Privacy Policy

Effective Date: September 5, 2026

Ardcarne Garden Centre
Website: www.ardcarnegarden.com
Contact Email: luvik@ardcarnegarden.com
Contact Address: Ardcarne, Boyle, Co. Roscommon, F52 RY61, Ireland
Contact Telephone: +353 87 241 2550‌

1. Introduction

Welcome to the privacy policy of Ardcarne Garden Centre, operating the e-commerce platform accessible at www.ardcarnegarden.com. This document is designed to transparently inform all users, visitors, and customers of our website about how we collect, use, store, process, and protect your personal data when you interact with our online shopping platform, purchase our horticultural products, garden supplies, landscaping services, and other offerings available through our digital storefront.

As a family-run garden centre based in the heart of County Roscommon, Ireland, we have built our reputation over decades on trust, personalized customer service, and a deep respect for the privacy of every person who chooses to engage with our business. This privacy policy has been drafted in full compliance with the General Data Protection Regulation (GDPR) (EU 2016/679), the Irish Data Protection Act 2018, and all other applicable data protection regulations governing e-commerce operations in Ireland and the European Economic Area (EEA). We are committed to upholding the highest standards of data privacy, and this policy outlines exactly what rights you hold over your personal information, and how we uphold those rights at every step of your shopping journey with us.

This policy applies to all data collection activities that take place on www.ardcarnegarden.com, including when you browse our product catalog, create a customer account, place an order, sign up for our seasonal gardening newsletter, submit a product review, contact our customer support team, participate in our seasonal loyalty program, or interact with any interactive features hosted on our e-commerce site. We encourage all users to read this full document carefully before accessing or using our platform, as by continuing to browse, create an account, or make a purchase on www.ardcarnegarden.com, you acknowledge that you have read, understood, and agree to the terms laid out in this privacy policy.

2. Data Controller Identification

For the purposes of all applicable data protection laws, the data controller responsible for your personal information is Ardcarne Garden Centre, with our registered physical premises located at Ardcarne, Boyle, Co. Roscommon, F52 RY61, Ireland. If you have any questions, concerns, or requests related to your personal data or this privacy policy, you can reach our dedicated data protection team at any time via email at luvik@ardcarnegarden.com, or over the telephone on +353 87 241 2550‌ during our business hours of 9am to 6pm, Monday to Saturday. You may also send formal written correspondence to our physical address listed above, and we will respond to all legitimate data protection enquiries within the statutory 30-day timeframe required by Irish and EU law.

3. Categories of Personal Data We Collect

We only collect personal data that is directly relevant to delivering a secure, convenient, and personalized e-commerce shopping experience for you, and we never gather more information than is strictly necessary for the stated purposes for which it is collected. The categories of personal data we may process include the following:

3.1 Data You Provide Voluntarily to Us

This is all information that you actively share with us when using our platform:

  • Account Registration Data‌: When you create a customer account on www.ardcarnegarden.com, we collect your full name, a valid email address, a securely hashed password of your choosing, and an optional display name that will appear alongside any product reviews you submit.
  • Order and Transaction Data‌: When you place a purchase on our e-commerce site, we collect your full billing and delivery address, contact telephone number, payment details (note that we never store full credit or debit card numbers on our own servers, all payment processing is handled through PCI DSS certified third-party payment gateways), specific product selections, order value, delivery preferences, and any special instructions you provide for your order such as plant care requirements or safe leave delivery notes.
  • Newsletter and Marketing Preference Data‌: If you opt in to receive our seasonal gardening newsletter, exclusive discounts, and event updates for our in-centre workshops, we collect your email address, and optional data such as your gardening skill level, preferred plant types, and the size of your garden, to ensure that the marketing communications we send are tailored to your specific interests.
  • Customer Support Correspondence Data‌: When you contact us via email, our site contact form, or telephone with a question, product query, return request, or feedback, we keep a record of your communications including your contact details, the content of your message, and our team’s response, to ensure we can provide consistent, high quality support across all interactions.
  • User Generated Content‌: If you submit a product review, upload a photo of your garden using plants purchased from Ardcarne Garden Centre, or post a comment on our blog section, we collect that content alongside your associated account details to display on our website for the benefit of other shoppers.

