Privacy Policy
Bonsai Group is the trading name of MAL Trading Ltd, based at Harbour Design Studio, Harbour Mews, South Quay, St. Sampson’s, Guernsey GY2 4QH.
We are committed to protecting your personal data and respecting your privacy.
1. Who we are
MAL Trading Ltd (Bonsai Group) is the data controller for personal data collected through this website:
Email: hello@bonsaigroup.co.uk
2. What data we collect
We may collect:
- Information you provide (e.g. your name, email, phone number, and message through forms or email)
- Technical data (e.g. IP address, browser type, and pages visited)
- Marketing preferences (if you sign up for newsletters)
We do not collect sensitive personal data.
3. How we use your data
We use your information to:
- Respond to your enquiries or provide quotes
- Send marketing emails (you can opt out at any time)
4. Sharing your data
We only share your data with trusted service providers who help us operate our website and marketing tools. These include HubSpot (forms, live chat and email marketing), Google Analytics 4 (website analytics), and Meta (advertising). HubSpot processes form submissions and marketing emails on our behalf. Google Analytics and Meta only receive data if you accept the relevant cookie category.
5. Cookies and analytics
Our website uses a cookie banner that lets you choose which types of cookies you accept. Strictly necessary cookies are always active, since the site cannot function without them. Analytics and marketing cookies only load if you accept them.
You can change your choice at any time using the cookie settings icon in the bottom corner of the site.
Strictly necessary
bonsai_consent, set by Bonsai Group, remembers your cookie choice, lasts 180 days.
Analytics (only set if you accept)
_ga and _ga_[ID], set by Google Analytics 4, distinguishes visitors to measure site usage, lasts 13 months.
hubspotutk, __hstc, __hssc and __hssrc, set by HubSpot, tracks visits and form activity across pages, lasts up to 13 months.
Marketing (only set if you accept)
_fbp and _fbc, set by Meta, measures advertising performance and personalises ads on Facebook and Instagram, lasts 90 days.
6. How long we keep data
We keep enquiry and correspondence information for up to 12 months, and client or project records for up to 6 years after our last contact, unless we’re required to retain it longer for legal or accounting purposes.
7. Your rights
You can:
- Ask us to correct or delete your information
- Withdraw consent for marketing at any time
- Object to or restrict certain types of processing, including analytics and marketing cookies via our cookie settings
To exercise your rights, email us at hello@bonsaigroup.co.uk.
8. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
9. Email marketing
Our lawful basis for sending marketing emails is your consent, which you give by ticking the marketing box on one of our forms. Ticking the box is optional — you can contact us without it. Where we hold details of existing customers, we may also email them about products and services similar to those they have previously bought or enquired about, in line with the applicable exemption for existing customers. You can opt out of this at any time.
We send news, offers and updates about our own products and services. We do not send marketing on behalf of other organisations, and we never sell, rent or share our mailing list for third-party marketing.
Our marketing emails are sent using HubSpot, which stores your name, email address and marketing preferences on our behalf. HubSpot also records whether emails are opened and which links are clicked, so we can understand how our emails are performing. HubSpot is based in the United States, so this involves a transfer of your data outside the Bailiwick of Guernsey, made under appropriate safeguards.
Every marketing email includes an unsubscribe link at the bottom. You can also email us at hello@bonsaigroup.co.uk at any time and we will remove you. We action unsubscribe requests as soon as we receive them, and in any event within one month. Withdrawing your consent does not affect any emails sent before you withdrew it.
If you unsubscribe, we stop sending you marketing emails immediately. We keep your contact record so that we have a record of your preference and do not contact you again by mistake, and so we can respond to any enquiry or ongoing business with you.

