Privacy Policy

SGP Garden Machinery Ltd

Registered in England and Wales

Trading address: Units 1-2, Kingsfield Industrial Estate, Derby Road, Wirksworth, Derbyshire, DE4 4BG

Email: info@sgpuk.co

Phone: 01629 823783

We are a family-run business providing machinery sales, servicing, and repairs. We act as the Data Controller, meaning we are responsible for deciding how your personal information is handled.

We may collect and process the following information about you:

a) Information you provide directly

• Your name, address, email address, and phone number

• Machinery details for servicing or repairs

• Payment details (processed securely and never stored in full)

• Correspondence when you contact us by phone, email, or web form

b) Information collected automatically

• IP address and browser information when visiting our website

• Cookies and analytics data (see section 10)

c) Information from third parties

If you contact us via social media or through third-party platforms (e.g., payment providers or manufacturer warranty systems), we may receive limited information necessary to complete your request.

We use your personal data to:

• Process orders, repairs, and service bookings

• Communicate with you about your account, booking, or delivery

• Issue invoices and manage payments

• Provide updates on products, warranties, or recalls

• Improve our services and customer experience

• Comply with legal obligations (e.g., tax, safety, or warranty reporting)

We do not sell, rent, or share your information with other companies for marketing purposes.

We process your personal data under the following legal grounds:

• Contractual necessity – to fulfil an order, repair, or service request

• Legitimate interest – to improve services, manage relationships, and maintain business operations

• Legal obligation – to comply with tax, safety, and consumer regulations

• Consent – for marketing communications (where opted in)

We take data security seriously.

• Your data is stored securely on protected systems with restricted access.

• Any paper records (e.g., service sheets) are held securely and destroyed when no longer required.

• Online payments are processed via secure, PCI-compliant gateways.

• We never store full card details.

We retain customer data only as long as necessary for the purposes collected, typically 7 years for accounting and warranty records.

We may share limited information with:

• Delivery providers for order fulfilment

• Payment processors (e.g., card terminals, online gateways)

• Manufacturers or warranty agents when processing warranty claims

• IT and website service providers who support our business systems

All third parties are required to handle your data in accordance with UK data protection law.

You have the right to:

• Request a copy of the personal data we hold about you

• Correct or update inaccurate information

• Request deletion of your data ('right to be forgotten')

• Object to or restrict certain data processing

• Withdraw consent for marketing communications

To exercise your rights, please contact us at:

📧 info@sgpuk.co

We aim to respond to all requests within 30 days.

We may occasionally send you information about new products, promotions, or services if you've chosen to receive such updates.

You can opt out of marketing at any time by:

• Clicking 'unsubscribe' in any email, or

• Contacting us directly at info@sgpuk.co

We never send unsolicited marketing messages.

For the safety of our customers, staff, and property, CCTV may operate in certain areas of our premises. Footage is securely stored and automatically deleted after a set period unless required for security or legal reasons.

Our website uses cookies and limited analytics tools to help us understand how visitors use our site.

Cookies are small text files stored on your device that collect anonymous usage data.

You can manage or disable cookies in your browser settings, though some parts of the site may not function correctly without them.

In the unlikely event of a data breach, we will:

• Notify the relevant data protection authorities within 72 hours, if required by law.

• Inform affected individuals promptly if their personal data is at risk.

We may update this Privacy Policy from time to time to reflect changes in our operations or legal requirements.

The latest version will always be available on our website, with the revision date shown at the top of this page.