Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how personal information is collected, used, stored, disclosed and protected when you visit Garden Building Guide (the "Website"), submit a product enquiry, request promotional information or subscribe to email updates.

The Website is an independent advertising and referral platform featuring garden buildings, summerhouses, log cabins, outdoor saunas, garden offices and related products.

The Website is operated by LEVER DIGITAL LTD ("we", "us" or "our").

We aim to process personal information fairly, lawfully and transparently in accordance with applicable United Kingdom data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data Controller

The data controller responsible for personal information collected through this Website is:

LEVER DIGITAL LTD
Private Limited Company
Company Number: SC675957
Registered in Scotland, United Kingdom
Incorporated: 30 September 2020

Registered Office:
5 South Charlotte Street
Edinburgh
Scotland, EH2 4AN
United Kingdom

ICO Data Protection Registration Number: ZB228248

2. Personal Information We Collect

The categories of personal information we process depend on how you interact with the Website.

2.1 Information submitted through enquiry forms

When you request information about a garden building, promotional offer or advertised product, we may collect:

• First name.
• Last name.
• Email address.
• Selected product category.
• Selected product or model.
• Details relating to your enquiry.
• Date and time of submission.
• Confirmation that the required privacy acknowledgement or contact selection was submitted.

We use this information to identify your enquiry, respond to your request and provide relevant information concerning the product or service you have expressed interest in.

2.2 Email subscription information

If you request to receive promotional emails or product updates, we may collect:

• Email address.
• Marketing consent preference.
• Date and time of subscription.
• Subscription confirmation status.
• Information reasonably necessary to demonstrate consent and manage unsubscribe requests.

Email marketing is optional. Submitting a product enquiry does not automatically subscribe you to promotional emails.

2.3 Technical and usage information

When you visit the Website, our hosting infrastructure may process technical information necessary to deliver the requested pages, maintain security and prevent misuse.

Depending on server configuration, this information may include:

• IP address.
• Browser type and version.
• Device and operating system information.
• Date and time of access.
• Requested pages and server response codes.
• Referring website or URL.
• Technical identifiers used for abuse and spam prevention.

2.4 Advertising and referral information

The Website may receive referral information in URLs when visitors arrive through online advertisements or promotional campaigns.

This may include campaign parameters, referral identifiers, advertising source information and landing-page identifiers.

Where such data is processed, it is used for relevant campaign attribution, operational analysis, security or referral administration, subject to the applicable legal requirements.

Some identifiers may constitute personal data when they can be linked to an identifiable individual.

3. How We Collect Information

We may collect information through the following methods:

• Directly from you when you complete an enquiry or subscription form.
• Automatically through ordinary website and server operations.
• Through referral information included in URLs.
• Through correspondence when you contact us by email.

We do not require visitors to create a user account in order to browse the Website.

4. Purposes and Legal Bases for Processing

We process personal data only where an appropriate legal basis applies. The basis depends on the particular purpose of processing.

4.1 Responding to product enquiries

We use the personal information supplied through an enquiry form to respond to your specific request and provide relevant information.

Legal basis: Our legitimate interests in handling requested enquiries and communicating with visitors who have asked us for information, where those interests are not overridden by the individual's rights and freedoms.

In circumstances where processing is necessary to take steps at your request before entering into a contract with us, Article 6(1)(b) UK GDPR may apply instead.

4.2 Optional promotional emails

Where you choose to subscribe, we process your email address to send relevant marketing communications.

Legal basis: Consent under Article 6(1)(a) UK GDPR, where applicable. Marketing communications must also comply with PECR.

Consent may be withdrawn at any time without affecting processing carried out lawfully before withdrawal.

4.3 Security and fraud prevention

We may process limited technical data to prevent spam, investigate suspected abuse, protect systems and maintain website security.

Legal basis: Legitimate interests under Article 6(1)(f) UK GDPR.

4.4 Legal and regulatory compliance

Certain records may be processed or retained where necessary to comply with legal obligations, respond to valid regulatory requests or establish, exercise or defend legal claims.

Legal basis: Legal obligation under Article 6(1)(c) UK GDPR, or legitimate interests where applicable.

4.5 Website and campaign measurement

Where we process campaign referral data or website performance information, we assess the appropriate lawful basis for that processing.

If any measurement technology stores or accesses non-essential information on a user's device, we will apply the relevant consent requirements before activating that technology.

5. Product Enquiry Processing

When you submit a product enquiry, the information is transmitted to the Website's server for validation and processing.

Our enquiry system may retain a record of the submitted information to help us respond, maintain administrative records and prevent duplicate or abusive submissions.

Submitted enquiries may also be forwarded to a designated administrative email inbox operated or authorised by LEVER DIGITAL LTD.

If an email notification cannot be delivered, the enquiry may remain stored in the Website's administrative system for subsequent handling.

Submitting an enquiry does not create a purchase contract, product reservation or guaranteed promotional offer.

6. Sharing of Personal Information

Personal information may be shared with trusted service providers where necessary for the operation of this Website.

These may include:

• Website hosting and infrastructure providers.
• Email delivery and communication providers.
• Technical maintenance and security service providers.
• Professional advisers where reasonably necessary.
• Regulators or public authorities where disclosure is legally required.

Where providers act as processors on our behalf, we will apply appropriate contractual and security safeguards as required by data protection law.

