Privacy & Cookies
Last updated: 29 September 2026
This notice explains how Purdys Fertilisers Ltd uses personal information to operate this website, process orders, respond to enquiries and protect our business.
Who is responsible for your information?
Purdys Fertilisers Ltd is the controller of personal information used for these purposes.
For privacy enquiries, use our contact form.
Information we collect and why
- Orders and accounts: names, email addresses, delivery and billing addresses, account credentials, ordered items, discounts, payment references, invoices and delivery information. We use this information to take steps you request before a purchase, fulfil our contract with you and administer your account.
- Messages and attachments: contact details, enquiries, replies and any photos or videos you send, including information contained in those files. We use these to answer questions, investigate problems and provide support. Our basis is taking steps towards or fulfilling a contract where relevant, or our legitimate interests in managing enquiries and customer relationships.
- Business records: transaction and correspondence records needed for accounting, tax, refunds, disputes and legal claims. We rely on applicable legal obligations and our legitimate interests in maintaining evidence and protecting our business.
- Security: technical information such as IP addresses, request logs, authentication activity and upload scan results. We use it to prevent fraud and abuse, secure accounts and investigate incidents, in our legitimate interests in protecting the website, customers and business.
- Page counts: we keep daily totals of public page views and short-lived totals by minute to compare activity with server performance. The counter does not store visitor identifiers, IP addresses, referral sources, countries, device details or individual activity. It does not set visitor-tracking cookies or access browser storage.
We receive information directly from you and, where relevant, from payment providers, delivery providers and email correspondence. Payment providers may supply the contact and delivery details you confirm with them.
Details marked as required are needed to handle the relevant request, account or order. Without them, we may be unable to provide that service. Photos and videos are optional: please send only information relevant to your enquiry and avoid including unnecessary personal information about other people.
Payments and service providers
Payments are processed by Stripe or PayPal. We receive payment status, transaction references and relevant customer details; we do not collect or store your full payment-card number or card security code on this website.
Information is shared where needed with hosting and email providers (including OVH), payment providers, the courier handling your delivery, and professional advisers such as our accountant. We may also disclose information where legally required or necessary to establish, exercise or defend legal claims.
Payment providers handle information under their own privacy notices: Stripe and PayPal. Some providers process information outside the UK. The countries and safeguards involved depend on the provider and service. Contact us for details of transfers relating to your information; the payment providers’ notices also explain their international processing.
Contact attachments are stored privately and scanned on our server before they are made available through the admin area. A virus scan is a precaution, not a guarantee that a file is safe.
How long information is kept
Retention depends on the purpose of the record, relevant tax and accounting obligations, whether an enquiry or dispute remains open, and the need to establish or defend legal claims. An account deletion request does not automatically require us to erase invoices, transaction records or other information we have a lawful reason to retain.
For enquiries and attachments, we consider whether the issue has been resolved and whether the information is still needed for support, an order or a dispute. For account and security information, we consider whether the account remains in use and whether records are needed to investigate fraud or security incidents.
Anonymous daily page totals are retained for comparing website usage over time. Minute totals older than one hour are cleared when the next counted page view starts a new minute. They cannot be used to identify individual visitors. Copies of other business records in backups and email systems may remain after a record is removed from the website.
Your information rights
Depending on the circumstances and the legal basis involved, you can request access to your personal information, correction, deletion, restriction of its use or a portable copy. Where processing relies on consent, you can withdraw that consent without affecting processing already carried out.
You have the right to object to processing based on legitimate interests, on grounds relating to your circumstances. We will consider the request under applicable data-protection law. These rights are subject to legal conditions and exemptions; we may retain information where the law permits or requires it.
Send requests through our contact form. We may ask for proportionate information to verify your identity before releasing or changing records. You can also complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator.
Changes to this notice
We will update this page when our practices change and provide further notice where required. The date above identifies the latest version.