Privacy Policy

Garsons Privacy Policy

As of May 2025

SUMMARY

This Privacy notice explains what information Thompson Bros (Esher) Ltd. (‘Garsons’, ‘we’, ‘us’, and ‘our’) gather about you, what we use that information for, and who we give that information to. It also sets out your rights in relation to your information and who you can contact for more information or queries.

SCOPE

We take data protection very seriously, and we are committed to protecting your personal information. This Privacy Notice describes how we handle personal information collected through our website www.garsons.co.uk and by any other means.

It is our policy to collect only the minimum information required from you. If you believe we have collected excessive information about you, please contact us to raise any concerns you may have.

‘Personal information’ is anything that enables you to be identified or identifiable, e.g. your name, postal/email address and telephone number.

In this Privacy notice, your personal information is sometimes called “personal data”. We sometimes collectively refer to handling, collecting, protecting or storing your personal information as ‘processing’.

Although you do not have to provide any of your personal information to us, if we ask you to do so and you refuse, we may be unable to provide you with the information, goods or services you want from us.

COLLECTION OF PERSONAL INFORMATION

Below are some examples of how you may provide personal information to us:

Purchasing items at Garsons Garden Centres, including items purchased at Garsons Farm Shop and Butchers.
Purchasing items or arranging table bookings at Garsons Restaurants.
Purchasing Garson Farm’s Pick Your Own Farm Tickets
Purchasing and booking tickets for Garsons events and activities
Purchasing items online from Garsons Online (Webshop)
Ordering, reserving, and purchasing items such as plants, furniture, and other items by telephone
Ordering and purchasing items such as plants, furniture, and other items to be home-delivered by us
Viewing and browsing Garsons main website and ticketing site, our sites have cookies to capture user behaviour and navigation data
Applying for and joining our Garsons Card membership and logging into your Garsons Card profile, where you will be able to view your purchase history
Subscribing to Garsons marketing communications, such as emails
When you engage with us on social media
Submitting CVs or work history information
When you enter Garsons competitions, activities, prize-giveaways, etc
Contacting us for further information
Providing us with business cards or other contact information
When you contact us by any means with queries, product feedback and complaints etc.
When you fill in forms. For example, an accident health and safety form may contain your personal data that you provide us with and kept on file
Our car parks and garden centres have CCTV systems operating for security purposes. These systems may record your image during your visit. We may pass on footage or stills to a third party such as insurance companies or police if requested to do so.

USE OF PERSONAL INFORMATION

When you provide personal information to us, we may use it for any of the purposes described in this Privacy Notice or as stated at the point of collection (or as evident from the context of collection), including:

To provide you with the items you have ordered from us
To deliver items using our Home Delivery Service - including those purchased from Garsons Online Webshop
To administer and manage our website, including to understand how people use the features and functions of our website in order to improve the user experience
To develop our business and services
To conduct quality and risk management reviews
To monitor and enforce compliance with our policies; and/or
Any other purposes for which you provided the information to us, including any of the purposes given in the ‘Collection of personal information’ section above

We do not collect personal information for sale to or use by third parties.

LEGAL GROUNDS FOR PROCESSING PERSONAL INFORMATION

We rely on one or more of the following processing conditions:

To perform our contractual obligations to you: To satisfy our legitimate interests in the effective delivery of information, items and services to you and in the effective and lawful operation of our businesses (where these do not interfere with your rights)
To satisfy any legal obligations to which we are subject: (Where no other condition for processing is available) if you have agreed to us processing your personal information

SECURITY OF PERSONAL INFORMATION

We have implemented generally accepted standards of technology and operational security in order to protect personally identifiable information from loss, misuse, alteration or destruction.

Garsons adheres to the Payment Card Industry Data Security Standard (PCIDSS).

Only authorised persons are provided access to personally identifiable information we have collected, and such individuals have agreed to maintain the confidentiality of this information.

Although we use appropriate security measures once we have received your personal data, the transmission of data over the internet (including by e-mail) is never completely secure.

We endeavour to protect personal data, but we cannot guarantee the security of data transmitted to or by us.

SHARING PERSONAL INFORMATION

We may transfer, share or disclose the personal data we collect from you to trusted third parties for:

The purposes for which the information has been submitted, such as the delivery of communications or purchases
The purposes listed above under ‘Use of Personal Information’
The delivery of items you have ordered from us to you
The administration and maintenance of our Garsons Card and website and/or other internal or administrative purposes

It is our policy to share your personal information only with other organisations that are bound to maintain appropriate levels of security and confidentiality, to process personal information only as instructed by us, and to flow those same obligations down to their sub-processors.

We may share your information with trusted third-party organisations such as:

External printing and mailing companies
Delivery couriers
IT companies such as our website host and developers
Marketing software companies, such as email campaign providers
Our EPOS system provider

Your personal information will not be transferred to or stored outside the country where you are located. We may disclose your personal information to law enforcement and other government agencies as required by and/or in accordance with applicable law.

RETENTION OF PERSONAL INFORMATION

We will retain your personal information only for as long as we need it, given the purposes for which it was collected, or as required to do so by law.

Typically, this means we will retain your personal information for 6 years. For more information, please contact us, details below.

MARKETING

We keep personal data until a user unsubscribes or requests that we delete that information. If you choose to unsubscribe from our email newsletter, we may keep certain limited information about you so that we may honour your request.

Where we are legally required to obtain your explicit consent to provide you with marketing materials, we will only provide you with such marketing materials if you have provided consent for us to do so.

If you opt into any subscriptions or memberships, you will receive automated emails as confirmation. You may also receive marketing communications such as emails and or printed materials. You may unsubscribe at any time.

