Privacy notice

Last updated: 3 August 2026

Topiary E-Commerce LLP(“we”) is the data controller for personal data collected through topiaryecommerce.co.uk. You can reach us at hello@topiaryecommerce.co.uk or at Hazlewoods Staverton Court, Staverton, Cheltenham, Gloucestershire, GL51 0UX.

What we collect

This website collects personal data in one place only: the enquiry form. When you submit it we receive the name, email address and message you provide, along with the company name, phone number and service interests if you choose to give them.

We also record the marketing parameters attached to the link you arrived through (such as utm_source or a Google Ads click identifier), the page you landed on, and the website that referred you. This tells us which of our own activity is producing enquiries.

We store a one-way cryptographic hash of your IP address, salted with a secret. This lets us detect repeated automated submissions. We do not store the address itself and the hash cannot be reversed to recover it.

Why we are allowed to hold it

Our lawful basis is legitimate interests — namely responding to a business enquiry you have chosen to send us, and protecting the form from abuse. You asked us to get in touch; holding your details long enough to do so is what you would reasonably expect.

We do not add enquirers to a marketing list. If we ever offer one, it will be a separate, unticked opt-in, and declining it will not affect your enquiry.

How long we keep it

Enquiries are kept for 24 months from your last contact with us, after which they are deleted. Where an enquiry becomes a client engagement, the records move into our client files and are kept for the period our professional and tax obligations require.

Who else sees it

We use three processors, and no others:

• Supabase — stores the enquiry record. Data is held in the United Kingdom or European Economic Area.
• Resend — delivers the notification to us and the acknowledgement to you.
• Vercel — hosts the website and processes the request that carries your submission.

Each is bound by a data processing agreement. Where any transfer outside the UK occurs, it relies on the UK International Data Transfer Addendum. We do not sell personal data, and we do not share it with advertising networks.

Cookies and tracking

This website sets no cookies and runs no analytics, advertising or session-recording scripts. There is nothing to consent to, which is why you were not asked. If that changes we will ask first, and refusing will be exactly as easy as agreeing. See our cookie notice.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or provide it in a portable format. Because we rely on legitimate interests, you also have the right to object to our holding it at all.

Email hello@topiaryecommerce.co.uk and we will respond within one month. There is no charge.

If you are not satisfied with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.

Changes

If we change how this site handles personal data we will update this notice and change the date at the top.