Privacy Policy

Last updated: April 2026

In short: we only collect what we need, we never sell your data, and you stay in control.

We respect your privacy and are committed to protecting the personal data you share with us. This policy explains what we collect, why, and how you can exercise your rights. For our use of cookies specifically, please see our separate Cookie Policy at cullernegardens.uk/cookie-policy.

1. Who We Are

This website and the Cullerne Gardens project are owned and operated by Ekopia Social Investments Ltd, a membership-based organisation located at the Park Ecovillage Community, Findhorn, Scotland.

For the purposes of UK and EU data protection law, Ekopia Social Investments Ltd is the data controller for personal data collected through this website (cullernegardens.uk).

Contact details:

Ekopia Social Investments Ltd

567 West Whins, Findhorn Hive

The Park, Findhorn

Moray, IV36 3SH

Scotland

Tel: +44 (0)1309 691258

Email: info@ekopia.org.uk‍ ‍

You can also contact us about privacy matters at: hello@cullernegardens.uk or via the contact form on our website.

2. About Our Shop

Our veg box shop is located at shop.cullernegardens.uk. Although this address sits within our domain, the shop is entirely powered and operated by Ooooby (ooooby.org), an independent third-party platform.

Once you click through to shop.cullernegardens.uk, you are entering Ooooby's platform. Ooooby operates as an independent data controller for all data you provide there, including your name, delivery address, and payment details.

Ekopia Social Investments Ltd and Cullerne Gardens do not process, store, or have access to your payment or order data.

Please read Ooooby's Privacy Policy before placing an order.

3. What Personal Data We Collect

We collect personal data through the following routes on this website (cullernegardens.uk):

Contact form — when you send us a message, we collect your name, email address, and the content of your message.
Newsletter sign-up — when you subscribe to our mailing list, we collect your email address and, if provided, your name. Sign-up requires an active opt-in. No pre-ticked boxes are used, and our sign-up form contains a visible link to this Privacy Policy.
Website analytics — our website uses cookies and similar technologies via Squarespace to collect anonymised usage data such as page visits, browser type, and device. This data does not identify you personally. For more details, please see our Cookie Policy.

We do not collect any data via shop.cullernegardens.uk — that is handled entirely by Ooooby.

4. Why We Collect Your Data (Legal Bases)

We only process your personal data when we have a lawful basis to do so:

Contact form enquiries — processed on the basis of legitimate interests, to respond to your message.
Newsletter — processed on the basis of your freely given consent. You can withdraw consent at any time by clicking "Unsubscribe" in any email or contacting us directly.
Website analytics — where applicable, processed on the basis of your consent via our cookie banner and used to improve website performance.

5. How We Use Your Data

To respond to enquiries submitted via our contact form
To send you our newsletter, seasonal updates, and news about Cullerne Gardens
To manage and improve our website

We will never sell your data to third parties.

We will never use your data for automated decision-making or profiling.

6. Who We Share Your Data With

Squarespace, Inc. — our website and form hosting platform. Data may be transferred to servers in the USA. These transfers are covered by Standard Contractual Clauses and the EU-US, Swiss-US, and UK Extension Data Privacy Frameworks.
Squarespace Email Campaigns — our email marketing provider, used to manage newsletter subscriptions and send emails.
Ooooby — our shop platform, acting as an independent data controller.

We do not share your data with any other third parties without your explicit consent, except where required by law.

7. How Long We Keep Your Data

Contact form messages — stored in our Squarespace account and typically retained for up to 12 months unless required longer for ongoing communication.
Newsletter subscribers — retained until you unsubscribe, after which your data is deleted within 30 days.
Website analytics — managed by Squarespace per their own retention policies.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to access your data, have it corrected or deleted, restrict or object to its processing, and request a portable copy.

Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email hello@cullernegardens.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)

ico.org.uk‍ ‍

0303 123 1113

9. Data Security

We take appropriate measures to protect your personal data. This website is hosted on Squarespace, which maintains industry-standard security certifications. However, no internet transmission is completely secure.

10. Links to Third-Party Websites

This website links to third-party sites including our Ooooby-powered shop. Once you leave cullernegardens.uk, we are not responsible for the privacy practices of those platforms and encourage you to review their policies independently.

11. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.

12. Contact Us