Last updated: August 19, 2026
This Privacy Policy explains how Garden Above the City collects, uses, stores, and protects personal information when you visit gardenabovethecity.com, create an account, purchase a digital product, contact us, or otherwise use our website.
1. Who We Are
Garden Above the City is operated by a private limited company registered in the United Kingdom.
Website:
gardenabovethecity.com
Contact email:
For the purposes of applicable data protection law, the company operating Garden Above the City is the data controller for personal information collected through this website, except where another service provider acts as an independent controller.
2. Information We Collect
Depending on how you use our website, we may collect:
- your name;
- email address;
- billing address;
- country or region;
- telephone number, if provided;
- account username and account information;
- order and purchase history;
- information about digital products purchased and downloaded;
- IP address;
- browser and device information;
- website usage and technical information;
- correspondence you send to us;
- information required to prevent fraud and protect the security of the website.
We do not directly store your full payment card details.
3. How We Collect Information
We collect personal information when you:
- place an order;
- create or manage a customer account;
- download a purchased digital product;
- contact customer support;
- leave a review or comment;
- use our website;
- interact with our checkout and payment services.
Some technical information may also be collected automatically through cookies, server logs, security tools, and similar technologies.
4. How We Use Your Information
We may use personal information to:
- process and fulfil orders;
- provide access to purchased e-books and other digital products;
- process payments and refunds;
- manage customer accounts;
- send order confirmations and transactional emails;
- provide customer support;
- prevent fraud and unauthorised transactions;
- maintain the security and functionality of the website;
- comply with accounting, tax, and legal obligations;
- resolve disputes and chargebacks;
- improve our website and services;
- send marketing communications where you have consented or where otherwise permitted by law.
5. Legal Bases for Processing
Depending on the circumstances, we may process your personal information because:
- it is necessary to perform a contract with you, including processing an order and providing a purchased digital product;
- it is necessary to comply with a legal obligation;
- it is necessary for our legitimate interests, such as fraud prevention, website security, customer service, and business administration;
- you have given consent, where consent is required.
Where processing is based on consent, you may withdraw that consent at any time.
6. Payments
Payments on our website are processed through WooPayments.
WooPayments is operated in partnership with Stripe. Information required to process your payment may be shared with WooPayments, Stripe, banks, card networks, and other payment providers involved in completing the transaction.
This may include information such as:
- your name;
- email address;
- billing information;
- payment amount;
- transaction details;
- IP address;
- information used for fraud prevention and identity verification.
We do not receive or store your complete payment card number on our own servers.
7. WooCommerce
Our online store is powered by WooCommerce.
When you place an order, WooCommerce may store information including your name, email address, billing details, account information, order history, and download permissions.
We use this information to process orders, provide digital downloads, manage customer accounts, issue refunds, provide support, and maintain business records.
8. Digital Downloads
When you purchase a downloadable product, we may record information relating to the download, such as:
- the product purchased;
- download permissions;
- number of downloads;
- date and time of download;
- IP address associated with the download.
This information may be used to deliver the product, enforce reasonable download limits, prevent abuse, and provide customer support.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
- keep the website functioning;
- maintain shopping cart and checkout sessions;
- remember account and customer preferences;
- improve website security;
- process payments;
- analyse website performance and usage.
Some cookies are necessary for the website and online store to function.
Where required by applicable law, non-essential cookies will only be used after obtaining appropriate consent.
10. Who We Share Information With
We may share personal information with service providers where necessary to operate the business and fulfil your order, including:
- WooCommerce and related website services;
- WooPayments;
- Stripe and other payment-processing partners;
- website hosting providers;
- email and transactional messaging providers;
- fraud prevention and security providers;
- professional advisers, accountants, or legal advisers where necessary;
- public authorities where disclosure is required by law.
We only share information that is reasonably necessary for the relevant purpose.
11. International Data Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where required, appropriate safeguards are used for international transfers of personal information in accordance with applicable data protection law.
These safeguards may include adequacy regulations, approved contractual protections, or other lawful transfer mechanisms.
12. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, tax, fraud-prevention, and customer-service requirements.
Our current retention settings may include:
- inactive customer accounts: up to 24 months;
- failed, pending, or cancelled orders: generally up to 30 days where no longer required;
- completed and refunded orders: up to 7 years where required for accounting, tax, legal, or dispute purposes.
Certain information may be retained for a longer period where required by law or where necessary to establish, exercise, or defend legal claims.
13. Your Rights
Depending on the law that applies to you, you may have rights regarding your personal information, including the right to:
- request access to your personal information;
- request correction of inaccurate information;
- request deletion of personal information in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent where processing is based on consent;
- complain to an appropriate data protection authority.
These rights are subject to applicable legal conditions and exceptions.
14. UK Data Protection Rights
If UK data protection law applies, you may have rights under the UK GDPR and the Data Protection Act 2018.
You also have the right to raise a concern with the UK Information Commissioner’s Office if you believe your personal information has been handled unlawfully.
We encourage you to contact us first so that we can try to resolve your concern.
15. Customers Outside the United Kingdom
We sell digital products to customers in several countries.
Depending on your country or region, additional privacy rights may apply to you.
Nothing in this Privacy Policy is intended to limit privacy rights that cannot legally be excluded.
16. Children’s Privacy
Our website and products are not specifically directed at children.
We do not knowingly collect personal information from children where parental consent or another lawful basis would be required.
If you believe that a child has provided personal information to us improperly, please contact us.
17. Security
We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
However, no internet-based system can be guaranteed to be completely secure.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, legal obligations, or service providers.
The current version will be published on this page with the updated date shown at the top.
19. Contact Us
For privacy questions or requests relating to your personal information, contact: