Privacy Statement

This privacy policy explains how Evergreen Oak Limited (Jersey) ("we") collects, uses and protects personal information through this website and our services, and the choices and rights you have. We are responsible for that information (its controller, in data protection law).

We are based in Jersey.

This policy applies wherever you visit from. Please read it with any more specific notice we give you when we collect information, such as on a form; those notices add to this policy.

If we handle personal information for a customer as part of a service we provide to them, we do so on their instructions, and their privacy notice explains how it is used.

What we collect

Personal information means any information about a person who can be identified from it. Depending on how you use this website and our services, we may collect:

• identity details, such as your name or username;
• contact details, such as your email address, phone number and postal or delivery address;
• order and payment details, such as what you buy from us and confirmation of payment; when a payment provider handles a card payment, we do not receive your full card number;
• account and profile details, such as your login, preferences, interests, feedback and survey answers;
• what you write to us or post, such as messages, comments, reviews and attachments;
• technical details, such as your IP address, browser and device type, operating system and an approximate location based on your IP address;
• usage details, such as the pages you visit, how you reached them and how you use the site;
• your marketing preferences and cookie choices.

We collect it in these ways:

• Information you give us: when you contact us, comment, create an account, subscribe to updates, take part in a survey or buy from us.
• Information collected automatically: your IP address, browser and device details and the pages you visit, which our hosting and security services record to deliver and protect the site, and information from cookies and similar technologies, as explained under Cookies.
• Information from others: for example confirmation of a payment from a payment provider, or details from a service you choose to sign in with.

We may also use aggregated or anonymised information, such as how many people visit a page, which does not identify you. If we combine it with other information so that it can identify you, we treat it as personal information.

We do not ask for sensitive information, such as about your health, religious beliefs or ethnic origin. Please do not send it to us unless we have agreed how it will be handled.

Where we need information to provide what you ask for, or because the law requires it, we say so when we ask. Without it, we may not be able to provide what you asked for, such as an order or a reply.

If you post a comment, review or other content on this website, other people can see it. We will consider reasonable requests to remove it, but copies may already be held by search engines or archives that we do not control.

How we use it and why

We use personal information only for these purposes. Where data protection law asks for a legal basis, we rely on the one given for each:

• To reply to you and provide what you ask for, including orders and support: to take steps at your request or to perform a contract with you.
• To tell you about changes to our terms, this policy or a service you use: to perform a contract with you, or legal obligation.
• To run, secure and improve the website and our services, and to prevent fraud and abuse: our legitimate interests, balanced against your rights.
• To send newsletters or marketing you asked for: your consent, which you can withdraw at any time with the unsubscribe link or by contacting us.
• To use optional cookies, such as for statistics or marketing: your consent, where the law requires it.
• To keep records and meet our legal, tax and accounting obligations: legal obligation.
• To establish, exercise or defend legal claims: our legitimate interests.

More than one legal basis may apply, and you can ask us which one we rely on for a particular use. When we rely on legitimate interests, we weigh them against the effect on you and your rights, and do not rely on them where your interests override ours. You can ask us how we made that assessment.

We send marketing only if you ask for it or, where the law allows, about similar products and services after you buy from us. Every message explains how to stop. Stopping marketing does not stop messages we need to send about an order, account or service.

We do not sell your personal information or give it to others for their own marketing. If you allow marketing cookies, however, the advertising services that set them may also use what they collect for their own purposes, as their privacy policies explain.

We do not use personal information for an unrelated purpose without telling you first.

Artificial intelligence (AI)

We use AI services from several providers to help develop and maintain this website and our services, and may also use them to help us answer questions and support requests.

When we use AI to help with a message or request you send us, we endeavour to remove personal information, such as names, contact details and account or order details, from what we send to the AI service, so that only the general content of the message is processed to help prepare an answer.

Where we can, we choose AI services and settings that do not use what is sent to them to train their models. AI does not make decisions about you that have legal or similarly significant effects.

Cookies

Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage and tracking pixels, work in a similar way, so we call them all cookies here.

We use cookies and similar technologies. Necessary ones make the site work and are always on. Others, such as for statistics, embedded content or marketing, are used only with your consent where the law requires it. The kinds we may use are:

• Necessary: Needed for the site to work, such as remembering your cookie choices. Always on.
• Preferences: Remember your choices and load extras such as live chat.
• Statistics: Help us see how the site is used, so we can improve it.
• Embedded content: Videos, maps and posts from other sites, which may track you there.
• Marketing: Measure and personalise ads, on this site and others.

Embedded content, such as videos, maps and social media posts, and sharing buttons from other websites can set their own cookies and work as if you visited those websites.

You can also set your browser to refuse or delete cookies. Some parts of this website may not work without them.

