Seasonal advice Dry summer? Mulch holds water in the soil where roots need it Read the guide
Sustainable Product of the Year 2024 — The Society of Garden Designers
Contact Account Basket

Privacy Policy

PlantGrow Ltd (“we”, “us”) is the data controller for the personal information collected through this website. This policy explains what we collect, why we collect it, and what rights you have.

Last updated: 2 September 2026

Who we are

PlantGrow Ltd
Cakes Hill Barn,
Ellingham Road,
Attleborough,
Norfolk
NR17 1AE 
info@plantgrow.co.uk 
01953 525 001

What we collect

When you place an order – your name, billing and delivery address, email address, phone number, order contents and order history. We do not see or store your card details; those go directly to our payment provider.

When you create an account – your name, email address, password (stored encrypted) and any addresses you save.

When you contact us – your name, email address, phone number if you give it, and whatever you write in your message.

When you sign up for our newsletter – your email address.

When you leave a product review – your name, email address and the review itself. Your name and review are published; your email address is not.

Automatically, as you browse – your IP address, browser and device type, the pages you visit and how you arrived at the site. Where you’ve agreed to analytics cookies, this information is also collected by Google Analytics.

Why we collect it

We process your order and arrange delivery because we have a contract with you. We handle returns, refunds and enquiries on the same basis.

We keep order and payment records because we’re legally required to for tax purposes.

We send marketing emails only where you’ve given us consent.

We use Google Analytics to understand how the site is used, so we can improve it. We only do this where you’ve agreed to analytics cookies, and you can withdraw that at any time.

We use Cloudflare Turnstile to prevent spam and fraudulent form submissions, which is in our legitimate interests and yours.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

Who we share it with

Payment providers – PayPal (Europe) S.à r.l. et Cie, S.C.A. They process your payment and are a separate data controller for the information you give them.

Delivery partners – DHL and Palletline receive your name, address and phone number so they can deliver your order and contact you about it.

Site services – our web host, Cloudflare (spam prevention and security) and Imagify (image optimisation).

Analytics – Google Ireland Limited, where you’ve agreed to analytics cookies.

Professional advisers and authorities – our accountant, and any authority we are legally required to disclose to.

Some of these providers operate outside the UK. Where they do, the transfer is covered by UK adequacy regulations or an International Data Transfer Agreement.

How long we keep it

Order records – six years after the end of the tax year in which the order was placed, as required for tax purposes.

Account details – until you ask us to close your account.

Contact enquiries – 24 months.

Newsletter subscribers – until you unsubscribe.

Product reviews – indefinitely, unless you ask us to remove yours.

Cookies

Cookies are small files a website stores on your device.

Essential cookies make the site work. WooCommerce uses them to remember what’s in your basket and to keep you signed in. Cloudflare Turnstile uses one to confirm you’re not a bot when you submit a form. These cannot be switched off and do not require your consent.

Analytics cookies are set by Google Analytics, and only if you agree. They tell us which pages are read and how people find the site.

You can change your cookie choices at any time using the link in the footer. Full detail is in our Cookie Policy.

Marketing emails

We’ll only send you marketing email if you’ve asked us to. Every email includes an unsubscribe link, and you can email info@plantgrow.co.uk at any time to be removed.

We may email you about an order you’ve placed without your consent, because that forms part of fulfilling the order rather than marketing.

Your rights

Under UK GDPR you have the right to:

  • Ask what personal information we hold about you, and receive a copy
  • Have inaccurate information corrected
  • Have your information deleted, where we have no legal reason to keep it
  • Restrict or object to how we use it
  • Receive your information in a portable format
  • Withdraw consent, where consent is the basis we rely on

To exercise any of these, email info@plantgrow.co.uk. We’ll respond within one month.

If you have an account, you can also request an export or erasure of your data from My Account.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.

Changes to this policy

We’ll update this page when our practices change, and update the date at the top.