Privacy
We collect as little as we can and we do not sell or share it for marketing. Halebank Christmas Trees is the data controller.
What we collect
Your name, address, mobile number, email address and any delivery notes you give us. If you fill in the demand survey, the answers plus an optional postcode and email. Card details are handled entirely by our payment provider and never reach our website.
Why we hold it
To take and deliver your order, to message you about that order, and to answer you if you contact us. Survey answers are used only to decide what to stock next year. Our lawful bases are performing our contract with you, and our legitimate interest in running the business.
Marketing
We only email you about next season if you have asked us to. Every message has an unsubscribe link, and unsubscribing does not affect anything else.
Who else sees it
These companies handle information for us, each only so far as they need it to do their job. We do not sell your data or pass it to anyone for their own marketing.
- Stripe, to take your payment. Your card details go straight to Stripe and never reach our website.
- Resend, to send you email about your order.
- Twilio, to send you text messages about your order.
- Vercel, which hosts the website.
- Neon, which stores the order database.
- Cloudflare, which stores and delivers the photographs on the site.
- Sentry, which tells us when something on the site breaks.
Each of them has its own privacy notice, linked from the company names above.
Where your information goes
Some of these companies are based outside the United Kingdom. Where your information leaves the UK, we rely on the safeguards that UK data protection law requires, which are part of our written agreement with each of them. If you want to know more about that, email us and we will explain it.
How long we keep it
Order and payment records for six years, because HMRC requires it. Delivery notes are deleted at the end of the season. Survey answers are deleted once we have placed the following year's order. When somebody checks a postcode and we do not deliver there, we keep the postcode on its own, with no name and no contact details, for two years, so we can see where to go next.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@halebankchristmastrees.co.uk and we will respond within one month, free of charge. If you are not happy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
The site sets only the cookies it needs to work: keeping your basket and remembering your postcode check. No advertising or tracking cookies, which is why there is no banner. If that changes we will ask your consent first.