Garden Centres Trade Sections
Cash & Carry

Hillier Garden Centres | Privacy Policy

This Privacy Policy is for:

HILLIER GARDEN CENTRES, a division of Hillier Nurseries Ltd

Other privacy policies can be found here:  




Hillier Nurseries and Garden Centres have been growing and selling quality plants since 1864 and we continue to strive to supply plants, gardening accessories and services of the highest calibre to all our customers. Our mission is to inspire the creation of green living spaces for now and the future.

We believe it is important for you to know what information we collect and how we treat the information you share with us.

1. What this privacy policy covers

This privacy policy explains the personal data Hillier Garden Centres collects about you and how it is used. Personal data relates to a living individual who can be identified from that data. “Personal information” or “personal data” includes your name, physical address, e-mail address(es), telephone numbers and other similar information that you provide to us.

Our use of your personal data is regulated under the General Data Protection Regulation (Regulation (EU) 2016/679)) which applies across the European Union (including in the United Kingdom) and we are responsible as “Controller” for the purposes of those laws.

Hillier Garden Centres promises to respect any personal data you share with us and keep it safe. We aim to be clear when we collect your data and not do anything you wouldn’t reasonably expect.

If you have any queries regarding this privacy policy please contact the Data Protection Team, Hillier Nurseries, Ampfield House, Ampfield, Romsey SO51 9PA or email

2. Where and how we collect your information

Information you give us

We will use your personal data in the following circumstances:

For example, when you make a purchase with us or book on to events, sign up to Gardening Club or arrange delivery for an item, we will ask you for your personal information in order to for us to process your purchase or book you on to an event, to be able to deliver an item, or process your Gardening Club membership. This information is likely to include contact information, payment information, or marketing preferences.

Information collected automatically through our website

In this privacy policy, where we talk about websites we are referring to the Hillier website (and subdomains thereof).

Each time you visit our website we will automatically collect the following information:

Some online identifiers (such as static IP addresses) are personal information.

We collect Device Information so that we can ensure adequate technical support for our website and ensure it is functioning properly on all operating systems/browsers. We want to ensure the content of our website is being presented to you in the most appropriate way to ensure it is easy to use/navigate. We also need this information in order to allow you to participate in interactive features on the website where you choose to do so.

We collect Log Information so that we can better understand how our website is used and improve its functionality/content. We want to provide you with a customised service.

Your Device Information and Log Information will be combined with that of our other users and reported in statistical form. It will not be possible to identify you from this aggregated information.


To enhance your experience on our website and social media platforms we use ‘cookies’. This means that the Hillier website will remember you for a particular length of time.

When you access our website, your device may provide us with data about the device you’re using, including the type of device, operating system, and it may report details of a website or app crash. Device manufacturers or operating system providers will be able to provide you with more details about the data your device makes available to us.

The list of cookies used by Hillier Garden Centres on digital platforms are listed below.

Google Analytics

Google Analytics is used on our website to help us understand how visitors use and engage with our website. This is so we can make improvements to our web services and your online experience.

The Google Analytics tracking tool uses cookies to collect information and report website usage statistics. Individuals are not identified during this process, to Google or to Hillier. Information generated by the cookie about your use of the Hillier website will be transmitted and stored by Google on servers in the United States.

Google’s privacy policy, in regards to Google Analytics, can be found here:

You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on:

These activities are in our legitimate business interests.

Other Websites

Our digital channels may contain links to other sites on the Web. The information practices of those websites are not covered by this privacy policy. Although we are committed to protecting your personal data, we cannot control and do not accept any responsibility or liability for the privacy practices or content of such other websites. We encourage you to read the privacy statements of each and every website that collects personal information. You are solely responsible for maintaining the secrecy of your passwords and other account information.

3. What data do we collect and how is it used?

The type of personal data we collect depends on the purpose of collecting the information.

3.1  Gardening Club Members

If you join the Hillier Gardening Club as a member, we may collect the following personal data: name, email address, address, postcode, your local hillier garden centre, date of birth.

We will use this data for the following reasons:

We process this data in order to perform our contract with you and offer you information about our products and services as part of our legitimate business interests.