RIGHTS IN RELATION TO YOUR INFORMATION

You have certain rights in relation to the personal information we hold about you. In particular, you have the right to:

Request a copy of the personal information we hold about you
Ask that we update the personal information we hold about you, or correct such personal information that you think is incorrect or incomplete
Ask that we delete personal information that we hold about you, or restrict the way in which we use such personal information
Object to our processing of your personal information; and/or
Withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing)

If you would like to exercise these rights or understand if these rights apply to you, please contact us.

CHILDREN'S DATA

We understand the importance of protecting children's privacy, and we never knowingly collect personal information about individuals under the age of 18. Children’s activities and events may require children’s first name and occasionally age, but contact details, if needed, will be those of the guardian. Providing children’s data is voluntary. Data will only be kept for a limited time and will then be destroyed confidentially.

Photography or video footage will never be taken or used without first obtaining permission from whoever is responsible for the individual at the time of the occasion. A Consent & Release form may be required to record permissions.

OUR WEBSITE

Our website may link to third-party sites that we do not control and that do not operate under our privacy practices. When you link to third-party sites, our privacy practices no longer apply. We encourage you to review each third-party site's privacy policy before disclosing any personally identifiable information. An example of an external third-party link may be organisations such as a charity partner or product supplier.

What are cookies? Cookies are very small, completely safe and secure text files that are downloaded to your computer or mobile device when you visit a website or application. Your web browser (e.g. Safari, Internet Explorer, Google Chrome or Mozilla Firefox) then sends these files back to the website or application every time you return so that your user personal settings can be recognised. Cookies are useful and help website developers and companies improve your website browsing experience. Some cookies are strictly necessary to enable you to move around the site or to provide certain basic features.

Other types of cookies are used to monitor and improve our website’s functionality and performance.

HOW WE USE COOKIES

(Garden Connect/Green Solutions) Our website uses cookies, with which technical information is saved. Cookies are small information files that a website leaves on your device, with which your activities on our website are followed. It concerns for example:

the IP address of the visitor
the date and time of the visit
the URL of the referring site (the site from which the visitor originates)
the pages visited on our website
information about the browser used (type and version, operating system, etc.)

We use technical information and cookies to facilitate your visit on the website and to optimise the performance and user experience of the website. Cookies can be placed both by Garsons itself and by other parties with whom Garsons cooperates. Below is an overview of the types of cookies that are placed through the Garsons website:

Functional cookies: Cookies that are necessary for the website to function properly and to provide a requested service. These cookies are used to save certain user and preferred settings, to save any log in data and to optimise the user-friendliness of the website.

Analytical cookies: Such as the Google Analytics cookies, which collect information about the use of the website. These capture, among other things, the number of website visitors, the visited pages and the duration of their stay. The collected data is used to improve the service and optimise the content of the website to the wishes and needs of the users.

Garsons has concluded a processor agreement with Google for the use of Google Analytics. This agreement ensures that the Google Analytics cookies have been set in the most privacy-friendly way. Google does not have permission to use information obtained through Garsons for other Google services.

Tracking or advertising cookies: Tracking cookies are cookies that collect data about the (internet) behaviour of the website user. These tracking cookies are used to enable the user to make optimal use of our website. For example, these cookies are used to record information about the visit so that relevant information can be used for the convenience of the user on a subsequent visit, for example by filling in forms or offering ads that match the (search) profile of the user.

DISABLING COOKIES

Most browsers are set to accept cookies by default, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services on our and other websites may not function properly if cookies are disabled in your browser.

We do not sell the information collected by cookies, nor do we disclose the information to third parties, except where required by law (for example, to government bodies and law enforcement agencies).

If you have any questions or complaints about this Privacy Notice or the way your personal information is processed by us, or would like to exercise one of your rights set out above, please contact us by one of the following means:

Email: info@garsons.co.uk

Tel. 01372 462261 (Esher) or 01329 844336 (Titchfield).

Post: Garsons Marketing Department, Garsons, Winterdown Road, West End, Esher KT10 8LS

You also have the right to lodge a complaint with the Information Commissioner Office (ICO). The ICO can be contacted by the following means:

Form: www.ico.org.uk/global/contact-us/email/

Telephone: 0303 123 1113 (local rate – calls to this number cost the same as calls to 01 or 02 numbers).

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this Privacy Notice at any time by publishing an updated version here. So that you know when we make changes to this Privacy Notice, we will amend the revision date at the top of this page. The new modified or amended Privacy Notice will apply from that revision date. Therefore, we encourage you to review this Privacy Notice periodically to be informed about how we are protecting your information.

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

Name
Postal address
Email address
Telephone number
Purchase and booking information
Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

IP address
Browser type and version
Device information
Screen resolution
Operating system
Referral source
Pages visited and actions taken on the Website
Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

To provide products and services you request
To process transactions and fulfil orders
To provide customer support and after-sales services
To manage bookings and accounts
To improve our Website, products, and services
To ensure Website security and prevent fraud
To comply with legal and regulatory obligations
To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Performance of a contract: to provide goods or services you have requested.
Legal obligation: where processing is necessary to comply with legal requirements.
Legitimate interests: to manage and improve our business, Website security, and customer experience.
Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

Payment processors
Hosting and IT service providers
Delivery and fulfilment partners
Marketing and communications providers
Analytics and Website performance providers
Professional advisers and auditors
Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

Transfers to countries deemed to provide an adequate level of protection; or
Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

_ga
_ga<container-id>
_gid
_gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

_clck
_clsk
CLID
ANONCHK
MR
MUID
SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

Accept all cookies
Reject non-essential cookies
Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

Access your personal information
Correct inaccurate information
Request deletion of your information
Restrict processing
Object to processing
Request portability of your data
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026

Garsons Ticket Portal