Privacy policy
Last updated: 13 August 2026
This Privacy Policy explains how Garden Blueprint collects, uses, stores and shares personal information when you visit https://mygardenblueprint.com/, purchase one of our digital products, contact us or otherwise interact with our services.
Garden Blueprint is a trading name operated by AVINA LTD, a private limited company registered in Englad under company number 17405951.
For the purposes of applicable data-protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, AVINA LTD is the controller of the personal information described in this policy.
1. Personal Information We Collect
The information we collect depends on how you interact with our website and services.
Information You Provide
We may collect:
-
Your name
-
Email address
-
Billing address
-
Telephone number, if provided
-
Order and transaction information
-
Marketing preferences
-
Messages submitted through our contact form
-
Customer-support communications
-
Reviews, feedback or survey responses
-
Any other information you choose to provide
Payment Information
Payments are processed by third-party payment providers available through Shopify, such as Shopify Payments
We do not directly receive or store your complete payment-card number or card security code. Payment providers process payment information according to their own terms and privacy policies.
Information Collected Automatically
When you access our website, we and our service providers may automatically collect:
-
Your IP address
-
Browser and device type
-
Operating system
-
Device identifiers
-
General location inferred from your IP address
-
Referring website
-
Pages viewed
-
Date and time of visits
-
Shopping-cart and checkout activity
-
Interactions with our website
-
Cookie and similar technology information
-
Information about ebook access or delivery where supported by our digital-delivery provider
Information Received From Third Parties
We may receive information from companies that help us operate our store, including:
-
Shopify
-
Payment processors
-
Digital-download providers
-
Email and newsletter providers
-
Analytics services
-
Advertising platforms
-
Fraud-prevention and security providers
-
Customer-support services
The information received depends on the services we use and how you interact with them.
2. How We Use Personal Information
We may use personal information to:
-
Process and confirm purchases
-
Deliver purchased ebooks
-
Provide download links
-
Send order confirmations and transactional messages
-
Respond to questions and support requests
-
Process refunds where applicable
-
Manage complaints, payment disputes and chargebacks
-
Maintain evidence of digital delivery
-
Detect and prevent fraud, misuse and security incidents
-
Operate, maintain and improve our website
-
Understand website traffic and customer interactions
-
Personalise your experience where permitted
-
Send marketing communications when permitted
-
Measure marketing and advertising performance
-
Maintain accounting and tax records
-
Protect our business and legal rights
-
Enforce our Terms and Conditions
-
Comply with legal and regulatory obligations
We will not use your information for a materially different purpose without providing appropriate notice or obtaining consent where required.
3. Legal Bases for Processing
Where UK or European data-protection laws apply, we rely on one or more of the following legal bases.
Performance of a Contract
We process personal information when necessary to:
-
Accept and process an order
-
Receive payment
-
Deliver a purchased ebook
-
Send transactional communications
-
Provide order-related customer support
-
Manage refunds, complaints and disputes
You must provide certain information, such as your name, email address and payment details, to complete a purchase. If you do not provide the required information, we may be unable to process or deliver your order.
Legal Obligation
We may process and retain information where necessary to meet tax, accounting, consumer-protection and other legal obligations.
Legitimate Interests
We may process information for legitimate business interests, including:
-
Operating and improving our store
-
Understanding website performance
-
Maintaining website and transaction security
-
Preventing fraud and misuse
-
Keeping appropriate business records
-
Responding to customer enquiries
-
Handling legal claims and payment disputes
-
Protecting our business, customers and legal rights
We consider whether these interests are overridden by your rights and freedoms before relying on this basis.
Consent
We may rely on consent for:
-
Sending optional marketing communications
-
Placing non-essential cookies
-
Certain analytics or advertising activities
You may withdraw consent at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.
4. Shopify
Our store is hosted by Shopify, which provides the ecommerce platform used to display and sell our digital products.
Shopify may process information about visitors and customers to provide its services, complete transactions, maintain security, prevent fraud and improve its platform. Shopify may process information in countries other than the country where you live.
You can learn more by reviewing Shopify’s Privacy Policy at:
https://www.shopify.com/legal/privacy
5. How We Share Personal Information
We may disclose personal information to service providers when reasonably necessary to operate our business.
These recipients may include:
-
Shopify and related ecommerce services
-
Payment processors
-
Digital-product delivery providers
-
Website hosting and infrastructure providers
-
Email and newsletter services
-
Analytics providers
-
Advertising platforms, where enabled and permitted
-
Customer-support providers
-
Fraud-prevention and security services
-
Accountants, lawyers and professional advisers
-
Government agencies, regulators or law-enforcement authorities where legally required
We may also disclose information:
-
To comply with a legal obligation or lawful request
-
To investigate fraud, misuse or security incidents
-
To establish, exercise or defend legal claims
-
To protect our rights or the rights of other people
-
In connection with a merger, acquisition, financing, restructuring or sale of all or part of our business
We do not sell personal information for monetary payment. However, certain advertising or analytics activities may be legally classified as “selling,” “sharing” or targeted advertising in some jurisdictions. Where applicable, you may exercise an opt-out right through:
[INSERT PRIVACY CHOICES OR DATA-SHARING OPT-OUT LINK, OR REMOVE IF NOT APPLICABLE]
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies to:
-
Keep the website and checkout functioning
-
Remember your preferences
-
Maintain your shopping cart
-
Authenticate sessions where applicable
-
Protect the website against fraud and misuse
-
Measure traffic and website performance
-
Understand how visitors interact with the store
-
Support advertising and marketing where enabled
Some cookies are necessary for the website to operate. Other cookies, including certain analytics and advertising cookies, may be optional.