6.1 Third-party retailers and advertisers

The Website features products from independent retailers and manufacturers, including Summerhouse24.

Submitting an enquiry to Garden Building Guide does not, by itself, mean that your personal information will automatically be disclosed to Summerhouse24 or any other retailer.

If an enquiry is to be shared with a supplier or advertising partner, we will provide appropriate information about that disclosure and identify an applicable lawful basis before the transfer takes place.

Where separate consent is legally required, we will request it before making the relevant disclosure.

6.2 We do not sell personal data

We do not offer visitors' personal information for unrestricted sale. Any referral-related disclosure must follow the purposes, safeguards and lawful bases described in this Policy.

7. International Data Transfers

LEVER DIGITAL LTD is registered in the United Kingdom.

Depending on the location of our hosting, email or technical service providers, certain personal information may be processed outside the UK.

Where international transfers are subject to UK GDPR restrictions, we will ensure that an appropriate transfer mechanism or other permitted safeguard applies.

These mechanisms may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful mechanism.

You may contact us for information about the safeguards relevant to your personal information.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, regulatory and security requirements.

8.1 Product enquiries

As a general retention target, product enquiry records should not be retained for longer than 12 months after the last relevant interaction, unless a longer period is necessary for a lawful purpose.

8.2 Email subscriptions

Subscription information may be retained while your subscription remains active.

If a confirmation process is used, unconfirmed subscription requests should normally be deleted within 30 days.

After unsubscribing, limited information may be retained where necessary to respect your opt-out preference or demonstrate previous consent.

8.3 Technical and security records

Server logs and technical security information should be kept for a limited period proportionate to operational and security requirements.

Retention periods may differ where records are necessary for an ongoing investigation, legal obligation or claim.

9. Cookies and Similar Technologies

Cookies are small data files that websites may store on your device. Similar technologies can include tracking pixels, local storage and other device-based identifiers.

The Website may use technologies strictly necessary for security, functionality or service delivery.

Non-essential analytics, advertising or profiling technologies will only be activated where the applicable legal requirements, including any required consent, have been satisfied.

Advertising click identifiers included in a URL may also be processed as part of campaign attribution. Their treatment depends on whether they constitute personal information and whether device storage or access is involved.

You can control cookies through your browser settings. Rejecting non-essential cookies should not prevent access to the Website's basic informational content.

10. Data Security

We aim to maintain appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

Depending on the systems involved, these measures may include:

• HTTPS encryption in transit.
• Restricted administrative access.
• Secure server configuration.
• Software and security updates.
• Anti-spam and abuse-prevention controls.
• Access controls for stored enquiries.
• Appropriate backup and recovery procedures.

No internet transmission or digital storage system can be guaranteed to be completely secure.

If you believe your information has been compromised in connection with this Website, please contact us promptly using the details below.

11. Your Data Protection Rights

Subject to the conditions and exceptions provided by applicable law, you may have the following rights:

• Right of access: Request a copy of personal information held about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of personal information in qualifying circumstances.
• Right to restriction: Request restriction of certain processing activities.
• Right to object: Object to processing based on legitimate interests in relevant circumstances.
• Right to data portability: Receive eligible personal information in a portable format where applicable.
• Right to withdraw consent: Withdraw consent where it is the legal basis for processing.
• Rights concerning automated decisions: Exercise applicable statutory rights relating to qualifying automated decision-making.

We may request reasonable information to verify your identity before responding to a data protection request.

We will respond within the period required by applicable data protection law.

We will not charge a fee for ordinary requests, except where a fee is permitted by law.

12. Marketing Preferences and Opt-Out

Promotional email communications are optional.

If you subscribe, you may withdraw your consent at any time.

Marketing emails should also provide an appropriate unsubscribe mechanism.

Withdrawing marketing permission does not prevent us from sending necessary non-marketing responses concerning an enquiry you submitted, where otherwise lawful.

13. Children's Privacy

The Website is intended for adults interested in garden buildings and related products.

We do not knowingly seek to collect personal information from children.

If we become aware that we have collected personal information from a child without an appropriate lawful basis, we will take reasonable steps to address the matter.

14. Automated Processing

The Website may use basic automated validation, spam detection and security checks.

Such measures may help identify malformed, suspicious or abusive submissions.

We do not intend to use enquiry form information to make solely automated decisions producing legal or similarly significant effects on individuals.

15. Third-Party Websites

The Website may contain links to independent retailer and supplier websites.

These websites have their own privacy policies and data processing practices.

We are not responsible for the privacy practices of websites operated independently from LEVER DIGITAL LTD.

We recommend reading the relevant privacy notice before providing personal information to an external website.

16. Complaints to the ICO

If you are dissatisfied with how we handle your personal information, please contact us so that we can review your concern.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

ICO website: https://ico.org.uk/

LEVER DIGITAL LTD
ICO Registration: ZB228248

17. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to:

• Our website functionality.
• Personal data processing activities.
• Advertising or referral arrangements.
• Service providers and infrastructure.
• Applicable legal or regulatory requirements.

Any updated version will be published on this page with a revised date.

Where required, we will provide additional notice or obtain fresh consent before introducing materially different processing.

18. Contact Us

For privacy questions, data protection requests or concerns regarding this Privacy Policy, contact:

LEVER DIGITAL LTD
5 South Charlotte Street
Edinburgh
Scotland, EH2 4AN
United Kingdom

Email: [email protected]

General enquiries: [email protected]