Hidden Hortus respects your privacy and is committed to handling your personal information responsibly.
For the purposes of data-protection law, Hidden Hortus, operated by a sole trader, is the controller of the personal information covered by this policy.
If you have any questions about this policy or your personal information, contact us via our contact form.
Information we collect
Depending on how you use our website, we may collect:
your name, email address, telephone number and delivery/billing address;
order details, including products purchased and payment status;
messages you send to us through email or contact forms;
newsletter sign-up preferences;
technical and usage information, such as IP address, browser type, device information and pages visited; and
information collected through cookies and similar technologies, subject to your cookie choices.
We do not store your full payment-card details. Payments are handled by our chosen payment-service provider.
How we use your information
We use personal information to:
process, dispatch and support your order;
communicate with you about an order, delivery, return or enquiry;
prevent fraud and keep our website secure;
maintain our business records and meet legal or tax obligations;
understand how people use our website and improve it;
measure the effectiveness of advertising; and
send marketing emails where you have opted in, or where otherwise permitted by law.
Our legal basis for using your information
We process your information where it is necessary to perform our contract with you, comply with a legal obligation, pursue our legitimate interests in operating and improving our business, or where you have given consent.
Where consent is required—for example, for optional marketing emails or non-essential cookies—you can withdraw it at any time.
Marketing emails
If you join our newsletter, we may send you updates about plants, new arrivals, seasonal news and offers.
You can unsubscribe at any time by using the unsubscribe link in an email or by contacting us via our contact form. We will not sell your personal information to third parties.
Cookies and advertising technology
We use essential cookies to make the website work. With your consent, we may also use analytics and advertising technologies, including:
Google Analytics;
Google Ads;
Meta technologies, including the Meta Pixel and/or Conversions API; and
Pinterest technologies, including the Pinterest Tag.
These tools may help us understand website visits, improve our advertising and measure whether an advert led to a purchase or enquiry. You can manage non-essential cookies using our cookie banner or [insert cookie-settings link].
Who we share information with
We may share relevant information with trusted service providers that help us run our business, such as:
payment providers;
website-hosting, ecommerce and security providers;
email marketing providers;
delivery providers, including Royal Mail;
analytics and advertising platforms; and
professional advisers or public authorities where required by law.
We only share information where necessary and expect service providers to protect it appropriately.
How long we keep information
We keep personal information only for as long as needed for the purpose for which it was collected.
For example, we normally retain order and transaction records for 3 years. Newsletter information is retained until you unsubscribe or ask us to remove it, unless we need to keep it for a legal reason.
Your rights
Depending on the circumstances, you may have the right to:
request access to the information we hold about you;
ask us to correct inaccurate information;
ask us to delete your information;
ask us to restrict or object to certain processing;
request a copy of information you provided to us; and
withdraw consent where we rely on it.
To exercise a right, contact us via our contact form. You also have the right to complain to the Information Commissioner’s Office at www.ico.org.uk.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with its “last updated” date.