3.2 Data Collected Automatically When You Visit Our Website

When you browse www.ardcarnegarden.com, our systems automatically collect certain technical data to help us improve site performance, troubleshoot technical issues, and understand how visitors interact with our e-commerce platform. This data includes your Internet Protocol (IP) address, browser type and version, operating system details, geolocation data (limited to country and county level only, we do not track precise real-time location), the pages of our site you visit, the time and date of your visit, the duration of your session, the referring website that directed you to our platform, and clickstream data showing which product listings you view or add to your shopping cart. This data is collected via cookies and similar tracking technologies, and we provide a full cookie management panel on our site homepage that allows you to adjust your tracking preferences at any time.

4. Legal Bases for Processing Your Personal Data

All of our processing activities for your personal data are rooted in one or more of the legal bases defined under GDPR, specifically:

  1. Performance of a Contract‌: The processing of your order, delivery, and payment data is necessary to fulfill the sales contract we enter into with you when you make a purchase on our platform, to process your payment, arrange for delivery of your products, and handle any returns, refunds, or warranty claims associated with your order.
  2. Legitimate Interests‌: We process limited technical browsing data, anonymized site usage data, and basic customer contact information to maintain the security of our e-commerce platform, prevent fraud, improve our product offerings, troubleshoot technical glitches, and send you service-related updates about your ongoing orders. We have carried out a full legitimate interests assessment to confirm that this processing does not override your fundamental privacy rights, and you have the right to object to this processing at any time by contacting our support team.
  3. Consent‌: We only send you non-essential marketing communications such as our seasonal newsletter, exclusive discount offers, and event updates if you have explicitly opted in to receive them. You can withdraw this consent at any time, either by clicking the unsubscribe link included at the bottom of every marketing email we send, or by contacting us directly at luvik@ardcarnegarden.com.
  4. Compliance with Legal Obligations‌: In some cases we are required to process your personal data to comply with legal requirements that apply to us, such as retaining financial transaction records for Irish tax authority purposes, sharing limited data with regulatory bodies if required by law, and responding to valid legal requests from law enforcement agencies.

5. How We Use Your Personal Data

All personal data we collect is used exclusively for the following stated, transparent purposes, and we will never repurpose your data for any activity that is incompatible with these original purposes without notifying you explicitly and obtaining any required additional consent:

  • To process, confirm, fulfill, and deliver every order you place on www.ardcarnegarden.com, including sending you order confirmation emails, dispatch notifications, and delivery tracking information so you know exactly when your plants, seeds, or garden supplies will arrive at your door.
  • To manage your customer account, allowing you to view your order history, save your favorite products to a wishlist, store multiple delivery addresses for faster checkout, and manage your loyalty program points as part of our Ardcarne Garden Rewards scheme.
  • To respond to all your customer support enquiries, resolve any issues you may encounter with your orders, products, or website functionality, and provide you with tailored gardening advice and product recommendations that align with the specific questions you send to our horticultural expert team.
  • To personalize your browsing experience on our platform, by showcasing products that are relevant to your past browsing history, your location, and the season, so that you can more easily find the specific plants, tools, and supplies you are looking for to care for your garden.
  • To send you transactional and service-related communications, for example notifications about product restocks you have requested, alerts about upcoming maintenance that may temporarily affect our website operation, or critical safety information about any products you have purchased that require a recall or updated care guidance.
  • To prevent fraudulent transactions, unauthorized access to customer accounts, and other malicious activities that could compromise the security of our e-commerce platform or your personal information, protecting both you and our entire customer community from harm.
  • To comply with all legal, regulatory, and tax obligations that apply to our business operating in Ireland and the European Union, including retaining accurate financial records for the required 7 year period as mandated by Irish revenue rules.
  • To analyze anonymized, aggregated user data to identify trends in customer preferences, improve our website navigation, expand our product range to include more of the plants and supplies our customers are asking for, and optimize our e-commerce site to load faster and work seamlessly on all devices from mobile phones to desktop computers.

