Privacy Policy

This policy explains what personal data we collect, why we collect it, and what rights you have over it.

1. Who is responsible

Nexum Group Limited, of Flat 2304, 23/F, Ho King Commercial Centre, 2-16 Fa Yuen Street, Mong Kok, Hong Kong, company registration number 81135713, is the data controller for the personal data described here. Contact us about privacy at greenhillgardenshop@gmail.com.

2. What we collect

When you place an order: your name, delivery and billing address, email address, phone number if you give one, and the contents and value of your order.

When you pay: payment is processed by Stripe or PayPal. They handle your card or account details directly; we receive confirmation of payment and the last four digits of the card, never the full number.

When you contact us: the message you send and the address you send it from.

When you subscribe to our emails: your email address, and whether you opened or clicked the messages we send.

Technical data: server logs record IP address, browser type and the pages requested, for security and to diagnose faults.

3. Why we use it, and on what basis

| Purpose | Lawful basis | |---|---| | Fulfilling and delivering your order | Performance of a contract | | Handling returns, refunds and support | Performance of a contract | | Keeping accounting and tax records | Legal obligation | | Sending marketing emails | Your consent, withdrawable at any time | | Keeping the site secure and working | Our legitimate interests |

4. Who we share it with

We share personal data only with the parties needed to run the shop:

• Payment providers — Stripe and PayPal, to take payment.
• Delivery carriers — to deliver your order.
• Our hosting provider — which stores the site and its logs.
• Public authorities — where we are legally required to.

We do not sell personal data, and we do not share it for anyone else's marketing.

5. Transfers outside your country

Some of these providers may process data outside the European Economic Area. Where that happens, transfers are covered by the safeguards permitted under data protection law, such as the European Commission's standard contractual clauses.

6. How long we keep it

Order and invoice records are kept for as long as tax and accounting law requires. Marketing consent is kept until you withdraw it. Support correspondence is kept for up to two years. Server logs are kept for a short period for security purposes.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can withdraw consent to marketing at any time, using the unsubscribe link in any email or by writing to greenhillgardenshop@gmail.com.

If you think we have handled your data wrongly, you can complain to the data protection authority in your country.

8. Cookies

The cookies this site uses, and how to control them, will be described in a separate cookie policy. Until that is published, no analytics or marketing cookies are set.

9. Changes

We may update this policy. The current version is always the one published here.