correspondence - retained only as long as necessary to resolve enquiries and maintain service records

Where we no longer need personal information, it is securely deleted or anonymised.

Who we share information with

Ecommerce platform providers - Shopify (and connected apps) process customer accounts and manage order and checkout information.

Payment processors - payment card processors who process credit and debit card payments and store payment data.

Website analytics providers  - Provide analytics tools that help us understand how visitors use our website and improve website performance and user experience.

Online advertising and marketing platforms – Such as Google, Facebook & other social media platforms. They provide advertising services, remarketing, audience measurement and campaign performance reporting.

Email marketing service providers - Manage email newsletters, marketing communications and subscriber lists where users have consented to receive marketing.

Delivery providers - Such as Royal Mail. They deliver customer orders and provide shipment tracking services.

Website security and hosting infrastructure providers - Provide website hosting infrastructure, security monitoring and protection against fraud or malicious activity.

Sharing information outside the UK

Some of the organisations that provide services to us may process personal information outside the United Kingdom. When this happens, we ensure that appropriate safeguards are in place to protect your personal data in accordance with UK data protection law. These safeguards may include the use of approved contractual clauses.

If you would like more information about how personal data may be transferred outside the UK, please contact us using the details provided above.


Cookies, analytics and advertising
Our website uses cookies and similar technologies to provide and improve website functionality, understand how our website is used, and support advertising activities.

Analytics
We use analytics tools to understand how visitors interact with our website, such as which pages are visited and how users navigate the site. This helps us improve website performance and user experience.

Advertising and remarketing
We may use advertising platforms to measure the effectiveness of our advertising campaigns and to show relevant ads to users who have visited our website.

Where required by law, we will ask for your consent before using non-essential cookies and similar technologies. You can manage your cookie preferences at any time using our cookie settings.

Targeted advertising to existing customers
In some cases, advertising platforms may use identifiers such as email addresses (for example where you have subscribed to marketing communications) to help deliver relevant advertising to existing customers on third-party platforms. We only use this type of advertising where we have a lawful basis to do so, such as where you have given consent to receive marketing communications. Identifiers are typically converted into a secure, hashed format before being used for matching.

Social media platforms

We maintain accounts on social media platforms to communicate with customers and promote our products and services. If you interact with us on these platforms (for example by commenting, messaging or following our accounts), the platform provider may process your personal information in accordance with their own privacy policies.

We may also use advertising tools provided by these platforms to display relevant advertisements to users who have previously visited our website or interacted with our content.

Changes to this privacy notice

We may update this privacy notice from time to time to reflect changes in our services, legal obligations, or how we process personal information. When we make updates, we will revise the “last updated” date at the bottom of this page.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
 Wycliffe House
 Water Lane
 Wilmslow
 Cheshire
 SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint


 Our Contact details

Post: Greenshop Paints, Bisley, STROUD, Gloucestershire, GL6 7BX, GB

 Email: hello@greenshoppaints.co.uk   Phone: 01452 772020


 Last updated March 2026