Privacy Policy

Last updated: 30 March 2026

1. Who We Are

PlantPal ("we", "our", "us") is a UK-based company that designs and sells innovative plant watering solutions. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website, place an order, or interact with our services.

2. Information We Collect

We collect the following types of personal data:

Order Information

When you place an order, we collect your name, email address, shipping address, and payment details. Payment processing is handled securely by Stripe; we do not store your full card details.

Pre-Order / Waitlist Information

When you join our waitlist or pre-order, we collect your name, email address, phone number (optional), and any message you provide.

Account Information

If you create an account via our authentication provider, we store your display name, email, and a unique identifier. We do not store passwords directly.

Website Usage Data

With your consent, we may collect anonymised analytics data such as pages visited, time on site, and general geographic region. This data does not personally identify you.

3. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfil your orders, including sending confirmation and shipping update emails
  • To manage your waitlist registration and notify you when products become available
  • To provide customer support and respond to your enquiries
  • To improve our website and services through anonymised analytics (with your consent)
  • To track and report on our charity programme contributions

4. Cookies

Our website uses cookies to provide essential functionality and, with your consent, to collect analytics data. You can manage your cookie preferences at any time.

Essential Cookies

These cookies are necessary for the website to function properly. They enable core features such as session management, authentication, and shopping cart functionality. These cookies cannot be disabled.

Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting anonymised information about page visits and navigation patterns. Analytics cookies are only set with your explicit consent.

You can withdraw your cookie consent at any time by clearing your browser's local storage for this site and refreshing the page. The cookie consent banner will reappear, allowing you to make a new choice.

5. Data Sharing

We do not sell your personal data. We share data only with the following trusted third parties, as necessary to provide our services:

  • Stripe — for secure payment processing
  • Shipping providers — to deliver your orders
  • Email service providers — to send transactional emails (order confirmations, shipping updates)

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Order data is retained for a minimum of six years in accordance with UK tax regulations. You may request deletion of your account data at any time by contacting us.

7. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of your personal data
  • Right to restrict processing — to request that we limit how we use your data
  • Right to data portability — to receive your data in a structured, commonly used format
  • Right to object — to object to the processing of your data in certain circumstances

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL/TLS technology and processed through Stripe's PCI DSS-compliant infrastructure.

9. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

PlantPal

Email: [email protected]
Website: www.plantpal.co.uk