Privacy Policy

Last updated: 13 October 2026

Who we are

TreeStation ("we", "us", "our") is a trading name of Greater Manchester TreeStation Limited, a Society for the Benefit of the Community (a "BenCom") registered with the Financial Conduct Authority's Mutuals Public Register, registration number 31552R.

Registered and trading address: Vaughan St, West Gorton, Manchester, M12 5FQ, United Kingdom.

We are the "data controller" for the personal data described in this policy — this means we decide how and why your personal data is collected and used.

This policy explains what personal data we collect through treestation.co.uk (this website), why we collect it, what we do with it, and what rights you have over it. It's written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The personal data we collect

We only collect personal data that's relevant to the purpose it's being collected for. Depending on how you interact with us, this may include:

If you get in touch with us (contact form, phone or email)

• Your name and email address
• What your enquiry is about (for example, domestic, commercial, or working with us)
• The content of your message and anything else you choose to tell us

If you buy from our shop

• Your name, billing and delivery address, email address and phone number
• Details of the products you order and your order history
• Payment information — this is collected and processed securely by our payment provider (Fiserv); we do not store your full card details ourselves

If you apply for a job with us

• Your name and contact details
• Your CV, covering letter, and anything else you include in your application
• Details you give us at interview or during the recruitment process

If you become a TreeStation member/shareholder

• Your name and address
• Records relating to your shareholding and votes, kept as part of our statutory register of members, as required of us as a registered Society

If you leave us a review or testimonial

• Your name and, where you provide it, your general location
• The content of your review

When you browse our website

• Technical information such as your IP address, browser and device type, and pages visited, collected automatically via cookies and similar technologies (see "Cookies" below)

We do not knowingly collect any special category data (such as health information, religious belief, or ethnicity) unless you choose to share it with us — for example, as part of a job application or a message to us.

How we use your data, and our lawful basis for doing so

Under UK GDPR, we must have a valid legal reason ("lawful basis") for using your personal data. We rely on the following:

• Respond to your enquiry Legitimate interests (responding to people who contact us)
• Process and fulfil your order, including delivery and payment Performance of a contract
• Manage returns, complaints or warranty claims Performance of a contract / legal obligation
• Keep financial and tax records Legal obligation
• Assess your job application Steps taken at your request, prior to entering into a contract
• Maintain our statutory register of members Legal obligation (Co-operative and Community Benefit Societies legislation)
• Publish reviews and testimonials Consent
• Send marketing communications, if you've opted in Consent
• Understand how our website is used and keep it secure Legitimate interests

Where we rely on consent (for example, publishing a testimonial, or signing up to hear from us), you can withdraw that consent at any time by contacting us.

Who we share your data with

We don't sell your personal data. We only share it where necessary, with:

• Our website hosting and IT support providers
• Our payment processor, so we can take payment for your order (Fiserv)
• Our accountants and professional advisors
• The Financial Conduct Authority and other regulators, where we're legally required to report to them as a registered Society
• Law enforcement or other authorities, where we're required to by law

Any third party who processes personal data on our behalf is required to keep it secure and to only use it for the purposes we've agreed with them.

Cookies

Our website uses only essential cookies that are used to make the site work — for example, remembering the contents of your shopping basket, or improving load times through our caching service.

You can control or delete cookies at any time through your browser settings. Blocking some cookies may affect how parts of the website work, such as the shopping basket.

How long we keep your data

We will keep your personal data for the duration of the period you are a customer of TreeStation.

Due to the nature of the services we offer and the relationship that we have with our customers, we will assume that you are still a customer until you tell us that you no longer want to be considered as a customer.

If you let us know that you are no longer a customer, we will delete all unnecessary electronic data and destroy all unnecessary hard copy data that we hold.

We shall retain any project data that is required to safeguard our legal liability following the completion of any project.

Where we store your data

Your personal data is stored on servers based in the Netherlands. If we ever need to transfer your data outside the UK, we'll make sure it's protected to at least the same standard, using safeguards recognised under UK GDPR, such as the UK's International Data Transfer Agreement or an applicable adequacy decision.

Your rights

Under UK GDPR, you have the right to:

• Access — ask us for a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, where there's no good reason for us to keep it
• Restriction — ask us to limit how we use your data
• Portability — ask us to move, copy or transfer your data
• Object — object to us using your data, including for direct marketing
• Withdraw consent — where we're relying on consent, withdraw it at any time

To exercise any of these rights, contact us using the details below. We'll normally respond within one month.

If you're unhappy with how we've handled your personal data, you have the right to complain to the UK's data protection regulator:

We'd appreciate the chance to address your concerns before you approach the ICO, so please contact us first if you can.

Children

Our website and services are aimed at adults. We don't knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we'll delete it.

Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

Changes to this policy

We may update this policy from time to time — for example, to reflect changes in the law or in how we do business. The date at the top shows when it was last updated. We'd encourage you to check back periodically.

Contact us

If you have any questions about this policy or how we handle your data: