Privacy Policy

Snip & Sprout, operated by Lisa, is responsible for personal information collected through this website. Privacy enquiries and data protection complaints can be sent to our contact page.

This may include your name, email address, delivery address, postcode, order and payment-reference details, messages, IP address, security logs and information needed to manage reservations, dispatch, refunds, digital-download access and customer support. Most information is supplied directly by you. Technical and security information may be generated automatically when you use the website, account, download area or admin area.

Order information is processed because it is necessary to take steps at your request and perform the sales contract. Accounting and tax records are retained to meet legal obligations. Security logs and fraud-prevention records are processed for legitimate interests in protecting the website, customers and business.

Information is shared only where needed, including with hosting and email providers, Royal Mail or another delivery provider, payment providers selected by you, professional advisers, and public authorities where legally required. Personal information is not sold.

Email Updates are optional marketing messages with separate choices for new plants and releases, public offers, and seasonal care or propagation notes. Subscriptions use double opt-in: the selected topics are not activated until the one-time confirmation link is used. Consent evidence, preferences, delivery status and unsubscribe history are retained only as needed to operate the service and show that choices were respected.

Every Email Updates message includes passwordless preference management and a clear unsubscribe button. A recipient can stop one topic or all marketing at any time. This does not stop necessary order, account, security, review or exact-plant restock service messages. Customers are never enrolled automatically because they created an account, placed an order or requested a restock alert.

Campaign links use an opaque first-party code so Snip & Sprout can count genuine link clicks and, where a customer places an order in the same browser tab, attribute that order to the relevant Email Update. The temporary code is kept only in that tab’s session storage and is cleared after checkout. Email Updates do not use invisible open-tracking pixels, third-party advertising trackers or analytics cookies.

Order, payment-reference and accounting records may normally be retained for up to six years after the relevant accounting period or longer where a legal dispute requires it. Enquiries and security records are kept only as long as reasonably needed for their purpose. Records are deleted or anonymised when no longer required.

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or data portability. Where processing is based on consent, you may withdraw that consent. You may complain directly to Snip & Sprout using the contact details on this page. You can also complain to the Information Commissioner’s Office if you remain dissatisfied.

Reasonable access controls, hashing, protected storage and audit logging are used. Some service providers may process information outside the UK. Where that happens, the provider’s lawful transfer safeguards are relied upon.

Order and service emails are not marketing. Marketing emails will only be sent where there is valid consent or another lawful basis under the electronic marketing rules, and every marketing message will provide a clear way to opt out.