We are committed to protecting your personal data and your right to privacy. This policy explains how we collect, use, and safeguard your information.
Last updated: 25 May 2026
This Privacy Policy explains how ZTOA DRIVEWAY LTD ("we", "us", "our"), Company Number 17152993, registered at 304a Hoylake Road, Wirral, United Kingdom, CH46 6DE, collects, uses, stores, and protects personal data when you visit our website at casa-machado.com (the "Website") or enrol in our free gardening courses (the "Services").
We are the data controller for all personal data collected through the Website. We are committed to processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
Please read this Privacy Policy carefully. By using our Website or Services, you acknowledge that you have read and understood this policy.
We may collect the following categories of personal data from you:
We do not collect any Special Category Personal Data (such as health, racial or ethnic origin, religious beliefs, or financial information) through our Website or Services.
We collect personal data through the following means:
Under the UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following lawful bases:
We use your personal data for the following purposes:
We will not use your personal data for automated decision-making or profiling in a way that produces legal or similarly significant effects.
Our Website uses cookies and similar tracking technologies to distinguish you from other users and to enhance your browsing experience. A cookie is a small text file placed on your device by a web server.
We use the following types of cookies:
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality. Your cookie consent preference is stored locally in your browser using localStorage and does not transfer your personal data to us.
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your personal data with trusted third parties only in the following circumstances:
We primarily store and process personal data within the United Kingdom and the European Economic Area (EEA). Where data is transferred to countries outside the UK or EEA, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements — such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), or transfers to countries with an adequacy decision.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Specifically:
After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you.
Under UK data protection law, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us via the Contact page or write to us at our registered address. We will respond within one calendar month of receiving your request. In some cases we may need to verify your identity before fulfilling a request.
If you are dissatisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption of data in transit (HTTPS), access controls, and regular security reviews.
However, no internet transmission or electronic storage method is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You share your data with us at your own risk, and we encourage you to keep your contact details up to date and use secure devices and connections.
Our Website and Services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it as quickly as practicable.
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the Services we offer. We will post any changes on this page with a revised "Last updated" date. Where changes are significant, we will notify enrolled users by email where possible. Your continued use of the Website after any changes constitutes acceptance of the revised policy.
We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information.
Contact the Data Controller:
ZTOA DRIVEWAY LTD
Company No. 17152993
304a Hoylake Road, Wirral, United Kingdom, CH46 6DE
Website: Contact Page