Privacy notice

Updated 27 September 2026

Who is responsible

Endsleigh Walled Gardens Ltd is the controller of the personal information we use to run the gardens, respond to enquiries and manage bookings. Company number 15962215. Registered office: Endsleigh Walled Gardens, Milton Abbot, Tavistock, Devon, PL19 0PG.

Kayliegh and Ben handle privacy requests. Email admin@endsleighwalledgardens.com or write to our registered office.

Information we use and our lawful bases

• Enquiries, volunteering and collaboration: your contact details and what you choose to tell us. We use this to respond and organise your involvement, relying on our legitimate interests in running the gardens and answering enquiries, or taking steps at your request before a contract.
• Bookings: contact details, workshop and session, payment confirmation and correspondence. We use these to fulfil our contract with you. We keep accounting records to meet legal obligations. Stripe processes payments; this website does not collect card details.
• Access or dietary requests: only information needed to arrange your visit or workshop. Please avoid sending unnecessary medical details. Where a request reveals health information, we ask for your explicit consent to use it for that purpose. You can withdraw consent by contacting us; we will discuss how that affects your requested arrangements.
• Website operation: hosting providers may process technical information such as IP addresses and request information to deliver and protect the site. Our basis is our legitimate interest in operating a secure website.
• Garden notes: we use your email address and signup and confirmation records to send garden news, restoration updates and details of workshops and events through EmailOctopus, based on your consent. Signup requires a consent checkbox and confirmation through an email sent to you. Getting in touch or booking a workshop does not subscribe you to marketing. You can unsubscribe using the link in any newsletter.
• Signup security: if you choose to load the newsletter form, EmailOctopus and Google reCAPTCHA process connection and device information to provide the form and help prevent automated abuse. The embedded services remain off until you choose to allow them. See our cookie information for how to close the form and withdraw that permission.

We need sufficient contact and booking information to respond or fulfil an order. Optional information is not required. We do not make decisions with legal or similarly significant effects about you using automated profiling.

Who can access information

Kayliegh and Ben manage customer information. Relevant workshop details may be shared with the tutor where needed to deliver your booking or agreed arrangements. Our service providers include Stripe for payments and Microsoft services for correspondence and staff sign-in. Newsletter details are submitted directly to EmailOctopus and stored in our EmailOctopus account, not Microsoft Forms. EmailOctopus provides subscription management and newsletter delivery. Its campaign reports can include email opens and link clicks. Read EmailOctopus’s privacy information.

The website is hosted through Sites on Cloudflare infrastructure. Earlier website signup used a Cloudflare D1 database. The current signup endpoint is closed and no longer stores submissions. If you previously submitted details, contact us about those records.

We may share information with professional advisers or authorities where needed to meet legal obligations or deal with a dispute. We do not sell your information.

Workshop booking confirmations

When you pay for a supported workshop through Stripe, Stripe notifies our website. Our private garden office stores your purchaser name, email address, workshop, selected session, number of places, amount paid, payment reference and the dietary answer you supply for catering. Dietary details are encrypted and visible only to authorised staff in the garden office, and removed from the dashboard within 30 days after the workshop. Authorised staff use these records to organise your booking. We send transactional booking confirmations and workshop reminders through our Microsoft events mailbox and record whether Microsoft accepted the email for sending. Card details remain with Stripe. A booking does not subscribe you to marketing. Our booking retention period below applies.

Friends membership

When you purchase Friends of Endsleigh membership through Stripe, we keep your purchaser name, email, phone number if supplied, payment reference, amount, membership dates and payment status in our private garden office. Authorised staff may add the member’s name, POS customer code, card status and relevant membership notes. These records are encrypted on the website’s hosting infrastructure and protected by staff Microsoft sign-in. We use them to fulfil our membership contract with you. Card payment details remain with Stripe. Joining does not subscribe you to our newsletter.

When a member customer record is created in our Smart Volution POS, staff use its transaction history to check and record membership benefits. The dashboard does not automatically copy POS purchase or redemption history. We review membership records when a membership ends and remove information no longer needed, retaining purchase and accounting records under the retention period below.

