Privacy Policy

This Privacy Policy applies to the Graham Potter Bonsai website (www.grahampotterbonsai.com), which is operated by Kaizen Bonsai Ltd. Although the blog is written by Graham Potter, all data collected through this website is handled and controlled by Kaizen Bonsai Ltd.

We are committed to protecting your personal information and respecting your privacy. This policy explains what information we collect, how we use it, and your rights under UK data protection law.

Who We Are

Kaizen Bonsai Ltd
7 Hungate
Beccles
NR34 9TT
United Kingdom

Email: [email protected]

Kaizen Bonsai Ltd is the data controller for all personal data collected through this website, including blog comments and contact form submissions.

What Information We Collect

We may collect and process the following information:

  • Your name and email address when you leave a comment or contact us
  • Technical information such as IP address, browser type, and device information
  • Information about how you use the website (analytics)
  • Any information you voluntarily submit through forms or comments

We do not collect special category data through this website.

 

Comments on This Website

When you leave a comment on the Graham Potter Bonsai blog, we collect:

  • the information you enter in the comments form (name, email, comment)
  • your IP address
  • your browser user agent string

This helps us detect spam, prevent abuse, and moderate comments appropriately.

By submitting a comment, you understand that your name and comment will be publicly visible once approved. Your email address is never published.
All comment data is processed by Kaizen Bonsai Ltd.

 

How We Use Your Information

We use your information to:

  • publish and moderate comments
  • respond to enquiries
  • maintain website security
  • improve website performance and user experience
  • comply with legal obligations

We do not sell or share your data with third parties for marketing.

Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Legitimate interests – to operate the blog, moderate comments, respond to enquiries, and maintain website security
  • Legal obligation – where required to comply with UK law

How Long We Keep Your Data

  • Comments and associated metadata are kept for as long as the comment remains published on the site.
  • Contact form submissions are retained only as long as necessary to respond.
  • Technical logs may be retained for security and diagnostic purposes.

How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse.

Your Rights

Under UK GDPR, you have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion of your data
  • restrict or object to processing
  • request data portability (where applicable)
  • lodge a complaint with the ICO

To exercise any of these rights, contact us at [email protected].

Data Protection Complaints (Data Protection (Use and Access) Act 2025)

If you have concerns about how we have handled your personal data, you can raise a complaint using the contact details above. We will:

  • acknowledge your complaint within 30 days
  • investigate promptly
  • keep you informed
  • provide a clear written outcome

If you are not satisfied with our response, you may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.