6. Sharing and Disclosure of Your Personal Data

We never sell, rent, or lease your personal data to any third parties for their own marketing purposes under any circumstances. The only third parties we may share your personal data with are carefully selected, GDPR-compliant service providers who are required to protect your data with the same high level of security we maintain ourselves, and who only process your data in strict accordance with our written instructions, for the sole purpose of supporting our e-commerce operations. These third parties include:

  • Our trusted last-mile delivery and courier partners, who are provided with your name, delivery address, and contact telephone number for the exclusive purpose of delivering your ordered products to the correct location, and notifying you of any delivery scheduling changes.
  • Our PCI DSS certified payment processing providers, who handle all of your payment transaction data securely, and we never retain full credit card details on our own internal servers at any point.
  • Our website hosting and cloud service providers, who host our www.ardcarnegarden.com platform on secure servers located within the European Economic Area, and maintain the technical infrastructure that allows our e-commerce site to operate reliably.
  • Our email service provider, who assists us in delivering your order confirmation emails, service updates, and the marketing newsletters you have explicitly opted in to receive, and who is contractually prohibited from accessing or using your contact data for any independent purposes.
  • Our professional service advisors, including our accountants, tax consultants, and legal representatives, who require limited access to relevant transaction data to help us meet our business compliance and governance obligations.

We will only ever disclose your personal data to law enforcement agencies, government regulators, or legal bodies if we receive a formal, valid legal request that compels us to do so under Irish or EU law, and we will always take all reasonable steps to verify the legitimacy of any such request before releasing any of your personal information.

7. International Data Transfers

All of the personal data we collect and process through www.ardcarnegarden.com is stored on secure servers located within the European Economic Area (EEA). We do not transfer any of your personal data to countries located outside of the EEA, unless that country has been granted an adequacy decision by the European Commission that confirms it provides an equivalent level of data protection to the standards required under GDPR. In the rare event that we ever need to transfer personal data outside of the EEA in the future, we will ensure that all appropriate safeguards are put in place as required by data protection law, and we will notify all affected users of that change in advance via a prominent notice on our website.

8. Data Retention Periods

We will never keep your personal data for longer than is strictly necessary to fulfill the exact purposes for which it was originally collected. Our standard data retention timelines are as follows:

  • For customer account data: We retain your account information for as long as you maintain an active account with us, and for a period of 12 months after you choose to delete your account, unless we are required to retain specific records for longer to comply with legal, tax, or accounting obligations.
  • For order and transaction data: We retain records of your purchases, invoices, and payment transaction details for a minimum of 7 years, in line with the mandatory Irish tax record keeping requirements set out by Revenue Commissioners of Ireland.
  • For marketing preference data: We keep a record of your opt in or opt out status for marketing communications indefinitely, or until you request that we erase that information from our systems.
  • For customer support correspondence data: We retain records of your communications with our support team for a period of 3 years after our last interaction with you, to ensure we can reference past conversations if you reach out to us again with related queries.
  • For automatically collected technical browsing data: All raw IP address and session tracking data is anonymized and fully deleted from our systems within 90 days of the date of your site visit.

Once the applicable retention period for your personal data expires, we will securely erase or anonymize that data in full, with no possibility of recovery or restoration.

9. Your Data Protection Rights

Under Irish and European data protection law, you hold a comprehensive set of enforceable rights over your personal data, and Ardcarne Garden Centre is fully committed to making it as simple as possible for you to exercise every one of these rights at no cost to yourself. Your rights include:

