1) Introduction and who we are (Data Controller)
This Privacy Policy applies to the website emeraldhaven.ie and the services offered by Emerald Haven Gardens. We are an Irish online garden centre and gardening knowledge hub specialising in plants and supplies suited to Irish conditions, including native plants Ireland gardeners use for biodiversity, peat-free compost, and practical advice for small urban spaces such as Dublin balconies and patios.
For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, Emerald Haven Gardens is the “data controller” of the personal data described in this policy. This means we decide how and why your personal data is processed when you use our website, contact us for advice, or place an order.
Controller identity
Legal name: Emerald Haven Gardens
Website: emeraldhaven.ie
General email: [email protected]
Registered address / fulfilment base
Unit 4, Ballyogan Business Park, Enniskerry Road, Kilternan, Dublin 18, D18 R2W3, Ireland
Phone: +353 1 406 0555
2) Personal data we collect
We collect only the information needed to operate an Irish online garden centre and advice service and to improve our content. Depending on how you use the site, we may collect the following categories of personal data:
Data categories (summary)
This list is specific and intended to be clear. If you do not provide certain details, some services may not be possible.
| Category | Examples | When collected |
|---|---|---|
| Identity data | Full name | When you contact us or place an order |
| Contact data | Email address, phone number | Contact forms, order and delivery support |
| Technical data | IP address, device and browser info, referral source | When you browse the site (server logs, analytics) |
| Usage data | Pages viewed, clicks, time on page, interactions | With analytics cookies if you consent |
| Cookie data | Cookie identifiers, preferences | When you set preferences in our cookie banner |
| Communications data | Message content and attachments you send us | When you request advice (for example about small garden Dublin planting) |
We do not intentionally collect sensitive categories of data (special category data) such as health information, financial status, political opinions, or religious beliefs. Please do not include sensitive details in your messages when requesting gardening advice. If you send such information, we will process it only to respond to your request and may delete it where appropriate.
3) How we collect personal data
We collect data in a few straightforward ways, connected to typical use of an online garden centre and advice hub:
Web forms
When you use our contact form, you provide your name, email address, and the message you choose to send. Many gardeners ask about Irish microclimates, peat-free compost selection, or climate-resilient planting for Wicklow, Dublin, Cork, Galway, or the west coast.
Cookies and similar technologies
We use cookies to remember preferences and to understand how visitors use our content. Analytics and marketing cookies are optional and depend on your consent via the cookie banner.
Analytics tools
If you consent, we may use Google Analytics 4 (GA4) to measure site performance and content usefulness. For example, we may see that visitors spend more time on native plants Ireland pages or on small urban garden planning, which helps us improve our guides.
Server logs
Like most websites, our servers automatically record basic technical information such as IP address, device type, and request time. This helps us keep the site secure, prevent abuse, and troubleshoot errors.
4) Legal basis for processing (GDPR Article 6)
We process personal data only when we have a lawful basis under GDPR Article 6. The basis depends on the type of data and why we are using it. The most relevant bases for our services are:
Legal bases by activity
This table is designed to be transparent, not vague.
| Activity | Data involved | Legal basis |
|---|---|---|
| Responding to advice enquiries | Name, email, phone (optional), message content | Legitimate interests (Art. 6(1)(f)) and, where relevant, steps prior to entering a contract (Art. 6(1)(b)) |
| Order and delivery communications | Name, email, phone, delivery details | Contract (Art. 6(1)(b)) |
| Site security and fraud prevention | IP address, device info, server logs | Legitimate interests (Art. 6(1)(f)) |
| Analytics to improve content | Usage data, cookie identifiers | Consent (Art. 6(1)(a)) where required for analytics cookies |
| Marketing and retargeting | Cookie identifiers, events (where enabled) | Consent (Art. 6(1)(a)) for marketing cookies/pixels |
| Legal compliance | Order records and communications where relevant | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent (for example for optional analytics and marketing cookies), you may withdraw consent at any time. The simplest way is to clear your site storage in your browser so the cookie banner reappears, then choose Reject. You can also contact us using the details in the Contact section below.
5) Purposes of processing: why we use personal data
We use personal data for practical reasons connected to running an online garden centre and advice hub in Ireland. Typical purposes include:
- Customer support and advice: responding to enquiries about native plants Ireland selections, peat-free compost, rewilding Ireland projects, or small garden Dublin container solutions.
- Service delivery: processing orders, coordinating packing, dispatch, and courier delivery across Ireland.
- Site improvement and content planning: understanding which pages and guides are most useful (for example pollinator garden 2026 or edible garden Ireland resources), and improving navigation and clarity.
- Marketing (consent-based): where you consent, we may measure campaign performance and deliver relevant ads on platforms such as Google and Meta.
- Security and fraud prevention: monitoring for abusive traffic, protecting forms from spam, and maintaining site integrity.
- Legal and compliance: handling formal requests and keeping records where required by Irish and EU law.
No selling of personal data
Emerald Haven Gardens does not sell personal data to third parties. Where we share data with service providers (for example hosting or analytics), it is for the purpose of running and improving our services, under appropriate contracts and safeguards.
