Privacy Policy

Privacy & Data Protection Policy

At The Seed Story (accessible from our website), we are committed to protecting your privacy and ensuring your personal information is handled safely and responsibly. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, purchase our products, or communicate with us.

This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

The Seed Story is the data controller responsible for your personal data.

• Business Name: The Seed Story

• Contact Email: info@theseedstory.co.uk

If you have any questions about this policy or how we handle your personal data, please contact us at the email address above.

2. What Personal Information We Collect

We may collect, store, and use the following categories of personal information:

• Identity & Contact Data: Your full name, delivery address, billing address, email address, and telephone number.

• Transaction Data: Details about payments made to and from you, and specific details of products you have purchased from us.

• Technical & Usage Data: Information about how you use our website, including your IP address, browser type, time zone setting, operating system, and page interaction data (collected via cookies and analytics).

• Marketing & Communications Data: Your preferences in receiving direct marketing communications from us (such as newsletter sign-ups) and your communication preferences.

Note: We do not store or process your financial card details. All payment transactions are processed securely through encrypted third-party payment gateways (e.g., Shopify Payments, Stripe, or PayPal).

3. How We Collect Your Personal Data

We collect data from you through:

• Direct Interactions: When you place an order, subscribe to our newsletter, submit a contact request, or email us at info@theseedstory.co.uk.

• Automated Technologies: As you interact with our website, we automatically collect technical data using cookies, server logs, and similar technologies.

4. How and Why We Use Your Personal Data

Under UK data protection laws, we must have a lawful basis for processing your personal data. We use your data for the following purposes:

Purpose / ActivityType of DataLawful Basis for Processing

Fulfilling your order (processing payment, packaging, and dispatching your items via Royal Mail)Identity, Contact, TransactionPerformance of a Contract with you

Customer Support (responding to enquiries, order updates, or troubleshooting germination queries)Identity, Contact, CommunicationPerformance of a Contract & Legitimate Interests (to provide helpful service)

Legal & Tax Compliance (keeping transaction records for UK accounting purposes)Identity, Contact, TransactionLegal Obligation

Marketing Communications (sending newsletters or promotional offers, where requested)Identity, ContactConsent (you may opt out at any time)

Improving Our Website (analysing site traffic and user behaviour)Technical, UsageLegitimate Interests (to enhance user experience)

5. Sharing Your Personal Data

We never sell, rent, or trade your personal information to third parties. However, we do share necessary data with trusted service providers to run our business and fulfil your orders:

• Postal & Delivery Services: Royal Mail (to deliver your seed kits and packages).

• E-Commerce & Payment Platforms: Our website hosting provider (e.g., Shopify) and secure payment gateways to process orders safely.

• Professional Services: Accounting, IT, and administrative support services where strictly necessary.

All third-party service providers are contractually required to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Some of our third-party service providers (such as website platforms or email software) may be based outside the UK. Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order & Financial Records: Retained for up to 6 years following a transaction to comply with UK tax law (HMRC regulations).

• Customer Enquiries: Retained for up to 2 years to assist with ongoing support or germination advice.

• Marketing Data: Retained until you withdraw your consent or unsubscribe.

8. Your Legal Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you.

• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.

• Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data in certain circumstances.

• Right to Restrict or Object to Processing: You can ask us to stop or limit the processing of your data under specific conditions.

• Right to Withdraw Consent: Where we rely on consent (e.g., marketing emails), you can withdraw consent at any time by clicking the "unsubscribe" link or emailing us.

To exercise any of these rights, please contact us at info@theseedstory.co.uk. We aim to respond to all legitimate requests within one month.

9. Cookies

Our website uses cookies to distinguish you from other users, provide essential shopping basket functionality, and analyse website traffic. You can set your browser to refuse all or some browser cookies, but please note that disabling essential cookies may affect the functionality of our online store.

10. Complaints

If you have any concerns about our use of your personal information, please let us know first by contacting us at info@theseedstory.co.uk so we can resolve the issue.

You also have the right to lodge a formal complaint with the UK data protection supervisory authority:

• Information Commissioner’s Office (ICO)

• Website: www.ico.org.uk

• Helpline: 0303 123 1113

11. Changes to This Policy

We keep our Privacy Policy under regular review and will update this page with any changes. This policy was last updated in 2026.

1. Who We Are (Data Controller)

The Seed Story is the data controller responsible for your personal data.

• Business Name: The Seed Story

• Contact Email: info@theseedstory.co.uk

If you have any questions about this policy or how we handle your personal data, please contact us at the email address above.

2. What Personal Information We Collect

We may collect, store, and use the following categories of personal information:

• Identity & Contact Data: Your full name, delivery address, billing address, email address, and telephone number.

• Transaction Data: Details about payments made to and from you, and specific details of products you have purchased from us.

• Technical & Usage Data: Information about how you use our website, including your IP address, browser type, time zone setting, operating system, and page interaction data (collected via cookies and analytics).

• Marketing & Communications Data: Your preferences in receiving direct marketing communications from us (such as newsletter sign-ups) and your communication preferences.

Note: We do not store or process your financial card details. All payment transactions are processed securely through encrypted third-party payment gateways (e.g., Shopify Payments, Stripe, or PayPal).

3. How We Collect Your Personal Data

We collect data from you through:

• Direct Interactions: When you place an order, subscribe to our newsletter, submit a contact request, or email us at info@theseedstory.co.uk.

• Automated Technologies: As you interact with our website, we automatically collect technical data using cookies, server logs, and similar technologies.

4. How and Why We Use Your Personal Data

Under UK data protection laws, we must have a lawful basis for processing your personal data. We use your data for the following purposes:

Purpose / ActivityType of DataLawful Basis for Processing

Fulfilling your order (processing payment, packaging, and dispatching your items via Royal Mail)Identity, Contact, TransactionPerformance of a Contract with you

Customer Support (responding to enquiries, order updates, or troubleshooting germination queries)Identity, Contact, CommunicationPerformance of a Contract & Legitimate Interests (to provide helpful service)

Legal & Tax Compliance (keeping transaction records for UK accounting purposes)Identity, Contact, TransactionLegal Obligation

Marketing Communications (sending newsletters or promotional offers, where requested)Identity, ContactConsent (you may opt out at any time)

Improving Our Website (analysing site traffic and user behaviour)Technical, UsageLegitimate Interests (to enhance user experience)

5. Sharing Your Personal Data

We never sell, rent, or trade your personal information to third parties. However, we do share necessary data with trusted service providers to run our business and fulfil your orders:

• Postal & Delivery Services: Royal Mail (to deliver your seed kits and packages).

• E-Commerce & Payment Platforms: Our website hosting provider (e.g., Shopify) and secure payment gateways to process orders safely.

• Professional Services: Accounting, IT, and administrative support services where strictly necessary.

All third-party service providers are contractually required to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Some of our third-party service providers (such as website platforms or email software) may be based outside the UK. Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order & Financial Records: Retained for up to 6 years following a transaction to comply with UK tax law (HMRC regulations).

• Customer Enquiries: Retained for up to 2 years to assist with ongoing support or germination advice.

• Marketing Data: Retained until you withdraw your consent or unsubscribe.

8. Your Legal Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you.

• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.

• Right to Erasure ('Right to be Forgotten'): You can ask us to delete your personal data in certain circumstances.

• Right to Restrict or Object to Processing: You can ask us to stop or limit the processing of your data under specific conditions.

• Right to Withdraw Consent: Where we rely on consent (e.g., marketing emails), you can withdraw consent at any time by clicking the "unsubscribe" link or emailing us.

To exercise any of these rights, please contact us at info@theseedstory.co.uk. We aim to respond to all legitimate requests within one month.

9. Cookies

Our website uses cookies to distinguish you from other users, provide essential shopping basket functionality, and analyse website traffic. You can set your browser to refuse all or some browser cookies, but please note that disabling essential cookies may affect the functionality of our online store.

10. Complaints

If you have any concerns about our use of your personal information, please let us know first by contacting us at info@theseedstory.co.uk so we can resolve the issue.

You also have the right to lodge a formal complaint with the UK data protection supervisory authority:

• Information Commissioner’s Office (ICO)

• Website: www.ico.org.uk

• Helpline: 0303 123 1113

11. Changes to This Policy

We keep our Privacy Policy under regular review and will update this page with any changes. This policy was last updated in 2026.