Home
Privacy Policy

Privacy Policy

Last updated: 11/10/2025

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from Root Houseplants (the “Site”). We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. The Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies that are installed on your device. As you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

Cookies: Data files that are placed on your device or computer and often include an anonymous unique identifier.
Log files: Track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
Web beacons, tags, and pixels: Electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are referring to both Device Information and Order Information.

2. How and Why We Use Your Personal Information (Legal Basis)

Under UK GDPR, we must have a lawful basis for processing your personal data. We process your Personal Information for the following purposes and under the following legal bases:

To fulfill a contract: We use the Order Information to process and fulfill any orders you place, including processing your payment, arranging for shipping, and providing you with invoices and order confirmations.
For legitimate interests: We use the Device Information to help us screen for potential risk and fraud, and to improve and optimise our Site and marketing. This is in our legitimate business interest to ensure a secure and effective service.
With your consent: We may use your information to provide you with marketing communications or targeted advertisements, but only where you have explicitly given us your consent to do so. You have the right to withdraw this consent at any time.

3. Sharing Your Personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above. We have data processing agreements in place with these third parties to ensure they are compliant with UK GDPR. For example:

We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. To do this, we may share your information with advertising partners, including Google. We use services like Google Ads to display our ads on other websites and may use your email address or other information to create a Customer Match list. This list allows us to show our ads to you and to other users with similar characteristics. We have a lawful basis for this processing, which is your consent to receive marketing from us.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

4. International Data Transfers

Please note that your information may be transferred to and processed in countries outside of the UK, including the United States, where our third-party service providers (such as Shopify and Google) are based. We take appropriate measures to ensure that any such transfer of data is carried out in compliance with UK GDPR, for example by using standard contractual clauses approved by the Information Commissioner’s Office (ICO).

5. Your Rights Under UK GDPR

As a data subject, you have the following rights in relation to your personal data:

The right to be informed: You have the right to be informed about how your personal data is being used. This privacy policy serves to provide you with that information.
The right of access: You have the right to request a copy of the personal information we hold about you.
The right to rectification: You have the right to have inaccurate or incomplete personal data corrected.
The right to erasure ("right to be forgotten"): In certain circumstances, you can ask for your personal data to be deleted.
The right to restrict processing: You can request that we restrict the processing of your personal data.
The right to data portability: You can request to have your data transferred to another organisation.
The right to object: You have the right to object to the processing of your personal data for direct marketing purposes.
Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing.

If you would like to exercise any of these rights, please contact us using the details below.

6. Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

7. Changes

We may update this privacy policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this policy will be changed to reflect the most recent version.

8. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@root-houseplants.co, or by mail using the details provided below:

Root Houseplants,
The Bluecoat,
School Lane,
Liverpool, L1 3BX

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can find more information on their website: https://ico.org.uk/.

We respect your privacy and promise to use any information we hold about you in a safe and responsible way. By shopping with us, you are agreeing to our Privacy Policy, in particular, our use of your information, as outlined below.

We are the ‘controller’ of personal data we have collected about you as set out below. This includes personal data we use process orders.