PRIVACY POLICY
Artificial Grass Online
(Modern Surfaces Online Limited)

1. Introduction
This Privacy Policy explains how Artificial Grass Online (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website or place an order with us.
We are committed to protecting your privacy and handling your data in a transparent and secure manner.

2. Who We Are
Artificial Grass Online is a trading name of Modern Surfaces Online Limited, registered in England and Wales.
For the purposes of data protection law, we are the data controller of your personal data.

3. What Data We Collect
We may collect and process the following types of personal data:
Information you provide:
Name
Billing and delivery address
Email address
Phone number
Order details
Automatically collected data:
IP address
Device type and browser
Website usage data (via cookies and analytics tools)
Communications:
Emails or messages you send to us
Customer service interactions

4. How We Use Your Data
We use your data to:
Process and fulfil orders
Deliver products and manage logistics
Communicate with you regarding your order
Provide customer support
Improve our website and services
Send marketing communications (where consent has been given)

5. Legal Basis for Processing
We process your data under the following legal bases:
Contractual necessity – to fulfil your order
Legal obligation – for accounting and compliance
Legitimate interests – to improve our services and prevent fraud
Consent – for marketing communications and cookies

6. Order Preparation Recording (Important)
As part of our quality assurance procedures:
We may record aspects of the order preparation process, including measurement, cutting, and inspection stages.
These recordings are:
Used internally for quality control and verification
Stored securely
Not used for marketing purposes

7. Sharing Your Data
We only share your data where necessary, including:
Delivery partners (couriers)
Payment processors
Website and hosting providers
Analytics and marketing platforms (e.g. Google, Meta)
All third parties are required to handle your data securely and in accordance with applicable laws.

8. Data Retention
We retain your data only for as long as necessary:
Order data: for legal and accounting purposes (typically 6 years)
Customer communications: as needed for support and records
Marketing data: until you withdraw consent

9. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
To exercise your rights, please contact us using the details on our website.

10. Data Security
We take appropriate technical and organisational measures to protect your data from:
Unauthorised access
Loss or misuse
Disclosure

11. Marketing Communications
If you opt in, we may send you marketing communications.
You can unsubscribe at any time via:
Email unsubscribe links
Contacting us directly

12. Third-Party Links
Our website may contain links to external websites.
We are not responsible for their privacy practices.

13. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.

14. Contact
For any privacy-related queries, please contact us via our website.