Last updated: 8 August 2026

PlantKeep ("PlantKeep", "we", "us" or "our") operates the website https://plantkeep.shop/ and the related online store, content, features, products and services (together, the "Services"). Our store is hosted by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit or use the Services, place an order, contact us or otherwise interact with PlantKeep. If there is a conflict between this Privacy Policy and our Terms of Service regarding the collection, use or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. It is important that the information we hold about you is accurate and current, so please contact us if your personal information changes.

1. Who Is Responsible for Your Personal Information?

For the purposes of applicable UK data protection law, PlantKeep is the data controller of the personal information described in this Privacy Policy, unless otherwise stated.

Our contact details are:

PlantKeep
Website: https://plantkeep.shop/
Email: contact@plantkeep.shop
Phone: +44 7735 310994
Address: 1 Ashchurch Grove, London, W12 9BT, United Kingdom

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Services and may include:

• Contact information, such as your name, email address, telephone number, billing address and delivery address.

• Order and transaction information, such as the products you view, add to your basket or purchase; order history; delivery information; returns; refunds; cancellations; payment status and transaction details.

• Payment information. Payments are processed by Shopify and/or the payment providers made available at checkout. We generally do not receive or store your complete payment-card details, although we may receive limited billing information, payment confirmation and transaction details.

• Account information, such as your login details, saved addresses, preferences and account settings, if customer accounts are available and you choose to create one.

• Communications, including information you provide when you contact us, submit an enquiry, request support, make a complaint or communicate with us about an order.

• Device and technical information, such as your IP address, browser type, device type, operating system, network information, unique identifiers and cookie information.

• Usage information, such as pages viewed, links clicked, searches, browsing activity and how and when you interact with the Services.

• Marketing preferences, including whether you have agreed to receive marketing and how you interact with marketing messages.

Please do not provide us with sensitive personal information unless we specifically request it and it is necessary for a lawful purpose.

3. How We Collect Personal Information

We may collect personal information:

• Directly from you, including when you browse our store, create an account, place an order, subscribe to marketing, contact us, request a return or otherwise provide information to us.

• Automatically, through cookies, pixels, server logs and similar technologies when you use the Services.

• From service providers, such as Shopify, payment processors, fraud-prevention providers, delivery companies, technical service providers and customer-support providers.

• From business and marketing partners, but only where permitted by applicable law and, where required, with your consent.

4. How We Use Personal Information and Our Lawful Bases

We process personal information only when we have a lawful basis to do so. Depending on the circumstances, we may rely on the following lawful bases:

• Performance of a contract: to process payment, confirm and fulfil your order, arrange delivery, provide order updates, manage your account, handle returns or refunds and provide the products or services you request.

• Legal obligation: to maintain tax and accounting records, comply with consumer-protection and data-protection requirements, respond to lawful requests and meet other legal or regulatory obligations.

• Legitimate interests: to operate and improve our store, provide customer support, keep the Services secure, prevent fraud and misuse, understand store performance, protect our legal rights and manage our business efficiently. We rely on this basis only where our interests are not overridden by your rights and freedoms.

• Consent: to send certain direct marketing communications and to use non-essential cookies or similar technologies where consent is required. You may withdraw your consent at any time.

We may use your personal information to:

• provide, operate, maintain and improve the Services;

• process payments and fulfil, deliver, return, exchange, cancel or refund orders;

• communicate with you about orders, accounts, enquiries, complaints, updates and customer support;

• personalise your shopping experience and remember your preferences;

• detect, investigate and prevent fraud, abuse, security incidents and unlawful activity;

• comply with applicable laws, legal processes and regulatory requirements;

• establish, exercise or defend legal claims and enforce our terms and policies; and

• send marketing communications or measure advertising performance where permitted by law and, where required, with your consent.

If we need personal information to enter into or perform a contract with you and you do not provide it, we may be unable to process or fulfil your order.

5. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate the store, remember your choices, keep your basket and checkout working, protect the Services, understand site usage and, where enabled, provide analytics or advertising.

Essential cookies are necessary for the website and checkout to function. Where required by law, we will ask for your consent before using non-essential analytics or advertising cookies. You can manage your choices through our cookie banner or your browser settings. Blocking some cookies may affect how parts of the Services work.

6. Marketing Communications

We may send you marketing communications where you have consented or where otherwise permitted by law. You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us at contact@plantkeep.shop.