3.2  Event Participants & Restaurant Bookings

If you book an event with a Hillier Garden Centre or book a table in one of our restaurants, we may collect the following data: name, email address, phone number, dietary requirements (if applicable), and gardening club membership number (if applicable).

We will use this data for the following reasons:

We process this data in order to perform our contract with you or as part of our legitimate business interests.

3.3  Home Deliveries

If you arrange a home delivery for products from a Hillier Garden Centre, we will collect the following personal data: name, phone number, email address delivery address, delivery postcode

We will use this data for the following reasons:

We process this data in order to perform our contract with you.

3.4  Trade Card Members

If you sign up as a Trade Card member, we collect the following personal data: name, email address, business name, address, postcode, company registration number, date of incorporation, website address, telephone number, signature.

We will also require two types of identification to process your application, once processed this evidence will be destroyed.

We will use this data for the following reasons:

We process this data in order to perform our contract with you.

3.5  Enquiries and Complaints

When you send us an enquiry or complaint we will share this information and details with relevant parties to be able to resolve your enquiry. We will only keep this information for 6 months after resolution.

It is in our legitimate business interests to collect this information.

3.6  Data collection for other reasons

Sometimes there is a need to collect data for other specific reasons, these include, but are not limited to: competition entries.  photography, accident forms, and CCTV imagery for the purposes of crime prevention and public safety / videos and phone call logging to ensure that we continually improve our service s and allow us to deal with complaints.

It is in our legitimate business interests to collect this information.

If you would like more information about these specific reasons, please contact Details for how long we keep the personal information that is collected and processed by Hillier Garden Centres can be found in our retention policy. If you would like a copy of our retention policy please email

Images and photography

When you are visiting our garden centres or attending an event your photograph may be taken if you give us your consent. If you consent to having your photo taken and used for marketing or PR purposes we will hold your name, image and age (if applicable) on file for future re-use. We will ask you to fill out a consent and release form to allow us to use your image for such purposes.

3.7 Direct marketing

Email/text marketing

We will only contact you by email or text message if you have consented to this (unless we have a legitimate business reason to contact you, for example dealing with a complaint). Consenting to Hillier Gardening Club emails or opting in to email communications, means you have granted us permission to use your email address to send you email marketing communication. You may choose to opt out of such communications at any time – more information about opting out is in section 3.7

Postal marketing

If you have provided us with your postal address we may contact you by post if you have consented for us to do so. We may also contact you by post if we have a legitimate reason to contact you. Consenting to Hillier Gardening Club postal marketing means you have granted us permission to use your address to send you marketing communications.

3.8 Third parties

Hillier Garden Centres will not sell your data and we will not share your data for third party marketing purposes. In some circumstances we may need to share your details with a third party for processing.

This could be to process your personal details if we need to send your data to a mailing house in order to fulfil a postal mailing to you, this could include sending you a letter about your membership. Or it could be to send you emails or text messages via a marketing communications platform such as Salesforce or Mailchimp. We also store data on the system we use for sales in centre to store membership details for Gardening Club members and purchase information. We have a legitimate business interest to undertake these activities.

If we would like to use any information that you have provided to us for marketing purposes, we will always ask for your consent to do so.  For example, if we display testimonials of satisfied customers on our website or advertising materials. With your consent, we may post your first name alongside the quote.

3.9 Enhancing your member experience

Sometimes we use techniques to make sure that the communications we send you are relevant. This means we can provide an improved experience for our customers and gardening club members.

To do this, we may analyse geographic and demographic information to build a profile, as well as online behaviour and purchase history. This helps us to better understand your interests so that our communications are more relevant to you. For example, we may look at your location so we can share information about relevant events in your local garden centre.

It is in our legitimate business interests to collect this information.

You can opt out of your data being used in this way by emailing   

3.10 Your choice:

You always have a choice as to whether you want to receive communications about our products and services, and how you receive them. You can opt out of this when we collect your details or at a later time.

If you want to change your preferences, or opt out of communications, you can do so by contacting at any time. You can also opt out of the email marketing by clicking the unsubscribe link at the bottom of any email from us

If you choose not to be contacted by us we will never send you personalised marketing communications.  We will only keep any necessary details on a ‘suppression list’ to ensure you aren’t contacted.

