Privacy Policy

This policy is effective from October 2020.

We are committed to protecting and respecting your privacy. This Privacy Policy describes how and when The Tree Barn collects, uses and shares your personal information when you use our Services. If you have any questions or comments about this Privacy Policy, please contact our office at

This policy sets out the basis on which your personal data will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how it will be treated by us. For the purpose of the Data Protection Act 1998 (“the Act”) the data controller The Tree Barn whose registered office is at Greenfield Farm (“we”).
All enquiries concerning our use or storage of data should be sent to
Our address is Greenfield Farm, Christmas Common, Watlington, Oxon, OX49 5HG. The Tree Barn has an online platform (web) facilitator that enables users to buy trees and associated products.

This privacy policy applies to our website,,uk, (hereinafter “Web”), and all use of our application for mobile devices (hereinafter “App”). The Web and the App together form our service offers to you (hereinafter “Platform”).

Information we may collect from you.
We may collect and process the following data about you:
Information that you provide by filling in forms on our site, processing orders for delivery or collection.
If you contact us, we may keep a record of that correspondence.
Details of transactions you carry out through our site and of the fulfilment of any contract between us.
Details of your visits to our website and the resources that you access.

Data controller

The Tree Barn, is the Data controller of processing personal data concerning Users.

We will process your personal data in compliance with European General Data Protection Regulation. This privacy policy covers our processing of personal data input when you access the Platform and thereby use our services.

Where we store your personal data
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
All information you provide to us is stored on our secure servers. Unfortunately, the transmission of information via the Internet is not completely secure. So, whilst we will do our best to protect your personal data, we cannot ensure the security of your data transmitted to our site. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
Purpose and legal basis

We process your personal data in order for us to manage our user relation with you, including managing your account and provide you with access to use our Platform, we collect and use information about you. The processing of your personal data is performed on the legal basis of:

fulfilment of our contractual obligations when delivering the Platform to you.
We process your personal data to facilitate your purchase of trees and associated products via the
Platform on the legal basis of:
fulfillment of our contractual obligations to facilitate your purchase of our products. We also process your personal data to deliver and improve the Platform, and manage our business, to improve our offerings, develop new features and updates, develop personalization services and other types of service, including but not limited to develop and implement algorithms and machine learning.

Categories of personal data

We mainly collect the personal data that you submit to us, including your contact information and purchase history. But we also collect information in several ways from different parts of the Platform, as further detailed below.

When purchasing trees and associated products from the Platform:

When you purchase products using the Platform you buy from us. We are then a controller for the personal data we receive. As mentioned above we will also store and process your purchase information as part of our service to you.

Uses made of the information
We use information held about you in the following ways:
To ensure that content from our web site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you.
To allow you to participate in interactive features of our service where you choose to do so.
To notify you about changes to our service.
To analyse information about our users in order to identify their potential preferences.
We may disclose your personal information to any member of our group which means our subsidiaries, our ultimate holding company and its subsidiaries as defined under the UK Companies Act 2006.
We will not disclose your data to any third party outside our group for the purpose of direct marketing but We may from time to time provide you with information about goods and services which We feel may be of interest to you including those provided by third parties. We will keep your details on file for a period of 6 years from the date of your last contact with us in order to simplify any future registration.
Your rights
You have the right to request us not to use your details for the purpose of providing you with information about the goods and services provided by our group (other than information which you have specifically requested). You can also notify us by contacting us via email
Our site may contain links to and from our partners’ and affiliates’ websites. If you follow a link to their sites, please note that these sites have their own privacy policy and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these sites.
As provided by the General Data Protection Regulation, you have the right to:

Access personal data regarding you. You may delete and amend the data collected.
Ask for erasure of personal data regarding you (under certain circumstances).
Ask for the restriction of the processing of your data (under certain circumstances).
When we receive a request to access, rectify, erase or port data, we may ask you for additional information in order to confirm your identity and ensure data security.

Access to information
The Act gives you various rights including the right to access information held about you. Your right to access can be exercised in accordance with the Act. Questions about this privacy policy can be addressed to


A cookie is a small text file stored on your computer, tablet, mobile or similar, for the purpose of recognising your device if you visit our website again (such as login, language, font size and other settings). This makes it possible to customize the Website to your browser. A cookie may contain text, numbers or e.g. a date, but generally there are no personal data in a cookie. It is not a program and thus cannot contain a virus.

When you visit, we collect information about you that allows us to identify your device. The information is used to customise and improve our content on the website and to get statistical information (not personal information), so we can provide you with the best possible experience. If you choose not to accept cookies at all you may not be able to use all the functions of our website.

Besides our own cookies, we use cookies from third parties, e.g. from suppliers of advertisements and analytic tools and from suppliers of social media. These third-party cookies are used for marketing purposes and for improving the functionality of the website. We use the following third party cookies:

Transfer of data to third countries

The Tree Barn may use suppliers located outside the EU/EEA to process data on behalf of The Tree Barn according to standard data protection clauses adopted by the European Commission and to The Tree Barn’s performance of the contract with you.

Sharing of data

Personal data about our users is an essential part of our business. We only share your personal data as described below apart from when we share it with a third-party vendor.
We may share personal data regarding you if we are obligated to do so by law.

Data retention and account deletion

We may store some of your personal data to comply with our legal obligations.
Please note that some information may remain in our records after your account has been deleted, and that we may only be able to delete this information later when updating our backups.


We do our best to ensure that user accounts are kept private. However, various instances such as unauthorised entry/use, hardware or software failure, and other factors, may compromise the security of the personal data.
This Privacy Policy only governs information collected on the Platform, direct communication and through our cookies.

Changes to Privacy Policy

This Privacy Policy may be amended from time to time. We will update these changes to this policy on our website and you will be given the opportunity to review this revised policy before you choose to continue using the Platform.
We will use only use personal data in accordance with the privacy policy under which the personal data was collected unless we specifically ask for your consent to process (reuse) your personal data to a new purpose.