Privacy Policy
Last updated: 15/05/2026
1. Who We Are
This Privacy Policy explains how Jigsaw Marketing & Media Limited, trading as Plantsmith (“we”, “us”, “our”), collects, uses, shares and protects your personal information when you visit our website, make a purchase, contact us, or interact with us in other ways.
We are registered in the UK at:
Registered Address: Bishopbrook House, Cathedral Avenue, Wells, Somerset, BA5 1FD
Company Number: 04175618
Email: in**@***********co.uk
Website: plantsmith.co.uk
Brand/trading name: Plantsmith
For the purposes of UK GDPR and EU GDPR, we are the data controller of your personal data.
2. Information We Collect
We may collect:
- Contact details – name, billing address, shipping address, email address and phone number.
- Order information – products purchased, payment method, delivery instructions and order history.
- Account information – login credentials, purchase history and saved preferences.
- Payment information – processed securely by third-party payment providers; we do not store full card details.
- Technical information – IP address, browser type, device details, operating system, cookie identifiers and website usage data.
- Marketing preferences – opt-in and opt-out status for communications.
- Customer service information – messages, questions, complaints, product enquiries and plant care queries.
- User-generated content – reviews, comments, questions and other content you submit to us.
3. How We Use Your Information
We use your personal data to:
- Process, fulfil and deliver your orders.
- Provide customer service and respond to enquiries.
- Send transactional emails, such as order confirmations, delivery updates and service messages.
- Manage your account and order history.
- Personalise and improve your shopping experience.
- Send marketing communications where you have consented or where permitted by law.
- Improve our website, products and services.
- Analyse website performance and customer behaviour.
- