Privacy Notice

Last updated: 18 September 2026

Controller and contact details

The data controller for this website is Gms Garden Machinery Limited, a private limited company registered in England and Wales under Company No. 09867469 (Companies House). Our registered office is at 47 Otley Road, Leeds, LS6 3BJ. You can reach us by email at [email protected] or by telephone on +44 113 026 5119. The persons responsible for data protection matters within the company are Jacqueline Hannaby and Simon Hannaby.

Scope of this policy

This Privacy Notice applies to all personal data collected and processed through fitshluminous (accessible at fitshluminous.world), a gardening and balcony greening journal operated by Gms Garden Machinery Limited. It covers data collected via the contact form on this website, server-generated logs arising from your visit, and data processed in connection with external resources such as Google Fonts. It does not cover third-party websites linked from our pages; those sites operate under their own privacy policies.

Categories of data and sources

When you submit the contact form, we collect your name, email address, and the content of your message, together with an optional subject line. When you visit any page of fitshluminous, our hosting infrastructure automatically records certain technical data including your IP address, the page requested, the date and time of the request, the referring URL, and your browser and operating system identifiers. These server logs are generated automatically as part of the normal operation of any web server. We do not collect any special category data as defined in Article 9 UK GDPR, and we do not knowingly collect data from individuals under the age of 16.

Purposes and legal bases (Art. 6 GDPR)

We process contact form data for the purpose of responding to your enquiry, on the legal basis of your consent (Article 6(1)(a) UK GDPR), which you provide by ticking the consent checkbox and submitting the form. Server log data is processed on the basis of our legitimate interests (Article 6(1)(f) UK GDPR) in maintaining the security and technical integrity of the website. We do not use your personal data for automated profiling, behavioural advertising or any purpose beyond those described in this notice.

Contact form and newsletter

Data submitted via the contact form - name, email address, subject and message - is used solely to respond to your enquiry. We retain this data for a period of twelve months from the date of submission, after which it is securely deleted unless a longer retention period is required by applicable law or ongoing correspondence. fitshluminous does not currently operate a newsletter subscription service, and no email address is added to any mailing list without a separate, specific act of consent.

Hosting and server logs

fitshluminous is hosted by a European hosting provider. As part of normal web server operation, access logs are generated that record the IP address of each visitor, the pages accessed, the time and date of access, the HTTP status code returned, and the user-agent string of the browser used. These logs are retained for a maximum of thirty days for security monitoring purposes and are then deleted automatically. We do not share server log data with third parties except where required by law.

Web fonts and external resources

This website uses Google Fonts to display the typefaces Syne and Onest. When a page loads, your browser makes a direct request to Google's servers to retrieve the font files, which means Google receives your IP address as part of that request. This transfer is governed by Google's privacy policy. We have configured the font loading to use the standard Google Fonts API (fonts.googleapis.com); no other external resources are loaded except for those disclosed in this notice. If you prefer not to transmit your IP address to Google, you can disable web fonts in your browser settings, which will cause the site to display in your browser's default typeface.

Cookies (reference to cookie policy)

This website uses cookies and similar technologies. A cookie consent banner is presented on your first visit, and you can choose to accept all cookies, decline non-essential cookies, or manage your preferences by category (strictly necessary, statistics, marketing). Full details of the cookies in use, their purpose and their retention periods are set out in our Cookie Policy. Strictly necessary cookies cannot be declined because they are required for the website to function. You can change your cookie preferences at any time by clicking the "Manage" button in the cookie banner.

Recipients and processors

Your personal data is not sold, rented or traded to third parties. We use a European hosting provider as a data processor operating under a data processing agreement consistent with Chapter IV of the UK GDPR. Google LLC acts as a data processor in relation to the delivery of web fonts. No other processors receive your personal data in connection with the operation of this website.

Retention periods

Contact form submissions are retained for twelve months from the date of receipt. Server access logs are retained for thirty days. Cookie consent records are retained for twelve months. Data that forms part of our financial or legal records is retained for six years in accordance with Companies Act 2006 obligations. Data is deleted or anonymised at the end of the applicable retention period.

Transfers outside the EU/EEA

Google Fonts involves the transfer of your IP address to Google's servers, which may be located outside the UK and EEA. Google relies on Standard Contractual Clauses approved by the European Commission and recognised under UK adequacy arrangements as a transfer mechanism. No other transfers of personal data to countries outside the UK or EEA take place in connection with this website.

Security measures

We implement technical and organisational measures appropriate to the risk of processing personal data in connection with this website. These include encrypted transmission via HTTPS (TLS), access controls limiting who within the company can access contact form submissions, and regular review of our hosting and processing arrangements. No transmission over the internet is completely secure, but we take reasonable steps to protect the data you send us.

Your rights (access, rectification, erasure, restriction, portability, objection)

Under the UK GDPR and Data Protection Act 2018, you have the right to access personal data we hold about you, to request correction of inaccurate data, to request erasure of your data in certain circumstances, to restrict processing in certain circumstances, to receive your data in a portable format where processing is based on consent and carried out by automated means, and to object to processing based on legitimate interests. To exercise any of these rights, please contact us at [email protected] or in writing to 47 Otley Road, Leeds, LS6 3BJ. We will respond within one month of receipt of a valid request.

Withdrawal of consent

Where we process your personal data on the basis of your consent - specifically, in relation to the contact form - you may withdraw that consent at any time by contacting us using the details above. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Following withdrawal, we will delete your contact form data promptly, unless retention is required by law or legitimate business necessity.

Right to lodge a complaint with the supervisory authority

If you consider that our processing of your personal data infringes the UK GDPR or the Data Protection Act 2018, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. The ICO can be contacted at ico.org.uk, by telephone on 0303 123 1113, or in writing at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO.

Minors

fitshluminous is not directed at children and is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe that a child under 16 has submitted personal data to us through the contact form, please contact us at [email protected] and we will delete the data promptly.

No automated decision-making

We do not use automated decision-making or profiling in relation to the personal data we collect through this website. No decisions with legal or similarly significant effect are made about individuals based solely on automated processing of their personal data.

Changes to this policy

We may update this Privacy Notice from time to time to reflect changes in our practices or in applicable law. The date at the top of this page shows when the notice was last revised. We encourage you to review this notice periodically. Continued use of fitshluminous following any update constitutes acceptance of the revised notice. If we make material changes that significantly affect how we use your data, we will take reasonable steps to bring those changes to your attention.