Privacy Policy

1. What we collect

Account and order data — the details you give us when you buy or subscribe: name, delivery address, email, phone (optional), and the contents of your order. Payment card numbers pass through our payment provider; we never see or store them.

Usage data — anonymised information about how you use the site (pages viewed, links clicked, roughly where in the country you are), collected via analytics cookies only if you consent.

Support data — anything you send us when you email or use the contact form, kept as long as the conversation is useful.

2. Why we use it

To fulfil your order, run your subscription, deliver customer support, and — where relevant — send transactional emails (order confirmation, dispatch, delivery, subscription previews).

For marketing emails, only if you tick the box or join The Greenhouse. You can unsubscribe from any marketing email in one click.

For analytics and product improvement, only with your consent from the cookie banner.

3. Cookies and the choices you made

We use three groups of cookies. Essential cookies keep your cart, your login, and your cookie choices working — you can't opt out because the site wouldn't function without them. Analytics cookies (Google Analytics, in aggregate form) help us understand which pages are useful; they're off unless you accept them. Marketing cookies let us measure ad campaigns; they're off unless you accept them.

Your choice is stored for six months, after which we'll ask again. You can change it any time by clearing your browser data or emailing hello@smartgreens.example.

4. Who we share data with

Our payment provider (Stripe), our delivery couriers (Royal Mail, DPD, Evri), our email platform (Klaviyo), and our analytics provider (Google) — each under contract, each processing on our instructions. We do not sell your data to anyone.

If we're legally required to share data — for example under a court order — we will, and we'll tell you unless the law prevents us.

5. How long we keep it

Order records: seven years, for tax and accounting.

Account and subscription data: until you close your account, then thirty days for reversal, then deleted.

Support emails: two years after the last message.

Analytics data: fourteen months in Google Analytics, then automatically deleted.

6. Your rights

Under UK GDPR you have the right to access the data we hold on you, correct it, delete it, restrict how we use it, and receive it in portable form. Email hello@smartgreens.example and we'll act within one calendar month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk). We'd rather you told us first so we can fix it.

7. Changes to this policy

If we make a material change we'll email registered customers before it takes effect. Small clarifications may be published here without notice. The date at the top always tells you when the current version went live.