Volunteer applications

We keep volunteer contact details, interests, availability, relevant experience and correspondence to consider applications and organise volunteering. Our private garden office stores a structured copy of application details on the website’s hosting infrastructure, with access restricted to authorised staff through Microsoft sign-in. Original forms remain in Outlook. We use our legitimate interests in coordinating the volunteer team, subject to your rights and reasonable expectations.

The garden office records staff access and changes for security and accountability. It uses essential sign-in cookies and does not load optional website analytics. We review volunteer information when involvement changes and remove information that is no longer needed, subject to any legal obligation or unresolved issue. Contact us to ask about your application or request a correction or deletion.

Website enquiries

The contact form collects your name, email address, enquiry topic and message on this website. We store these details encrypted in our private garden office on the website’s hosting infrastructure. Only authorised staff can access the inbox through Microsoft sign-in. Kayliegh and Ben use the information to answer your enquiry and may record relevant notes and its progress. Staff replies are sent from our enquiries mailbox through Microsoft. The dashboard keeps an encrypted copy of replies sent there and their sending status. Customer email replies remain in Microsoft. Getting in touch does not subscribe you to our newsletter.

The form uses a short-lived security token and submission limits to help prevent spam. Network addresses are converted to a secret-protected, hourly changing hash for these limits; we do not store your raw network address in the enquiry record. These limit records are removed within two hours, normally on the next scheduled maintenance run. Hosting providers may separately keep security logs. The enquiry form does not load Microsoft Forms or save your message in browser storage.

Resolved dashboard enquiries are automatically removed 12 months after they are marked resolved. We review open enquiries and remove information no longer needed. Earlier Microsoft Forms responses and correspondence already held in Microsoft remain there under our general retention policy. Staff who enable device notifications receive a generic new enquiry alert, without your name, address or message on the lock screen. You can contact us by email instead.

Optional website analytics

With your consent, Cloudflare Web Analytics measures visits, pages viewed, referring websites, broad country, browser and device information, and loading and interaction performance. Kayliegh and Ben use these statistics to improve the website. This is separate from newsletter subscriptions and enquiry forms. We do not use these statistics for advertising profiles or link them to bookings or subscribers.

Cloudflare provides the analytics service and processes the network connection used to send measurements. Its beacon does not use cookies or browser storage to identify visitors or fingerprint individuals. We do not send your form answers, email address or payment details through it. Cloudflare states that URL query strings are not logged by Web Analytics.

Cloudflare currently makes analytics available for the previous six months. It retains unsampled beacon data for seven days, then uses reduced, sampled data for longer term reports. We do not maintain a separate visitor level analytics database. Your browser choice expires after 180 days. See Cloudflare’s analytics information and privacy policy.

You can refuse analytics or withdraw consent at any time using “Analytics settings” in the footer. Withdrawal stops future analytics from this browser and does not affect earlier lawful processing. See our analytics settings and storage information. You can use the website without allowing analytics.

International processing

Our providers may operate internationally. Processing locations depend on their service and account settings. Where a restricted international transfer is involved, applicable UK transfer requirements must be met, such as an adequacy regulation or approved contractual safeguards. Contact us for information about the safeguards relevant to your records.

How long we keep information

• Newsletter details: while subscribed. We review subscribers with no engagement for 24 months and consider reconfirming their interest.
• Unsubscribed contacts: marketing stops; we retain only the minimum suppression record needed to prevent further marketing by mistake.
• General enquiries: 12 months after resolution, unless an ongoing relationship, legal requirement or dispute means we need them longer.
• Booking and accounting records: normally six years, subject to applicable accounting and legal requirements.
• Dietary and accessibility details: deleted within 30 days after the workshop, unless needed for an unresolved incident.

Your choices and rights

You may request access, correction, deletion, restriction or a portable copy where the relevant right applies. You can object to processing based on legitimate interests and to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Contact Kayliegh and Ben using the details above. We may need to confirm your identity and will normally respond within one month. Newsletter recipients can also use the unsubscribe link in their emails.

You can complain to the Information Commissioner’s Office. We would welcome the chance to address your concern first, but you do not have to contact us before contacting the ICO.

Other websites and updates

External booking, social media and collaborator sites have their own privacy information. See our cookie information. We will update this notice if our services or handling of information changes.