Privacy Policy
Keeping your personal data safe
At Greenburn we are committed to ensuring your privacy and protecting personal data we collect about you and, handling it in accordance with Data Protection law. This privacy policy explains how we collect, use and store your personal data, the purpose for which it is collected, who we share it with and what rights you have in relation to our handling of your personal data.
This privacy policy applies to all personal data processed by Greenburn, and it will apply to you, for example if you or your employer use or request any of our products and services; which include our website (www.greenburn.co.uk); or where you contact us, and if we process your personal data for any other purpose.
‘Data Protection Law’ includes the General Data Protection Regulation 2016/679; the UK Data Protection Act 2018 and all relevant EU and UK data protection legislation.
Who are we?
We are Baum UK Limited t/a Greenburn, (“Greenburn” or “we”) are a company registered in Scotland, with Company Number SC234354 and registered office at 9 Ainslie Place, Edinburgh, EH3 6AT. We are the data controller of all personal data collected and used for the purposes set out in this Privacy policy and we are responsible for looking after your personal data in line with data protection and privacy laws.
This Privacy Policy forms part of our Website Terms & Conditions. Please read its terms carefully. If you have any queries or concerns, you may contact us through the means set out in the “Contact us” section below.
We may change or update the terms of this Privacy Policy from time to time and you should therefore check it frequently. This Privacy Policy was last updated on 1st May 2026.
At Greenburn we are committed to ensuring your privacy and protecting personal data we collect about you and, handling it in accordance with Data Protection law. This privacy policy explains how we collect, use and store your personal data, the purpose for which it is collected, who we share it with and what rights you have in relation to our handling of your personal data.
This privacy policy applies to all personal data processed by Greenburn, and it will apply to you, for example if you or your employer use or request any of our products and services; which include our website (www.greenburn.co.uk); or where you contact us, and if we process your personal data for any other purpose.
‘Data Protection Law’ includes the General Data Protection Regulation 2016/679; the UK Data Protection Act 2018 and all relevant EU and UK data protection legislation.
Who are we?
We are Baum UK Limited t/a Greenburn, (“Greenburn” or “we”) are a company registered in Scotland, with Company Number SC234354 and registered office at 9 Ainslie Place, Edinburgh, EH3 6AT. We are the data controller of all personal data collected and used for the purposes set out in this Privacy policy and we are responsible for looking after your personal data in line with data protection and privacy laws.
This Privacy Policy forms part of our Website Terms & Conditions. Please read its terms carefully. If you have any queries or concerns, you may contact us through the means set out in the “Contact us” section below.
We may change or update the terms of this Privacy Policy from time to time and you should therefore check it frequently. This Privacy Policy was last updated on 1st May 2026.
Privacy Policy: Details
1. Information We May CollectWe may collect and process the following categories of personal information:
We collect personal information when:
We use personal information for the following purposes:
We process personal information under one or more of the following lawful bases:
Contractual Necessity: Where processing is necessary to fulfil a contract or take steps prior to entering into a contract.
Legal Obligation: Where processing is required to comply with legal or regulatory obligations.
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms.
Consent: Where you have provided consent, including for certain marketing communications.
5. Marketing Communications
We may send marketing communications where lawful to do so. You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe option included within communications.
6. Sharing Personal Information
We may share personal information with:
7. International Transfers
Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with applicable data protection laws.
8. Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations.
Typical retention periods may include:
Our website may use cookies and analytics tools to improve user experience and monitor website performance.
Cookies may collect information such as:
10. Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
Access to personal data is restricted to authorised personnel and trusted service providers who require access for legitimate business purposes.
11. Data Breaches
We maintain procedures for identifying, investigating, and reporting personal data breaches in accordance with applicable data protection laws.
12. Your Rights
Under UK GDPR, you may have the right to:
13. Children’s Privacy
Our services and website are not intended for children, and we do not knowingly collect personal information relating to children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be published on our website.
15. Contact Information
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Email: [email protected]
Telephone: 0131 557 5742
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office:
https://www.ico.org.uk
- Name and contact details
- Postal and billing addresses
- Email addresses and telephone numbers
- Business and company information
- Enquiry and correspondence records
- Website usage data and IP addresses
- Recruitment and employment information
- Financial and payment information where required
We collect personal information when:
- You contact us by phone, email, website form, or in person
- You purchase products or services from us
- You apply for employment opportunities
- You subscribe to marketing communications
- You visit or use our website
- You engage with us through social media or third-party platforms
We use personal information for the following purposes:
- To provide products and services
- To manage customer and supplier relationships
- To process payments and invoices
- To respond to enquiries and requests
- To improve our services and website
- To comply with legal and regulatory obligations
- To manage recruitment and employment processes
- To maintain business records and internal administration
We process personal information under one or more of the following lawful bases:
Contractual Necessity: Where processing is necessary to fulfil a contract or take steps prior to entering into a contract.
Legal Obligation: Where processing is required to comply with legal or regulatory obligations.
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms.
Consent: Where you have provided consent, including for certain marketing communications.
5. Marketing Communications
We may send marketing communications where lawful to do so. You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe option included within communications.
6. Sharing Personal Information
We may share personal information with:
- Professional advisers and consultants
- IT and website service providers
- Payment processors
- Accountants and auditors
- Legal and regulatory authorities where required
- Service providers acting on our behalf
7. International Transfers
Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with applicable data protection laws.
8. Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations.
Typical retention periods may include:
- Customer enquiries: Up to 24 months
- Supplier and financial records: 6 years
- Recruitment records: Up to 12 months
- Employment records: In accordance with legal requirements
- Website analytics data: Up to 26 month
Our website may use cookies and analytics tools to improve user experience and monitor website performance.
Cookies may collect information such as:
- IP address
- Browser type
- Device information
- Pages visited
- Time spent on the website
10. Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
Access to personal data is restricted to authorised personnel and trusted service providers who require access for legitimate business purposes.
11. Data Breaches
We maintain procedures for identifying, investigating, and reporting personal data breaches in accordance with applicable data protection laws.
12. Your Rights
Under UK GDPR, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate data
- Request erasure of personal information
- Restrict or object to processing
- Request transfer of your data
- Withdraw consent where applicable
- Lodge a complaint with the Information Commissioner’s Office (ICO)
13. Children’s Privacy
Our services and website are not intended for children, and we do not knowingly collect personal information relating to children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be published on our website.
15. Contact Information
If you have any questions about this Privacy Policy or how your personal information is handled, please contact:
Email: [email protected]
Telephone: 0131 557 5742
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office:
https://www.ico.org.uk