We use essential cookies that are necessary for the site to function (e.g., to maintain session state or your cookie preferences). These do not track you across other sites.

We do not sell your personal data. We may share it with trusted service providers (“processors”) to help us operate our services, for example:

• Hosting & infrastructure: web hosting, content delivery, backups, and security providers that store or process website data on our behalf.
• Email provider: to send and receive emails (including contact-form notifications).
• Professional services: accountants, auditors, legal advisors where necessary.

We ensure appropriate contractual and security safeguards are in place with our processors.

Our infrastructure (including email servers) are located in Europe. We therefore do not routinely transfer your personal data outside the UK/EEA.

In limited cases (for example, Gandi’s 24/7 support operations or certain domain-registry interactions), personal data may be accessed from outside the EEA. Where this occurs, transfers are protected by the European Commission’s Standard Contractual Clauses or other appropriate safeguards.

• Enquiry data: kept for up to 24 months after our last interaction, unless you ask us to delete it sooner (subject to legal requirements).
• Server logs: typically retained for up to 30–90 days for security and diagnostics.
• Contract data: retained for the duration of the contract and for the period necessary to comply with legal, tax, and accounting obligations.

We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and regular updates. No method of transmission or storage is 100% secure; we work to continually improve our safeguards.

Depending on where you live, you may have the following rights over your personal data:

• Access – request a copy of your personal data we hold.
• Rectification – correct inaccurate or incomplete data.
• Erasure – ask us to delete your data (subject to legal exceptions).
• Restriction – request we limit how we process your data.
• Portability – receive your data in a structured, commonly used format.
• Objection – object to processing based on legitimate interests or to direct marketing.
• Withdraw consent – where processing is based on consent.

To exercise these rights, contact us at hello@greencore.org.uk. We may need to verify your identity before responding.

If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Email: hello@greencore.org.uk
Address: GreenCore Tech Limited, Unit A, 82 James Carter Road, Mildenhall, IP28 7DE