Opting out of marketing will not stop essential service messages, such as order confirmations, delivery updates, security notices or responses to your enquiries.

7. How We Share Personal Information

We may disclose personal information where reasonably necessary to the following recipients:

• Shopify, which hosts our online store and provides ecommerce and checkout services.

• Payment processors, banks and fraud-prevention providers involved in authorising payments and protecting transactions.

• Delivery, fulfilment and logistics providers that deliver orders and process returns.

• Technology and professional service providers, such as hosting, cloud storage, IT support, customer support, analytics, accounting, legal and insurance providers.

• Marketing and advertising providers, where we use their services and where sharing is permitted by law and subject to any required consent.

• Government bodies, regulators, courts, law-enforcement authorities or other parties where disclosure is required or permitted by law, necessary to protect rights or safety, or needed to establish, exercise or defend legal claims.

• A buyer, investor or successor organisation in connection with a proposed or completed sale, merger, restructuring or transfer of all or part of our business, subject to appropriate confidentiality and data-protection measures.

We may also share information when you direct us to do so or give us permission. We do not sell your personal information in exchange for money.

8. Relationship with Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services so that it can provide and improve its platform, checkout, security and related services. Information submitted through our store may be transmitted to Shopify and other service providers, including providers located outside the United Kingdom.

In some situations, Shopify may act as an independent data controller for its own purposes. You can learn more by reading the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and by visiting Shopify's privacy portal at https://privacy.shopify.com/.

9. International Transfers

Some of our service providers, including Shopify, may store or process personal information outside the United Kingdom. Where personal information is transferred internationally, we take steps to ensure that an appropriate level of protection applies.

Where required, transfers are made using recognised safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. You may contact us for more information about the safeguards relevant to your personal information.

10. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and transaction records, meet legal, tax and accounting requirements, resolve disputes, prevent fraud and enforce our agreements.

Retention periods depend on the type of information and the reason it was collected. For example, order, payment and accounting records may be kept for the period required by applicable UK law, which can generally be up to six years. We may keep information for longer where necessary for an ongoing dispute, legal claim, investigation or legal obligation. When information is no longer required, we will delete or anonymise it where reasonably practicable.

11. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, unauthorised access, alteration or disclosure. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping any account password confidential. Please do not send payment-card details or other sensitive information through ordinary email.

12. Third-Party Websites and Services

The Services may contain links to websites, applications or platforms operated by third parties. We do not control and are not responsible for their privacy, security or content. If you follow a third-party link, please review that party's privacy notice before providing personal information.

13. Children's Information

The Services are not directed to children, and we do not knowingly collect personal information from children under the age at which they may lawfully provide it. If you are a parent or guardian and believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

14. Your Data Protection Rights

Depending on the circumstances and subject to applicable legal limitations, you may have the right to:

• be informed about how your personal information is used;

• request access to the personal information we hold about you;

• ask us to correct inaccurate or incomplete personal information;

• ask us to delete your personal information;

• ask us to restrict how we use your personal information;

• object to processing based on legitimate interests or to direct marketing;

• receive certain personal information in a structured, commonly used and machine-readable format and ask for it to be transferred where applicable;

• withdraw consent at any time where processing is based on consent; and

• complain to the Information Commissioner's Office.

To exercise a right, email contact@plantkeep.shop. We may need to verify your identity before completing a request. We will respond within the time required by applicable law. These rights are not absolute, and we may refuse or limit a request where the law allows us to do so; if this happens, we will explain the reason.

15. Data Protection Complaints

If you have a concern or complaint about how we use your personal information, please email contact@plantkeep.shop with the subject line "Data Protection Complaint". Please include enough information for us to understand and investigate your concern.

We will acknowledge your complaint within 30 days, investigate it appropriately and communicate the outcome without undue delay, in accordance with applicable UK data-protection requirements.

If you are not satisfied with our response, you may complain to the UK's independent data-protection regulator:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

You may also have the right to complain to another competent data-protection authority if you live outside the United Kingdom.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, services, technology, legal requirements or other operational reasons. We will publish the updated version on this page, change the "Last updated" date and provide any additional notice required by law.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise a data-protection right or wish to make a complaint, contact us at:

PlantKeep
Website: https://plantkeep.shop/
Email: contact@plantkeep.shop
Phone: +44 7735 310994
Address: 1 Ashchurch Grove, London, W12 9BT, United Kingdom