  1. The Right of Access‌: You can request a full copy of all the personal data we hold about you, along with a detailed explanation of how and why we process that data, at any time by contacting us.
  2. The Right to Rectification‌: If you notice that any of the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct that information immediately. You can also update most of your personal details directly from the account settings page when you are logged in to your www.ardcarnegarden.com customer account.
  3. The Right to Erasure (The Right to be Forgotten)‌: You can request that we fully delete all of your personal data from our systems, subject only to any legal obligations we have to retain certain limited records for tax or regulatory compliance purposes.
  4. The Right to Restriction of Processing‌: You have the right to request that we pause all processing of your personal data in specific circumstances, for example if you contest the accuracy of the data we hold, or you have objected to our processing activities and are waiting for us to verify our legitimate interests grounds.
  5. The Right to Data Portability‌: For all personal data that you have provided to us directly, you can request that we provide that data to you in a structured, commonly used, machine-readable format, or transmit it directly to another data controller of your choice, where technically feasible.
  6. The Right to Object‌: You have the full right to object to any processing of your personal data that we carry out on the basis of our legitimate interests, at any time. We will then pause our processing of your data unless we can demonstrate compelling legitimate grounds for the processing that override your rights, or if the processing is required for the establishment, exercise, or defense of legal claims. You also have an unconditional right to object at any time to us using your personal data for direct marketing purposes.
  7. The Right to Withdraw Consent‌: For any processing activity that you previously provided explicit consent for, you can withdraw that consent at any time, without affecting the lawfulness of any processing that we carried out before your withdrawal.
  8. The Right to Lodge a Complaint‌: If you believe that we have not handled your personal data in compliance with applicable data protection laws, you have the right to lodge a formal complaint with the Irish Data Protection Commission, the national supervisory authority for data protection in Ireland. Before you take this step, we would greatly appreciate the opportunity to resolve any concerns you may have directly, so please contact us first and our team will work with you to find a mutually satisfactory solution.

To exercise any of these rights, you simply need to send us a clear request via email to luvik@ardcarnegarden.com, or a formal letter to our physical address at Ardcarne, Boyle, Co. Roscommon, F52 RY61, Ireland. We may ask you to provide a small amount of verification information to confirm your identity before processing your request, to ensure that no unauthorized person can access or delete your personal data. We will respond to all valid requests within 30 days of receipt, free of charge.

10. Data Security Measures

At Ardcarne Garden Centre, we take the security of your personal data extremely seriously, and we have implemented rigorous industry standard technical and organizational security measures designed to protect your personal information from unauthorized access, accidental loss, alteration, destruction, or disclosure. Our security systems include end-to-end SSL encryption on all pages of www.ardcarnegarden.com, regular automated security vulnerability scans, multi-factor authentication for all employee accounts that access customer data, regular staff training on data protection best practices, role-based access controls that ensure only a very small, trusted number of our team members can access your personal data when absolutely necessary to process your order or support request, and secure off-site encrypted backups of all our critical data.

While we continuously update and improve our security systems to meet emerging cyber security threats, no method of data transmission over the internet or electronic storage system is 100% infallible. If we ever experience a personal data breach that is likely to pose a high risk to your rights and freedoms, we will notify you and the Irish Data Protection Commission of that breach without undue delay, in full compliance with our legal obligations under Article 33 and 34 of the GDPR.

11. Children’s Privacy

Our e-commerce platform www.ardcarnegarden.com is not targeted at, and we do not knowingly collect any personal data from children under the age of 16. If we ever become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take immediate steps to delete that information completely from our servers. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at luvik@ardcarnegarden.com and we will resolve the issue promptly.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes to our e-commerce operations, new legal requirements, or improvements we make to our data processing practices. When we make any material changes to this policy, we will update the “Effective Date” at the top of this document, and post a prominent notification on the homepage of www.ardcarnegarden.com to alert all users that the policy has been revised. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data. Any changes to this privacy policy will come into effect 7 days after the revised version is published on our website.

13. Contact Information

If you have any questions, comments, or concerns about this privacy policy, or any aspect of how Ardcarne Garden Centre processes your personal data, please do not hesitate to get in touch with us using any of the following channels:

  • Email: luvik@ardcarnegarden.com
  • Telephone: +353 87 241 2550‌
  • Postal Address: Ardcarne Garden Centre, Ardcarne, Boyle, Co. Roscommon, F52 RY61, Ireland
  • Website: www.ardcarnegarden.com