1. Introduction and company information

This Privacy Policy explains how GreenRoot Cultivo Ltd collects, uses, stores, shares, and protects personal data in connection with its cultivo-related business activities and any related services, communications, websites, facilities, or interactions.

Data controller: GreenRoot Cultivo Ltd

Registered / business address: Unit 4, Riverside Industrial Estate, Midland Road, Derby, DE1 2SP, United Kingdom

Email: [email protected]

Telephone: +44 1332 846 791

GreenRoot Cultivo Ltd is committed to handling personal data lawfully, fairly, transparently, and securely in accordance with applicable privacy and data protection laws.

2. Data collection and processing

GreenRoot Cultivo Ltd may collect and process the following categories of personal data, depending on your relationship with us and how you interact with us:

We may collect data directly from you, from your employer or organisation, from public sources, from our service providers, or through automated technologies such as website logs, cookies, and similar tools where permitted by law.

3. Purpose of data processing

GreenRoot Cultivo Ltd processes personal data for the following purposes:

4. Legal basis for processing

Where applicable law requires a legal basis for processing personal data, GreenRoot Cultivo Ltd relies on one or more of the following bases:

When special category or sensitive personal data is processed, we will do so only where a lawful condition applies and additional safeguards are in place.

5. Data sharing and third parties

GreenRoot Cultivo Ltd may share personal data with selected third parties where necessary and lawful, including:

We require third parties to handle personal data in a manner consistent with applicable legal obligations and our contractual requirements, including appropriate confidentiality and security measures.

6. Data transfer to third countries

Where personal data is transferred outside the United Kingdom or, where applicable, outside the European Economic Area, GreenRoot Cultivo Ltd will take steps to ensure that such transfers are lawful and appropriately safeguarded.

These safeguards may include:

You may contact us for further information about the safeguards used for international transfers, subject to any legal restrictions.

7. Storage duration

GreenRoot Cultivo Ltd retains personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including to satisfy legal, accounting, regulatory, operational, and dispute-resolution requirements.

Retention periods may vary depending on the type of data and the context in which it is processed. In general, we consider:

When personal data is no longer required, we will delete it, anonymise it, or securely archive it as appropriate.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, GreenRoot Cultivo Ltd may no longer be able to provide certain optional services or communications. We will inform you if this is the case.

10. Right to complain

If you have concerns about how GreenRoot Cultivo Ltd handles your personal data, we encourage you to contact us first so that we can try to resolve the matter promptly and fairly.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is ordinarily the Information Commissioner's Office (ICO).

11. Data security

GreenRoot Cultivo Ltd implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include access controls, authentication procedures, secure storage, staff confidentiality obligations, network protections, monitoring, backups, and incident response processes. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Contact information

If you have questions about this Privacy Policy, wish to exercise your rights, or need further information about our data practices, please contact:

GreenRoot Cultivo Ltd
Unit 4, Riverside Industrial Estate, Midland Road, Derby, DE1 2SP, United Kingdom
Email: [email protected]
Phone: +44 1332 846 791

13. Changes to privacy policy

GreenRoot Cultivo Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, operational needs, or applicable guidance.

Any revised version will be made available through appropriate channels and will take effect from the date stated or, if no date is stated, from the time of publication. We encourage you to review this Privacy Policy periodically to remain informed about how we process personal data.

9/4/2026 Home