Privacy Policy

How we protect your data under UK GDPR

Introduction

Smiley Succulents ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Smiley Succulents
Contact: privacy@smileysucculents.com

Information We Collect

When you purchase succulents, houseplants, or related products from us, we collect:

• Your name and contact details (email address, phone number)

• Delivery address for your plant orders

• Payment information (processed securely via our payment provider)

• Plant preferences and purchase history for personalised recommendations

• Newsletter subscription preferences

• Communications you send us (e.g., plant care questions)

Lawful Basis for Processing

Under UK GDPR, we process your data based on the following lawful bases:

• Contract: To fulfil your plant orders and deliver your succulents safely

• Legitimate Interests: To improve our services, prevent fraud, and enhance your shopping experience

• Consent: For marketing communications, plant care tips, and watering reminders

• Legal Obligation: To comply with UK tax and accounting requirements

How We Use Your Information

We use your personal data to:

• Process and deliver your succulent and houseplant orders

• Send order confirmations and delivery updates

• Provide plant care guides and seasonal growing tips (with your consent)

• Send personalised plant recommendations based on your preferences

• Respond to your enquiries about plant care and orders

• Improve our range of indoor plants and succulents

• Prevent fraudulent transactions

Information Sharing

We only share your data with trusted third parties who help us deliver our services:

• UK delivery couriers (Royal Mail, DPD, etc.) to ship your plants safely

• Payment processors (Stripe, PayPal) to securely handle transactions

• Email service providers for order confirmations and marketing (with consent)

We never sell your personal data to third parties.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the data we hold about you

• Right to Rectification: Correct any inaccurate information

• Right to Erasure: Request deletion of your data ("right to be forgotten")

• Right to Restrict Processing: Limit how we use your data

• Right to Data Portability: Receive your data in a portable format

• Right to Object: Object to processing based on legitimate interests

• Right to Withdraw Consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at privacy@smileysucculents.co.uk. We will respond within one month.

Data Retention

We retain your data for the following periods:

• Order data: 6 years (UK tax and accounting requirements)

• Marketing preferences: Until you withdraw consent

• Account data: Duration of your account plus 2 years

• Customer enquiries: 2 years after resolution

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure.

Cookies

We use cookies to enhance your browsing experience:

• Essential cookies: Required for your shopping basket and checkout

• Analytics cookies: Help us understand how you browse our plant collection

• Marketing cookies: Used to show relevant plant recommendations (with consent)

You can manage your cookie preferences through your browser settings.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@smileysucculents.com
Address: Smiley Succulents, United Kingdom