6) Retention periods
We keep personal data only for as long as needed for the purposes described above. Retention depends on the type of data, legal obligations, and operational needs. Our standard retention periods are:
Retention schedule
Where possible we delete or anonymise data when it is no longer needed.
| Data type | Retention period | Reason |
|---|---|---|
| Contact form submissions | 2 years | To provide follow-up support and maintain a support history |
| Customer service emails | 2 years | To resolve issues and improve service quality |
| Analytics data (GA4) | 14 months | To analyse trends over time while limiting long-term tracking |
| Cookie preferences | Up to 12 months | To remember your choices and reduce repeated prompts |
| Server logs | 90 days | Security monitoring and troubleshooting |
| Email marketing list (if used) | Until you unsubscribe + 30 days | To honour opt-outs and maintain suppression lists |
If you request deletion, we will delete or anonymise your data unless we need to keep certain records for legal reasons or to establish, exercise, or defend legal claims. If we cannot delete specific records immediately, we will explain why.
8) International transfers
Emerald Haven Gardens is based in Ireland. Some of our service providers (for example analytics, marketing platforms, hosting, or email tools) may process personal data outside the European Economic Area (EEA), including in the United States. When personal data is transferred outside the EEA, we use appropriate safeguards, which may include:
- Adequacy decisions where the European Commission has determined an adequate level of protection for the receiving country or framework.
- Standard Contractual Clauses (SCCs) approved by the European Commission, alongside supplementary measures where necessary.
- Data processing agreements that define confidentiality, security obligations, and limitations on use.
If you would like more information about the safeguards used for a specific transfer, contact us at [email protected].
9) Your rights under the GDPR
If you are in the EEA or UK, you have rights under data protection law. These rights are not absolute, but we will respond to requests promptly and fairly. Your rights include:
Right of access
You can ask for a copy of the personal data we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete data.
Right to erasure
You can ask us to delete your personal data in certain situations.
Right to restriction
You can ask us to limit processing in specific circumstances.
Right to data portability
You can request data you provided in a structured, commonly used format where applicable.
Right to object
You can object to processing based on legitimate interests, and to direct marketing.
Right to withdraw consent: where we rely on consent (for example for optional marketing cookies), you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
How to exercise your rights
Email [email protected] from the address you used to contact us. Please state which right you want to exercise and provide enough detail for us to locate your records (for example the date of a message or the county you mentioned in your gardening enquiry). We may request additional information to verify your identity, but we will keep verification to what is reasonable and proportionate.
Right to complain
If you believe our handling of your personal data infringes data protection law, you have the right to lodge a complaint with the Irish supervisory authority: Data Protection Commission (Ireland). You can find contact details on the DPC website. We encourage you to contact us first so we can try to resolve the issue directly and promptly.
11) Children’s privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data to us, please contact [email protected] and we will take steps to delete the information where appropriate.
12) Changes to this policy
We may update this Privacy Policy to reflect changes in legal requirements, our services, or how we use cookies and analytics. When we make changes, we will update the “Last Updated” date at the top of this page. If changes are significant, we may also provide a notice on the website.
Last Updated: January 15, 2026.
13) Contact details and Data Protection contact
If you have questions about this policy, want to exercise your GDPR rights, or want to ask how cookies work on our site, contact us using the details below. We aim to respond within a reasonable timeframe and no later than the deadlines set by applicable law.
Privacy contact (DPO-style contact)
Email: [email protected]
If you are requesting deletion or access, please write from the email address you used previously so we can verify your request efficiently.
Postal address
Emerald Haven Gardens
Unit 4, Ballyogan Business Park
Enniskerry Road, Kilternan
Dublin 18, D18 R2W3
Ireland
Related pages
For service rules and limitations, see our Terms. To contact us about orders or gardening advice for Irish conditions, visit Contact Us.
Have a question about cookies or data?
If you are unsure what to share when asking for gardening advice, send a short note and we will guide you. You never need to share sensitive personal information to get help choosing plants for Irish weather.
Privacy FAQs
Concise answers, written to be easy to reuse in help content.
Do you sell my personal data?
No. Emerald Haven Gardens does not sell personal data. We share limited data with service providers only to run the site, deliver orders, and provide support.
What data do you collect when I contact you for advice?
Typically your name, email address, and the message you send. A phone number is optional. Please avoid including sensitive personal information.
How long do you keep contact form messages?
We keep contact form submissions for 2 years to provide follow-up support and maintain a support history, then we delete or anonymise them where possible.
Do you use Google Analytics 4 (GA4)?
We may use GA4 to measure site performance and improve our content, such as native plants Ireland and small garden Dublin guides. Analytics cookies are used only when you consent.
How do I change my cookie preference?
Clear your browser storage for emeraldhaven.ie and refresh the page so the cookie banner is shown again, then choose Accept or Reject.
How do I request a copy of my data or ask for deletion?
Email [email protected] from the email address you used previously. Tell us what you want (access, correction, deletion) and provide details to help us locate your records.
Who can I complain to if I am unhappy with your response?
You have the right to complain to the Data Protection Commission (Ireland). We encourage you to contact us first so we can try to resolve the issue quickly.