1. Who We Are
GreenArk is a brand of Duopower. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (greenark.co) or purchase our products.
If you have any questions, contact us at [email protected].
2. What Data We Collect
We collect only the data necessary to process your order and improve our service:
- Contact information — your name, email address, shipping address, and phone number when you place an order.
- Payment information — processed entirely by Stripe. We do not see or store your full card details.
- Email address — when you join our waitlist or sign up for updates.
- Usage data — anonymised browsing behaviour if you consent to analytics cookies (Google Analytics 4).
3. How We Use Your Data
We use your data for the following purposes:
- To process and fulfil your orders (contractual necessity)
- To communicate with you about your order, warranty, or support requests
- To send marketing updates only with your explicit consent
- To improve our website and products using anonymised analytics
- To comply with legal obligations (e.g., tax records)
4. Legal Basis (GDPR / UK GDPR)
Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:
- Contract — to fulfil your order (Article 6(1)(b))
- Consent — for marketing emails and non-essential cookies (Article 6(1)(a))
- Legitimate interest — for analytics and website improvement (Article 6(1)(f))
- Legal obligation — to retain transaction records (Article 6(1)(c))
5. Data Sharing
We do not sell your personal data. We share data only with trusted third parties necessary to operate our business:
- Stripe — payment processing (Stripe Privacy Policy)
- Google Analytics — anonymised website analytics (if you consent to cookies)
- Email service provider — to send order confirmations and (with consent) marketing emails
- Shipping carriers — delivery of your order
All third parties are contractually required to handle your data in accordance with UK GDPR.
6. Data Retention
We retain your personal data only as long as necessary:
- Order data — 6 years after your last transaction (tax/accounting requirement)
- Email marketing data — until you unsubscribe
- Analytics data — 26 months (Google Analytics default)
7. Your Rights (UK GDPR)
You have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — correct any inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest or direct marketing
To exercise any of these rights, email [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Cookies
Our website uses cookies. You can manage your preferences via the cookie consent banner when you first visit the site.
- Strictly necessary cookies — required for the site to function (e.g., remembering your cookie preferences). No consent needed.
- Analytics cookies — Google Analytics 4 to help us understand how visitors use the site. Used only with your consent.
- Marketing cookies — used for ad targeting (only with your explicit consent).
9. International Transfers
Your data may be transferred to and processed in the United States (where Stripe, Google, and our email provider are based). We ensure adequate safeguards are in place through Standard Contractual Clauses (SCCs) as approved by the UK ICO and European Commission.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for all data in transit (HTTPS)
- Stripe's PCI DSS Level 1 certification for payment processing
- Access controls restricting who can view customer data
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
12. Contact
For any questions about this Privacy Policy or your data:
Email: [email protected]
Website: greenark.co
GreenArk is a brand of Duopower.