1. Introduction and company information
This Privacy Policy explains how GreenRoot Cultivo Ltd collects, uses, stores, shares, and protects personal data in connection with its cultivo-related business activities and any related services, communications, websites, facilities, or interactions.
Data controller: GreenRoot Cultivo Ltd
Registered / business address: Unit 4, Riverside Industrial Estate, Midland Road, Derby, DE1 2SP, United Kingdom
Email: [email protected]
Telephone: +44 1332 846 791
GreenRoot Cultivo Ltd is committed to handling personal data lawfully, fairly, transparently, and securely in accordance with applicable privacy and data protection laws.
2. Data collection and processing
GreenRoot Cultivo Ltd may collect and process the following categories of personal data, depending on your relationship with us and how you interact with us:
- Identity data: name, title, job title, company affiliation, and identification details where necessary.
- Contact data: postal address, email address, telephone number, and other communication details.
- Business and account data: contract details, order or service history, preferences, correspondence, and account records.
- Financial data: payment-related information, invoicing details, and transaction records.
- Technical data: IP address, browser type, device identifiers, log files, and usage information collected through our systems and website.
- Marketing and communications data: preferences regarding marketing communications, responses to campaigns, and subscription choices.
- Operational data: information relevant to cultivo operations, service provision, quality control, compliance, logistics, and supplier/customer management.
We may collect data directly from you, from your employer or organisation, from public sources, from our service providers, or through automated technologies such as website logs, cookies, and similar tools where permitted by law.
3. Purpose of data processing
GreenRoot Cultivo Ltd processes personal data for the following purposes:
- to provide and manage our products, services, and business operations;
- to communicate with customers, suppliers, partners, and other stakeholders;
- to respond to enquiries, requests, and complaints;
- to manage contracts, invoices, accounts, and payments;
- to maintain records and support internal administration;
- to monitor, secure, and improve our systems, website, and operations;
- to comply with legal, regulatory, tax, accounting, and reporting obligations;
- to conduct business development, marketing, and relationship management where permitted;
- to protect our rights, property, staff, customers, and business interests;
- to support operational planning, audit, quality assurance, and risk management.
4. Legal basis for processing
Where applicable law requires a legal basis for processing personal data, GreenRoot Cultivo Ltd relies on one or more of the following bases:
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
- Consent: where you have given clear consent for one or more specific purposes, such as certain marketing communications or optional cookies.
- Legal obligation: where processing is necessary to comply with legal or regulatory requirements.
- Vital interests: where processing is necessary to protect the vital interests of an individual in an emergency.
- Public task / official function: where applicable and legally relevant.
When special category or sensitive personal data is processed, we will do so only where a lawful condition applies and additional safeguards are in place.
5. Data sharing and third parties
GreenRoot Cultivo Ltd may share personal data with selected third parties where necessary and lawful, including:
- IT, hosting, cloud, and communications providers;
- professional advisers such as accountants, auditors, insurers, and legal advisers;
- payment processors, banks, and financial service providers;
- delivery, logistics, warehouse, and operational partners;
- service providers supporting customer relationship management, analytics, and marketing;
- regulators, law enforcement agencies, courts, or other public authorities where required by law;
- business counterparties in connection with corporate transactions, restructuring, or asset transfers.
We require third parties to handle personal data in a manner consistent with applicable legal obligations and our contractual requirements, including appropriate confidentiality and security measures.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom or, where applicable, outside the European Economic Area, GreenRoot Cultivo Ltd will take steps to ensure that such transfers are lawful and appropriately safeguarded.
These safeguards may include:
- adequacy regulations or decisions recognised by the relevant authority;
- standard contractual clauses or equivalent contractual protections;
- binding corporate rules, where applicable;
- additional technical, organisational, or contractual measures where needed.
You may contact us for further information about the safeguards used for international transfers, subject to any legal restrictions.
7. Storage duration
GreenRoot Cultivo Ltd retains personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including to satisfy legal, accounting, regulatory, operational, and dispute-resolution requirements.
Retention periods may vary depending on the type of data and the context in which it is processed. In general, we consider:
- the duration of any ongoing relationship or contract;
- applicable statutory or regulatory retention requirements;
- limitation periods for legal claims;
- business need, audit, and record-keeping requirements;
- whether the data is still necessary for the original purpose.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it as appropriate.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain situations.
- Data portability: to request transfer of certain data to you or another controller, where technically feasible and legally applicable.
- Objection: to object to processing based on legitimate interests and, where relevant, to direct marketing.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, GreenRoot Cultivo Ltd may no longer be able to provide certain optional services or communications. We will inform you if this is the case.
10. Right to complain
If you have concerns about how GreenRoot Cultivo Ltd handles your personal data, we encourage you to contact us first so that we can try to resolve the matter promptly and fairly.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is ordinarily the Information Commissioner's Office (ICO).
11. Data security
GreenRoot Cultivo Ltd implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include access controls, authentication procedures, secure storage, staff confidentiality obligations, network protections, monitoring, backups, and incident response processes. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy, wish to exercise your rights, or need further information about our data practices, please contact:
GreenRoot Cultivo Ltd
Unit 4, Riverside Industrial Estate, Midland Road, Derby, DE1 2SP, United Kingdom
Email: [email protected]
Phone: +44 1332 846 791
13. Changes to privacy policy
GreenRoot Cultivo Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, operational needs, or applicable guidance.
Any revised version will be made available through appropriate channels and will take effect from the date stated or, if no date is stated, from the time of publication. We encourage you to review this Privacy Policy periodically to remain informed about how we process personal data.