Privacy Policy

Last updated: 11 September 2025

Privacy Policy

Data Controller

GREEN POWER MACHINERY LTD (Company Number: 16127368) is the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact details of the Data Controller / DPO

Data Protection / Privacy contact: GREEN POWER MACHINERY LTD

Email: greenpowermachineryltd@gmail.com

Telephone: 07572321111

Registered office: Unit 3, Mercian Close, Longden Road Industrial Estate, Shrewsbury SY3 9EA

1. Introduction

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how GREEN POWER MACHINERY LTD (“we”, “us”, “our”) collects, uses, stores and shares personal data when you visit or interact with our website, purchase goods or services from us, contact us, or otherwise provide information.

2. Collected Personal Data

We may collect the following personal data, as relevant to the service you request:

Identity & contact: name, title, billing & delivery address, email address, telephone numbers.
Transaction & payment: payment card details (processed by our payment provider), order history, invoices.
Account data: username, hashed password, account preferences.
Communications: records of your communications with us (emails, phone calls, messages).
Technical & usage: IP address, browser and device information, cookies and site analytics.
Marketing preferences: consent records and opt-out choices.

If you do not want to provide certain required data (e.g. billing address), we may be unable to provide you with certain products or services.

3. Purpose of collecting data & lawful basis

We collect and process personal data for the following purposes and lawful bases:

To perform our contract with you (e.g. to process and deliver orders, provide service and repair). (Lawful basis: contract).
To comply with legal obligations (e.g. tax, accounting, warranty periods, dispute resolution). (Lawful basis: legal obligation).
For our legitimate business interests (e.g. fraud prevention, business analytics, improving services, marketing to existing customers) provided those interests are not overridden by your rights. (Lawful basis: legitimate interests).
Where we rely on consent (e.g. for email marketing or certain cookies), we will ask for and record consent and you can withdraw it at any time. (Lawful basis: consent).

4. Cookies & tracking

Our website uses cookies and similar technologies to provide functionality, measure site performance and personalise content. You can manage cookie preferences through our cookie banner and browser settings. See our Cookie Policy for full details.

5. Sharing your data

We may share personal data with:

Payment processors and finance providers to complete transactions.
Delivery couriers and logistics partners to fulfil orders.
Service partners and manufacturers for warranty and repair purposes.
IT and hosting providers (including cloud services) who store or process data on our behalf.
Professional advisers (accountants, solicitors) where necessary to comply with legal obligations.
Public authorities where required by law.

We require third parties to respect the security of your data and only process it as instructed.

6. International transfers

If we transfer personal data outside the UK, we will ensure an adequate level of protection (e.g. adequacy decisions, standard contractual clauses, or other appropriate safeguards) in accordance with UK data protection law.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and accidental loss, destruction or damage. Access to personal data is limited to staff and partners who need it to perform their duties.

8. Data retention

We retain personal data only as long as necessary for the purposes set out above, including to meet legal, accounting, tax and reporting requirements. Typical retention examples you may adopt:

Transaction and contract records: up to 6–7 years (to meet accounting and statutory limitation requirements).
Marketing data: until consent is withdrawn or you opt out.
Accounts and login data: until account deletion plus a reasonable period for backups and legal obligations.

If you would like specific retention periods for particular categories, include them here.

9. Your rights

Under UK GDPR you have rights including:

Right of access to your personal data.
Right to rectification (correct inaccurate data).
Right to erasure (in certain circumstances).
Right to restriction of processing.
Right to data portability (where processing is by automated means and based on consent or contract).
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent at any time (where processing is based on consent).

To exercise any right, contact us using the contact details above. We will respond within statutory timeframes unless an exemption applies.

10. Automated decision-making & profiling

We do not carry out automated decision-making that produces legal effects concerning you. If we do in future, we will notify you and explain the logic and safeguards.

11. Complaints

If you have concerns about how we process your personal data, please contact us in the first instance using the contact details above. You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/.

12. Changes to this privacy policy

We may update this privacy policy from time to time. We will publish the updated version on our website and update the “Last updated” date above.