Privacy and GDPR Statement | Envisage Gardens

Envisage…gardens by design Company Privacy Policy

The team at Envisage…gardens by design are committed to protecting your privacy. We value our visitors and endeavour to create an enjoyable and safe experience when visiting our website.

This privacy policy will explain how our organization uses the personal data we collect from you when you use our website. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

Topics:

What data do we collect?
How do we collect your data?
How will we use your data?
How do we store your data?
How we contact you
What are your data protection rights?
What are cookies?
How do we use cookies?
What types of cookies do we use?
How to manage your cookies
Privacy policies of other websites
Changes to our privacy policy
How to contact us
How to contact the appropriate authorities

What data do we collect?

We receive, collect and store any information you enter on our website or provide us in any other way.

Envisage collects only the minimum amount of data we need. We collect the following data:

Personal identification information comprising Name, email address, phone number, postal address, your preferences or interests
On occasion, other information relevant to customer surveys and/or offers may also be requested

How do we collect your data?

You directly provide Envisage with most of the data we collect. We collect data and process data when you:

Register online or place an order for any of our products or services.
Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
Use or view our website via your browser’s cookies.

Envisage may also receive your data indirectly from the following sources:

Where you have registered to visit a show or exhibition and expressed interest in our services and have completed one of our enquiry forms. Your contact details will be entered into our CRM system for internal record keeping

How will we use your data?

Our Company collects non-personal and personal information so that we can:

Provide you (our users) with ongoing customer assistance and technical support
Process your order or request and manage your account.
Email you with timely gardening advice or notes pertaining to your garden project
Email you with special offers on other products and services we think you might like.
Contact you to make appointments about your project
Comply with any applicable laws and regulations

We may use this data to improve our products and services or to customise the website according to your interests

We will not sell, distribute or lease your personal information to third parties unless we have your specific permission or are required by law so to do.

Security - How do we store your data?

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect on line.

Our company website is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to display our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. Wix store your data on secure servers behind a firewall.

Envisage securely stores your data

On our Wix website. For further details about how Wix provides security for our website, see the bottom of the page*
Envisage also store client data on our in-house company server with strong 256 bit encryption, https and TLS 1.2plus protection
Envisage uses Xero accounting to process all sales data.Your details will be held on the Xero server for seven years to comply with HMRC regulations, after which time they will be manually deleted.

Our Company will keep your contact details for the duration of your design project. If you proceed from having us design your garden through to having Envisage install your garden, your details will remain on our database and server for seven years in-line with HMRC regulations. Once this time period has expired, we will delete your data manually from the website and our server, and the Xero accounts platform. If you have signed up to receive our newsletter, your contact details will remain in our CRM system on our Wix website, until such time as you unsubscribe.

How we may communicate with you, using this data

Envisage will use your personal contact details to make appointments with you to deliver your garden project, either by telephone, email or post.
Envisage may send you information about products and services of ours that we think you might like.
You may also have subscribed to us to receive a newsletter or timely gardening advice about your particular garden project
If you have agreed to receive such information detailed above, you may always opt out at a later date.
You have the right at any time to stop Envisage from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, please email us to let us know at office@envisage-gardens.co.uk

What are your data protection rights?

Envisage would like to make sure you are fully aware of all of your data protection rights.

Every user is entitled to the following:

The right to access – You have the right to request Envisage for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that Envisage correct any information you believe is inaccurate. You also have the right to request Envisage to complete the information you believe is incomplete.

The right to erasure – You have the right to request that Envisage erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that Envisage restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to Envisage’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that Envisage transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: office@envisage-gardens.co.uk

Call us at: 01905 885 321

Or write to us: Envisage…gardens by design at Grafton Nursery, Worcester Road, Grafton Flyford, Worcester WR7 4PW

Cookies

Cookies are data files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

For further information, visit allaboutcookies.org

How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including:

Keeping you signed in
Ensure that functionality operates as intended
Remember your choices and preferences during and between visits
Allows you to share pages via popular social media networks including Facebook and Twitter
Post enquiries via online forms
Track your visit for statistical analysis, allowing us to improve the usability, speed and security of our website.
Understanding how you use our website

What types of cookies do we use and Why does Wix use cookies?

Wix uses cookies for important reasons, such as:

To provide a great experience for your visitors and customers.
To identify your registered members (users who registered to your site).
To monitor and analyse the performance, operation and effectiveness of Wix's platform.
To ensure our platform is secure and safe to use.

There are a number of different types of cookies, however, our website uses:

Functionality – Our Company uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
Envisage uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and your IP address. Our Company sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners such as Google. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.

Cookies are not deployed to:

Collect any personal identifiable information (without your express permission)
Collect any sensitive information (without your express permission)
Pass data to advertising networks
Pass personally identifiable data to third parties
Pay sales commissions

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

To opt out of being tracked by Google Analytics across all websites, visit this link: http://tools.google.com/dlpage/gaoptout.

Privacy policies of other websites

The Envisage website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Our Company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 22nd December 2025.

Policy Changes: We reserve the right to modify and update this privacy policy at any time with or without prior notice, so please review it frequently to view any changes. Changes and clarifications will take effect immediately upon being posted on this website. However, be assured that if the privacy policy changes in the future, we will not use the personal info you submitted to us under this new policy in a way that is materially inconsistent with this current existing version, without your prior consent.

How to contact us

If you have any questions about Our Company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: office@envisage-gardens.co.uk

Call us: 01905 885 321

Or write to us at: Envisage…gardens by design at Grafton Nursery, Worcester Road, Grafton Flyford, Worcester WR7 4PW

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.

Email: https://ico.org.uk/global/contact-us/

*Wix protects customer data with a multi-layered approach,

using HTTPS/TLS encryption for data in transit, AES-256 encryption for data at rest (like in their PCI environment with HSMs), and strong physical/procedural security, including 24/7 monitoring, firewalls, and regular security audits (ISO/PCI compliant) to prevent breaches, ensuring data is secured from collection to storage. They also provide tools for site owners to manage user data, helping them comply with regulations like GDPR and CCPA.

Key Security Measures

Encryption:

In Transit: All sites get automatic HTTPS with SSL/TLS (TLS 1.2+) for secure data transfer.
At Rest: Data is encrypted using AES-256, with FIPS 140-2 certified Hardware Security Modules (HSMs) for critical data

Infrastructure & Access:

Firewalls & Intrusion Prevention: Protect against unauthorized access.
24/7 Monitoring: SOC-led monitoring of network traffic, system activity, and vulnerabilities.
Security Audits: Regular audits and penetration testing by security consultants.

Compliance & Standards:

PCI DSS Certified: Maintains high standards for handling payment information.
ISO Certified: Adheres to ISO security standards.

Secure Development:

Security by Design: Engineers build security into the platform from the ground up.

User & Site Owner Tools:

GDPR/CCPA Support: Tools to help users exercise data rights (access, deletion).
Data Minimization: Guidance for site owners to collect only necessary data.

How Site Owners Contribute

Secure Forms: We use Wix's built-in forms that leverage HTTPS.
Data Minimization: We only ask for essential information on forms.
Manage Consent: Implement clear opt-ins for marketing.
Use Strong Passwords: For our own Wix accounts.