You can change or withdraw your consent at any time in Cookie settings.

Where the law requires consent, we hold back optional cookies, and the scripts and embedded content that set them, until you allow them.

We remember your choice in a necessary cookie in your browser for 365 days, then ask again.

If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies unless you choose otherwise.

To show what was agreed, we also keep a record of each choice on this website: the choice, when it was made, the wording shown and a random ID that is kept with your choice and shown in Cookie settings, but not your IP address or browser details. We keep these records for 365 days, relying on our legal obligation to show consent and our legitimate interests.

Our cookie policy lists the cookies we use, what each does and how long it is kept.

Who we share it with

We share personal information only when needed:

• with service providers who handle it for us on our instructions, such as for hosting, backups, IT support, email, payments and customer support. They may use it only to provide their services to us, must keep it secure, and may use other providers only on the same terms;
• with professional advisers, such as accountants, auditors, lawyers, banks and insurers;
• with tax authorities, regulators, courts, the police and others when the law requires it, or to protect the rights, property or safety of our customers, others or us;
• with a buyer or successor if our business or this website is sold or merged, who may use it as this policy describes;
• with others when you ask us to or agree to it, such as a business you ask us to put you in touch with, which then uses it under its own privacy notice.

If you pay on a payment provider's page, the provider handles your payment details under its own terms and privacy notice.

International transfers

Some of our service providers store or process information in other countries, depending on their settings, where their systems are and where their support teams work. Where practical, we choose providers and settings that keep information in our own region.

Where data protection law requires it, we make sure suitable safeguards are in place, such as an adequacy decision, standard contractual clauses or an equivalent agreement, together with measures such as encryption and access controls. You can ask us for more information about them.

How long we keep it

We keep personal information only as long as we need it for the purposes above, including to meet legal, accounting or reporting requirements, then delete or anonymise it.

To decide how long, we consider the amount, nature and sensitivity of the information, the risk of harm from unauthorised use, why we hold it and whether we can achieve that another way, and what the law requires.

For example, we keep messages as long as needed to deal with them and any follow-up, account details while your account is open, and order and accounting records as long as tax and accounting law requires, which can be several years. If you ask us to delete information, we keep a short record of the request to show we dealt with it. Copies in backups are deleted as the backups are replaced.

Security

We protect personal information with appropriate technical and organisational measures. Depending on the service, these may include encrypted connections, secure logins with strong passwords and multi-factor authentication, access only for people who need it and who must keep it confidential, regular updates, firewalls and monitoring, and backups. We expect our service providers to protect it in the same way.

If a data breach puts your rights at risk, we will tell you and the authorities where the law requires it.

No website or email is completely secure, so please think carefully before sending sensitive information by email, or ask us for a more secure way to send it.

Your rights

Depending on where you live, you may have the right to:

• be told how we use your personal information, as this policy does;
• ask for a copy of the personal information we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted, or its use restricted;
• object to how we use it, including to direct marketing at any time and to uses based on our legitimate interests;
• receive information you gave us in a commonly used, machine-readable format, or have it sent to another organisation, where we use it with your consent or for a contract;
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you;
• withdraw your consent at any time, without affecting what we did before.

Some rights apply only in certain circumstances or may be limited by law, for example where we must keep records. If so, we will tell you.

To use these rights, contact us using the details below and tell us what you would like. We may need to confirm your identity first, so that we do not give out, change or delete someone else's information, and may ask for details that help us find what you need. If someone asks on your behalf, we need your written permission.

We reply without undue delay and within four weeks. If a request is complex or you send several, we may take longer where the law allows, and will tell you why. We do not charge, unless a request is clearly unfounded, repetitive or excessive, when we may charge a reasonable fee or decline it.

Please tell us if your personal information changes, so we can keep it accurate.

Complaints

If you are unhappy with how we handle your personal information, including our use of automated tools such as AI, please contact us first so we can try to put it right. Tell us what happened and what you would like us to do. We will acknowledge your complaint, look into it promptly and fairly, and tell you the outcome and what we will do about it.

You also have the right to complain at any time to the data protection authority where you live or work, or in Jersey, where we are based.

Children

This website is not intended for children. We do not knowingly collect personal information from children under the age at which they can consent to it where they live, and ask them not to send it without a parent's or guardian's permission. If you think a child has given us personal information, please contact us and we will delete it.

Other websites

This website may link to other websites, or include content, plug-ins or applications from them, such as videos, maps and social media posts. Following those links or allowing those connections may let the other websites collect information about you. We do not control them and are not responsible for their privacy practices, and this policy does not cover them; please read their own privacy policies.

Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page, and we will tell you about significant changes where we can. Please check this page from time to time.

Contact

If you have any questions about this policy or how we handle your personal information, or want to use your rights, please contact us: