Privacy notice
Last updated: 3 August 2026.
Information used to run the shop
When you place an order, Stripe processes your payment and collects the checkout details needed to complete it. Sprout & About receives order details such as the products, quantities, total, order reference, contact email and delivery information needed to fulfil the order. Full card details are not stored by this storefront.
When you use the contact form, the name, email address, message and any order reference you provide are used to answer your enquiry and provide customer support. Contact-form messages are delivered to the shop mailbox and are not added to a marketing list.
The shop also uses limited technical information to protect the service from abuse, including short-lived rate-limit records derived from network requests. Your basket is stored locally in your browser so it remains available between visits.
If a link contains standard campaign tags such as utm_source, utm_medium or utm_campaign, the shop stores those tags locally in your browser for up to 30 days and attaches them to an order if you later check out. This provides simple first-party information about which free listings, guides, recommendations or community links lead to orders. It does not store the page you visited before arriving or build a browsing-history profile.
Reviews and photographs sent through the contact address are used to read and respond to the submission. They are not published in marketing without separate permission.
Services involved
Cloudflare hosts the storefront and its order records and uses Turnstile to protect checkout and the contact form from automated abuse. Stripe provides payment processing. Square supplies product and inventory information and records stock changes. GitHub hosts the public product catalogue. Resend delivers contact-form and optional order-notification emails. Google Fonts may receive basic connection information when fonts are loaded.
These providers process information under their own terms and privacy notices. Information may be processed outside the UK with the safeguards offered by those providers.
Why information is used
The lawful bases depend on what the information is used for:
- Contract: taking payment, fulfilling an order, providing delivery updates and customer support.
- Legal obligation: keeping records needed for tax, accounting and consumer-law responsibilities.
- Legitimate interests: securing the shop, preventing fraud and misuse, keeping accurate inventory, understanding which shop links lead to orders and resolving disputes, where those interests are not overridden by your rights.
- Consent: optional marketing or other uses that specifically ask for permission. Consent can be withdrawn at any time.
Personal information is not sold. Marketing messages will not be sent without an appropriate legal basis.
Retention and your rights
Order information and customer-support messages are kept only as long as reasonably needed for fulfilment, customer support, fraud prevention, accounting and legal obligations. You may have rights to access, correct, erase, restrict or object to use of your personal information, and to complain to the UK Information Commissioner's Office.
Contact
Use the Contact page or email tom@plugplants.store for privacy questions or requests. Residential contact details are not published on this website.