Privacy Policy

GREEN PARADISE PUBS LTD, at 8 Bute Road, Rutherglen, Glasgow, Scotland, G73 5JH, United Kingdom, is the data controller for this store. Contact our privacy team at support@greenparadisepubb.shop or +44 7671335174.

This policy applies to the website, checkout leads, orders, delivery, returns, accounts, membership, event-order enquiries and support.

We collect identity and contact details, shipping and billing addresses, order and return records, account or membership references, support messages, event size and budget, consent records, device and cookie information, fraud signals and payment status.

Collection sources: directly from you when you browse, submit a contact or event-order form, enter a shipping address, place an order, create an account, request a return or contact support; automatically from your browser through essential storage and consented analytics; from Stripe or PayPal when payment status changes; and from parcel carriers or postal services when fulfilment, delivery or a return is updated. We do not receive or store your complete card number or card security code.

• Contract: checkout, payment status, order fulfilment, carrier hand-off, delivery, returns, refunds and membership.
• Legitimate interests: customer support, fraud prevention, service security, aggregate store measurement and abandoned-checkout follow-up where proportionate.
• Consent: non-essential cookies and marketing; consent can be withdrawn.
• Legal obligation: tax, accounting, consumer-rights and dispute records.

We use the recipient name, shipping address, email and phone to validate an order, prepare the parcel, provide it to the selected carrier and send delivery updates. Order identifiers and item history connect receipts to fulfilment, return eligibility, refund decisions and support conversations. Return data may include the reason, parcel tracking, item condition and support correspondence. We do not use sensitive data and ask you not to send it.

We share only what is necessary with hosting and infrastructure providers, Supabase for database services, Stripe or PayPal when used for payment, email delivery providers, fraud and security providers, analytics providers used with consent, professional advisers, and the parcel carrier or postal service selected for outbound delivery or a return.

Stripe and PayPal process card and billing data under their own privacy notices; our systems receive identifiers and transaction status, not the complete card number. Carriers receive the recipient name, shipping address and only the phone or email needed for fulfilment, tracking and delivery exceptions. A return carrier may also receive the order or return reference required for routing. We do not sell personal information.

Because we ship worldwide and use international processors, data may be processed outside the United Kingdom or European Economic Area. Where required, we use adequacy decisions, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses and processor security commitments.

Uncompleted checkout leads, contact messages, event-order enquiries and ordinary support conversations are retained for up to 24 months. Shipping addresses and carrier tracking details remain attached to the order while needed for fulfilment, delivery exceptions, the 30-day return window and related support. Return requests and item-condition correspondence are retained with the order record.

Account and membership data is retained while active and normally up to 24 months afterward. Order, payment-status, shipping, return, refund, tax and dispute records may be retained for up to 7 years where accounting, consumer-rights or legal obligations require it. Security logs are generally retained for up to 12 months; cookie periods are listed in the Cookie Policy.

At the end of the applicable period, data is securely deleted or irreversibly anonymised from active systems and then expires from backups on the provider’s normal backup cycle. A verified deletion request is applied sooner where the law permits, but legal holds, charge disputes, fraud prevention and statutory recordkeeping may require limited data to remain until the obligation ends.

We use access controls, encrypted transport, restricted service credentials, signed administrative sessions, payment-provider boundaries, monitoring, backups and least-privilege processing. No internet service is risk-free; contact us promptly if you suspect misuse.

Depending on location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to a supervisory authority. UK residents may complain to the Information Commissioner’s Office. EEA residents may contact the supervisory authority in their jurisdiction.

California residents may request categories, sources, purposes and recipients, deletion or correction, and may opt out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising. We do not discriminate for exercising rights. Send a verifiable request to support@greenparadisepubb.shop.

Essential storage keeps basket state and security functions working. With consent, measurement may help us understand page and product use. See the Cookie Policy for categories, duration and controls. Global Privacy Control signals are honoured where legally required.

We do not make decisions with legal or similarly significant effects solely by automation. Fraud systems may flag orders for human review.

The store is not directed to children under 13. People aged 13–17 may use an account only with a parent or guardian’s consent; adults place orders for household tableware. Contact us to remove a child’s information.

Contact support@greenparadisepubb.shop with the subject “Privacy request”. We normally respond within one month where UK GDPR applies and within the period required by applicable law. You may also complain to the relevant supervisory authority.