Privacy policy
This policy explains what personal information Pot & Planter collects when you browse or buy from potandplanter.co.uk (the "Site"), how we use it and who we share it with. Pot & Planter is a brand of Houseplant Ltd, and references to "we", "us" and "our" mean Houseplant Ltd.
How to contact us
If you have a question about this policy, would like more detail about how we handle your data, or wish to make a complaint, please email hello@potandplanter.co.uk or write to us at:
Houseplant Ltd, Unit 5, Yalberton Tor Industrial Estate, Alders Way, Paignton, TQ4 7QL, United Kingdom.
What we collect
In this policy, "Personal Information" means any information that can identify you as an individual. We collect it in three situations: when you visit the Site, when you place an order, and when you contact our customer service team.
Information about your device
When you visit the Site, we automatically collect details such as your browser version, IP address, time zone, cookie information, the pages and products you view, the searches you make and how you move around the Site. This is gathered through cookies, log files, web beacons, tags and pixels, including those provided by Google and Facebook. We use it to display the Site correctly on your device and to understand how the Site is used so that we can improve it. This information is shared with Shopify, which processes it on our behalf.
Information about your order
When you buy from us, you give us your name, billing and delivery addresses, payment details (including card numbers), email address and phone number. We use this to fulfil our contract with you: taking payment, arranging delivery, sending invoices and order confirmations, keeping in touch about your order and checking orders for fraud. Where your preferences allow, we also use it to tell you about our products and offers. Your order information is shared with Shopify, and your delivery details are shared with the courier carrying your parcel.
Who we share it with
We share Personal Information with the companies that help us run our shop and deliver your orders. Our online store runs on Shopify, and you can read how Shopify handles personal information at https://www.shopify.com/legal/privacy.
We may also disclose Personal Information where the law requires it, in response to a subpoena, search warrant or other lawful request, or to protect our legal rights.
Advertising and analytics
We use Personal Information to show you advertising and marketing that we think you may find relevant. In particular:
- Google Analytics helps us understand how customers use the Site. Google's privacy policy is at https://www.google.com/intl/en/policies/privacy/, and you can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
- We share information about how you use the Site, what you buy and how you respond to our adverts on other websites with our advertising partners. Some of this is shared directly and some through cookies and similar technologies, which you may be asked to consent to depending on where you live.
- We use Shopify Audiences to show our adverts, on other websites, to shoppers who have bought from other Shopify merchants and may be interested in our products. We also share your use of the Site, your purchases and the email address linked to them with Shopify Audiences, which allows other Shopify merchants to show you offers.
The Network Advertising Initiative explains how targeted advertising works at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising through each platform's settings:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
The Digital Advertising Alliance also runs an opt-out portal covering several of these services at https://optout.aboutads.info/.
How we use your information
We use your Personal Information to run our shop: listing products, taking payment, dispatching and delivering orders, and keeping you informed about new products, services and offers.
If you give us your mobile number for text messages, we use it only to send you updates about your order, reminders about items left in your basket, offers and requests for reviews. A cookie on the Site records what you add to your basket so that we can send those reminders. We do not share your phone number or other personal details with anyone except the trusted partners who send our texts for us.
Our legal basis
Under the General Data Protection Regulation (GDPR), if you live in the European Economic Area (EEA), we rely on one or more of these legal bases to process your information:
- your consent;
- performing our contract with you;
- meeting our legal obligations;
- protecting your vital interests;
- carrying out a task in the public interest;
- our legitimate interests, where these do not override your fundamental rights and freedoms.
How long we keep it
When you place an order, we keep your Personal Information on record unless and until you ask us to delete it. Your right to have your data erased is explained below.
Your rights under GDPR
If you live in the EEA, you can ask to see the Personal Information we hold about you, to receive a copy to take to another provider, and to have it corrected, updated or deleted. To make a request, please use the contact details at the top of this policy.
Your information is first processed in Ireland and is then transferred outside Europe, including to Canada and the United States, for storage and further processing. Shopify's GDPR whitepaper explains how these transfers comply with the GDPR: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
California residents (CCPA)
If you live in California, you have the right to know what Personal Information we hold about you, to receive a copy to take to another provider, and to have it corrected, updated or deleted. Please contact us using the details above to make a request. You can also ask someone to make the request on your behalf as your authorised agent by writing to the same address.
Cookies
A cookie is a small file that is saved to your computer or device when you visit a website. We use several kinds, including functional, performance, advertising, and social media or content cookies. They let the Site remember your actions and preferences, such as your login and region, so you don't have to enter them again on each visit or each page. They also tell us how people use the Site, for example whether a visitor is new or returning.
These are the cookies we use to run the Site and improve your experience.
Cookies needed for the shop to work
| Name | Purpose | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
Reporting and analytics cookies
| Name | Purpose | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| _shopify_ga | Shopify and Google Analytics. | session |
How long a cookie stays on your device depends on its type. Session cookies are removed when you stop browsing, while persistent cookies remain until they expire or you delete them. Most of the cookies we use are persistent and expire between 30 minutes and two years after they are saved to your device.
You can manage cookies in several ways, but removing or blocking them may affect how the Site works for you, and some areas may stop working fully.
Most browsers accept cookies automatically. You can change this in your browser settings, usually found in the "Tools" or "Preferences" menu. Your browser's help pages explain how to block, manage or filter cookies, and www.allaboutcookies.org has further guidance.
Blocking cookies may not stop us sharing information with third parties such as our advertising partners. To exercise your rights or opt out of these uses, please follow the steps in the "Advertising and analytics" section above.
Do Not Track
There is no agreed industry standard for responding to "Do Not Track" signals, so we do not change how we collect or use data when your browser sends one.
Customer reviews
We may use reviews you leave on public platforms to improve our service and to help other customers decide what to buy. Under UK law, you usually own the copyright in a review you write (Copyright, Designs and Patents Act 1988). By placing an order or using our services, you allow us to quote your reviews, in full or in part, on our website, in marketing materials and on social media.
When we quote a review, we may include your name as it appears on the review platform alongside your words, and we will always represent your feedback accurately. This use falls within the fair dealing provisions for criticism or review, provided it is properly acknowledged (Copyright, Designs and Patents Act 1988, section 30).
If you would prefer us not to use your reviews, email hello@potandplanter.co.uk at any time.
Updates to this policy
We may update this policy from time to time, for example to reflect changes to how we work or for operational, legal or regulatory reasons.
Complaints
If you would like to make a complaint, please email or write to us using the details in "How to contact us" above.
If you are not satisfied with our response, you can complain to your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/.
Last updated: 4 October 2026