3.11 Retention

We hold your personal data and information for only as long as necessary for the purpose needed.

Details for how long we keep the personal information that is collected and processed by Hillier Garden Centres can be found in our retention policy. If you would like a copy of our retention policy please email

3.12 Under 16s

On some rare occasions we may collect and manage data of under 16’s, for example school visits to our centres where photos are taken. We will always require a consent form to be completed. We will always manage this data in a way which is appropriate to the age of the child and will only keep this data for the purpose in which it was collected. We will always seek consent from parents or guardians of the child.

3.13 Job application data

All Hillier vacancies are advertised on our website though we do not collect or store any of your details on our website.  When you click on the link you are being transferred to our third party supplier.  Please refer to their privacy policy on their pages for further details of data protection and how your personal details are processed.

For more information please see our Job Applicant Privacy Policy

4. How do we keep your personal data secure?

To protect the personal data you provide us with we always ensure that we have the necessary controls in place, implementing suitable physical or electronic security alongside organisational training. Regular audits are carried out to identify who has access to data so that we can ensure that your information is only accessed by trained staff who have a legitimate reason to access it.

Information storage and security

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.

When we use external companies to process your personal data on behalf of Hillier Garden Centres thorough checks are carried out on any companies we work with. Contracts are in place with each of these companies to ensure that they process your information in line with our expectations and the General Data Protection Regulation.

Transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our channels; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We may disclose your Personal Information to any member of our group, which means our ultimate holding company and its subsidiaries (if applicable), as defined in section 1159 of the UK Companies Act 2006. We will only share your Personal Information outside of our group with (a) your consent; (b) as required by law; (c) in the event that we sell or buy any business or assets; (d) if all or substantially all of our assets are acquired by a third party; or (e) to protect customers or the public, with companies that help Hillier fulfil its obligations with you, and then only with partners who share Hillier’s commitment to protecting your online privacy.

Sometimes we use external companies to process your personal data on behalf of Hillier Garden Centres. We carry out thorough checks on any companies we work with and have a contract in place with each of these companies to ensure that they process your information in line with our expectations and the General Data Protection Regulation.

4.1 Your credit and debit card information

When making payments online or in one of our garden centres, every effort is made to maintain customer confidentiality. This means ensuring the security of your credit card details and other personal information. We do not store card details on any Hillier Garden Centre system.

We also ensure our systems and processes comply with PCI DSS, the worldwide Payment Card Industry Data Security Standard. The PCI DSS was set up to help businesses process card payments securely and reduce card fraud. This is achieved through tight controls of storage, transmission and processing of data, it is intended to safeguard sensitive cardholder data. For online payments Hillier Garden Centres use 3D secure authentication, which is an additional fraud prevention scheme.

5. Your right to your personal information

We recognise that the personal information we hold about you belongs to you and it is right that you have control over that personal information. We have detailed below a summary of your legal rights.

You can:

If you would like to exercise any of these rights, or discuss them in more detail, please contact us at Data Protection Team, Hillier Nurseries, Ampfield House, Ampfield, Romsey SO51 9PA or email We will then send you a form to complete and send back to us by post. We will also require you to provide two forms of identification. Once we have received your information request and your identification we will respond within 30 days.

6. Modifications to this privacy policy

We may revise this Privacy Policy from time to time. You are responsible for checking this policy when you visit our digital channels to review the current policy. We will use information in accordance with the privacy policy under which the information was collected.

If we make any significant changes to the way we collect and process your personal information we will make this clear on the website, or by contacting you directly.

7. Raising Queries or Concerns

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to or by post to Hillier Gardening Club, Hillier Garden Centres Head Office, The Stables, Ampfield House, Ampfield, Romsey, Hampshire SO51 9BQ. If you are not satisfied with the response you receive from us for any reason then you may wish to contact the Information Commissioner’s Office via

Hillier Nurseries Ltd are on the ICO Data Protection Register

Registration Number: ZA162542

Last updated: 24 May 2018