Privacy Policy

Last Updated: 16 April 2026

1. Who We Are

STROPPY STUFF LTD ("we", "us", "our") is the data controller responsible for your personal data. We are a company registered in England and Wales.

Registered Address: 7 Rose Eglos Close,Falmouth, TR11 5DU United Kingdom
Email: admin@stroppystuff.garden
Website: stroppystuff.garden

This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018) and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Information We Collect

We may collect and process the following categories of personal data:

Identity Data: name, job title.
Contact Data: email address, telephone number, postal address.
Technical Data: IP address, browser type and version, time-zone setting, operating system, device information.
Usage Data: information about how you use our website and services.
Communications Data: information contained in any correspondence you send to us.

We do not collect any Special Category Data (as defined under UK GDPR Article 9) unless explicitly required and with your explicit consent.

3. How We Collect Your Data

We collect personal data through:

Direct interactions — when you fill in forms, correspond with us, or request our services.
Automated technologies — as you navigate our website, we may automatically collect Technical Data using cookies and similar technologies (see our Cookie Policy).
Third parties — analytics providers such as Google Analytics.

4. Lawful Basis for Processing

Under UK GDPR Article 6, we rely on the following lawful bases:

Purpose	Lawful Basis
Responding to your enquiries	Contractual necessity (Art. 6(1)(b)) / Legitimate interests (Art. 6(1)(f))
Providing our services	Performance of a contract (Art. 6(1)(b))
Sending marketing communications	Consent (Art. 6(1)(a))
Website analytics and improvement	Legitimate interests (Art. 6(1)(f))
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))

5. How We Use Your Data

To provide, maintain and improve our services.
To respond to enquiries and communicate with you.
To comply with our legal and regulatory obligations.
To send you marketing communications where you have opted in.
To analyse website usage and improve user experience.
To detect, prevent and address fraud or technical issues.

6. Data Sharing

We may share your personal data with:

Service providers — hosting companies, email service providers and IT support who process data on our behalf under written contracts.
Analytics providers — such as Google Analytics (see Section 9).
Professional advisers — lawyers, accountants and auditors where necessary.
Law enforcement or regulators — where required by law or to protect our legal rights.

We do not sell your personal data to any third party.

7. International Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place as required by UK GDPR, including:

Transfers to countries with an adequacy decision from the UK Secretary of State.
Use of the International Data Transfer Agreement (UK IDTA) or UK Addendum to the EU Standard Contractual Clauses.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact and enquiry data is typically retained for 24 months after your last interaction with us, after which it is securely deleted or anonymised.

9. Cookies and Similar Technologies

Our website uses cookies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR). Non-essential cookies are only placed with your prior consent. For full details, please see our Cookie Policy.

10. Your Rights Under UK GDPR

Under the UK GDPR and DPA 2018, you have the following rights:

Right of access (Article 15) — to obtain a copy of your personal data.
Right to rectification (Article 16) — to correct inaccurate data.
Right to erasure (Article 17) — to request deletion of your data ("right to be forgotten").
Right to restriction of processing (Article 18) — to limit how we use your data.
Right to data portability (Article 20) — to receive your data in a structured, machine-readable format.
Right to object (Article 21) — to object to processing based on legitimate interests or for direct marketing.
Rights relating to automated decision-making (Article 22) — not to be subject to decisions based solely on automated processing.
Right to withdraw consent — at any time where processing is based on consent.

To exercise any of these rights, please contact us at admin@stroppystuff.garden. We will respond within one month as required by law.

11. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 13 without appropriate consent, we will delete that data promptly in line with the ICO's Age Appropriate Design Code.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include SSL/TLS encryption, access controls, and regular security reviews.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: admin@stroppystuff.garden
Address: 7 Rose Eglos Close,Falmouth, TR11 5DU United Kingdom