01 Who we are
This Privacy Policy explains how Boma Garden, the trading name of The Boma Garden Centre Ltd, collects, uses and protects your personal data. Our business address is 51–53 Islip Street, Kentish Town, London, NW5 2DL, United Kingdom.
The Boma Garden Centre Ltd is responsible for personal data processed in connection with bomagarden.shop and acts as the data controller where applicable.
Contact: sales@bomagardencentre.co.uk | Tel: +44 20 7284 4999
This policy explains how we handle personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
02 What data we collect
Information you give us directly
- Identity data: first name and last name
- Contact data: email address, telephone number, delivery and billing address
- Payment data: payment details are handled by the relevant payment provider; we do not intend to store full payment card details
- Order data: details of products purchased, delivery preferences and order history
- Communication data: content of emails, enquiries or messages you send us
- Marketing preferences: whether you have opted in to receive marketing from us
Data we collect automatically
- Technical data: IP address, browser type, operating system and device identifiers
- Usage data: pages visited, time on site, referring URLs and interactions with the website
- Cookie data: information collected through cookies and similar technologies, as described in our Cookie Policy
Data from third parties
Depending on the services used to operate our store, we may receive limited information from payment providers, delivery companies and analytics services. This may include payment status, delivery tracking events or website usage information. We do not purchase third-party marketing lists.
03 How we use your data
- Processing and fulfilling your orders, including delivery and returns
- Sending order confirmations, dispatch notifications and delivery updates
- Responding to enquiries and providing customer support
- Sending marketing communications where you have given the required consent
- Understanding and improving our website, products and services
- Helping prevent fraud and protect payment transactions
- Meeting legal and regulatory obligations, including applicable accounting and tax requirements
- Managing customer enquiries about indoor and outdoor plants, handmade pots, compost, plant food, gardening accessories and garden-care products
04 Legal bases for processing
- Contract performance — processing and fulfilling your orders and providing services you request
- Legal obligation — maintaining records and complying with applicable legal requirements
- Legitimate interests — protecting our business, preventing fraud, maintaining website security and improving our services where these interests do not override your rights
- Consent — sending consent-based marketing and using optional cookies or similar technologies where consent is required
Where we rely on legitimate interests, we consider the potential impact on your rights and freedoms and use your information only where those interests are not overridden by your interests or fundamental rights.
05 Who we share your data with
We may share relevant personal data with service providers where necessary to operate our business and fulfil your requests. These may include:
- Website and ecommerce providers — hosting and operating our online store
- Payment processors — processing payments and related transaction checks
- Delivery companies — arranging delivery and providing tracking information
- Email and communications providers — sending order-related messages and, where permitted, marketing communications
- Analytics providers — helping us understand website performance where these services are enabled
- HMRC, regulators and legal authorities — where disclosure is required by law or necessary to protect legal rights
We do not sell your personal data or rent it to third parties for their own marketing purposes.
06 International transfers
Some providers involved in operating our website or processing customer information may process data outside the United Kingdom. Where personal data is transferred internationally, we take steps to ensure that an appropriate legal safeguard is in place, where required. These safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for further information about relevant safeguards.
07 Your rights
Under UK data protection law, you may have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request erasure where there is no lawful reason for us to retain it
- Request restriction of processing
- Receive certain information in a portable format
- Object to processing based on legitimate interests or direct marketing
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at sales@bomagardencentre.co.uk. We will respond within the time limits required by applicable data protection law. In most cases, this is one month.
08 Data retention
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting and reporting requirements. Retention periods may vary depending on the type of information and the circumstances.
- Order and transaction records: retained for the period required by applicable tax and accounting laws
- Customer account data: retained while the account remains active and for a reasonable period afterwards where necessary
- Marketing consent records: retained while you remain subscribed and, where necessary, afterwards to record and respect your opt-out
- Website analytics data: retained according to the settings and retention periods of the analytics services in use
- Customer enquiries: retained for as long as needed to respond and deal with any related follow-up
09 Cookies
Our website may use cookies and similar technologies to operate the online store, remember preferences, understand website usage and support relevant marketing activities where enabled. Full details are provided in our Cookie Policy.
You can manage optional cookie preferences through the cookie consent tool available on our website, where provided, or through your browser settings.
10 Marketing communications
We will send marketing emails where you have provided consent or where another lawful basis applies. Where consent is required, you can withdraw it at any time. Each marketing email will include an unsubscribe option where applicable.
You can also contact us at sales@bomagardencentre.co.uk with the subject "Unsubscribe" to ask us to stop sending marketing emails. Opting out of marketing will not affect essential service communications relating to your orders or enquiries.
11 Security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures may include secure website connections, access controls and appropriate account security practices. No method of transmitting or storing information can be guaranteed to be completely secure.
12 Contact & complaints
The Boma Garden Centre Ltd (trading as Boma Garden)
51–53 Islip Street
Kentish Town, London
NW5 2DL
United Kingdom
Email: sales@bomagardencentre.co.uk
Telephone: +44 20 7284 4999
Website: bomagarden.shop
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve your concern.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint | Helpline: 0303 123 1113.