Where required, we request permission before using non-essential cookies. You can manage your choices through our cookie banner or your browser settings.
Blocking certain cookies may prevent parts of the website from functioning correctly.
For more information, review our Cookie Policy or select Cookie Preferences on our website.
7. Marketing Communications
We may send promotional emails if you have subscribed or when another lawful basis permits us to do so.
You can unsubscribe at any time by:
-
Selecting the unsubscribe link in a marketing email; or
-
Contacting us at contact@mygardenblueprint.com
After unsubscribing, you may still receive necessary transactional messages, including order confirmations, download links and replies to support requests.
We may retain limited information on a suppression list to ensure that we respect your request not to receive further marketing.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to meet our legal, accounting, security and dispute-resolution obligations.
Our general retention periods are:
-
Order and transaction records: Six years after the end of the financial year to which they relate, or longer where required by law, an ongoing dispute or an HMRC enquiry.
-
Customer-support communications: Up to two years after the enquiry is resolved. Communications connected to a transaction, refund, legal claim or payment dispute may be kept for longer where reasonably necessary.
-
Marketing information: Until you unsubscribe or withdraw consent, subject to retaining limited suppression information.
-
Cookie and analytics information: According to the retention settings of the relevant service and your cookie choices.
-
Fraud and security records: For as long as reasonably necessary to protect our store, customers and legal rights.
When information is no longer required, we will delete, anonymise or securely dispose of it unless further retention is required or permitted by law.
9. International Data Transfers
Shopify and some of our other service providers may process personal information outside the United Kingdom.
Where required, international transfers are protected through recognised legal safeguards, which may include:
-
UK adequacy regulations
-
Approved standard contractual clauses
-
The UK International Data Transfer Agreement
-
The UK Addendum to standard contractual clauses
-
Other legally recognised transfer mechanisms
You may contact us for more information about the safeguards relevant to your personal information.
10. Information Security
We use reasonable technical, organisational and administrative safeguards intended to protect personal information against:
-
Unauthorised access
-
Accidental loss
-
Misuse
-
Alteration
-
Disclosure
-
Destruction
However, no website, transmission method or electronic storage system can be guaranteed to be completely secure.
If you create an account, you are responsible for protecting your login details and notifying us if you suspect unauthorised activity.
11. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
-
Request access to your personal information
-
Request correction of inaccurate or incomplete information
-
Request deletion of your information
-
Request restriction of processing
-
Object to certain processing
-
Receive certain information in a portable format
-
Withdraw consent
-
Opt out of direct marketing
-
Opt out of certain targeted advertising, selling or sharing activities
-
Submit a complaint to a data-protection authority
These rights are not absolute and may be subject to legal conditions or exceptions.
To exercise a privacy right, email contact@mygardenblueprint.com and describe your request. We may request reasonable information to confirm your identity and locate the relevant records.
We will not discriminate against you for exercising an applicable privacy right.
Right to Object
You may have the right to object when we process your personal information based on legitimate interests. You also have the right to object at any time to the use of your personal information for direct marketing.
12. Complaints
If you have concerns about how we collect or use your personal information, please contact us first so we can try to resolve the matter.
You also have the right to submit a complaint to the UK Information Commissioner’s Office:
Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
If you live outside the United Kingdom, you may also be entitled to contact the data-protection authority in your country of residence.
13. Children’s Privacy
Our website and products are not directed at children under the age of 16, and we do not knowingly collect personal information directly from children below that age.
Purchases must be made by an adult or by someone legally capable of entering into a contract in their jurisdiction.
If you believe that a child has provided personal information without appropriate permission, contact us at contact@mygardenblueprint.com.
14. Automated Decision-Making
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on customers.
Our payment and fraud-prevention providers may use automated systems to assess transactions for security and fraud-prevention purposes. Their processing is governed by their respective privacy policies.
15. Third-Party Links
Our website may contain links to websites or services operated by third parties.
We do not control and are not responsible for the privacy, security or content practices of those third parties. We recommend reviewing their privacy policies before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, website services or legal obligations change.
The revised policy will be published on this page, and the “Last updated” date will be changed. Where required by law, we will provide additional notice of significant changes.
17. Contact Us
If you have questions about this Privacy Policy or want to exercise a privacy right, contact us using the following details:
Legal company name: AVINA LTD
Trading name: Garden Blueprint
Company registration number: 17405951
Registered in: England and Wales
Registered office address:
128, City Road
London
EC1V 2NX
UNITED KINGDOM
Email: contact@mygardenblueprint.com
Website: https://mygardenblueprint.com/