Alchemy Ferns
Website: www.alchemyferns.co.uk
Email: info@alchemyferns.co.uk
Address: Oak Tree Nursery, Boroughbridge Rd, Upper Poppleton, York, YO26 6QB
Alchemy Ferns is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use and store your information when you use our website or purchase from us.
1. Who We Are
Alchemy Ferns is a UK-based retail nursery specialising in hardy ferns and tree ferns. For the purposes of data protection law, we are the data controller of the personal information you provide.
2. What Information We Collect
We may collect and process the following information:
When you place an order:
- Name
- Billing and delivery address
- Email address
- Telephone number
- Order details
- IP address
When you create an account:
- Name
- Email address
- Account login details
When you contact us:
- Name
- Email address
- Any information you include in your message
When you subscribe to marketing emails (if applicable):
- Name
- Email address
Automatically collected:
- IP address
- Browser type
- Website usage data (via cookies and analytics, if enabled)
3. How We Use Your Information
We use your personal data for the following purposes:
To process and fulfil orders
Lawful basis: Contract
We use your information to process payment, arrange delivery and manage your order.
To comply with legal obligations
Lawful basis: Legal obligation
We retain order records for accounting and tax purposes.
To respond to enquiries
Lawful basis: Legitimate interest
To send marketing emails (where subscribed)
Lawful basis: Consent
You can withdraw consent at any time by unsubscribing.
To improve website performance and security
Lawful basis: Legitimate interest
4. Payment Processing
Payments are processed securely by third-party providers such as Stripe, PayPal or Braintree. We do not store full payment card details on our servers.
These providers process your data in accordance with their own privacy policies.
5. Shipping and Delivery
We use Diamond Logistics to deliver orders. Your name, address and contact details are shared with them solely for the purpose of fulfilling your delivery.
6. Email Marketing
If you subscribe to our mailing list, we may use a third-party email marketing provider to send updates. You may unsubscribe at any time using the link in any email or by contacting us directly.
7. Data Retention
We retain personal data only as long as necessary:
- Order records: up to 6–7 years for tax and accounting purposes
- Account data: until you request deletion
- Marketing subscriptions: until you unsubscribe
- Enquiries: typically up to 12 months
8. Cookies
Our website uses cookies to:
- Enable essential website functionality
- Manage your shopping cart
- Improve site performance
- Analyse traffic (where analytics are enabled)
You can control cookie preferences through our cookie consent banner. Essential cookies cannot be disabled as they are required for the website to function.
9. Sharing Your Data
We only share your data where necessary to operate our business, including:
- Payment processors
- Delivery providers
- Website hosting provider
- Email marketing provider (if applicable)
- Analytics services (if enabled)
We do not sell or rent your personal data.
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict processing
- Object to processing
- Data portability
To exercise your rights, please contact us using the details above.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
11. Data Security
We use secure hosting, SSL encryption and appropriate technical measures to protect your personal information from unauthorised access or misuse.
12. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page.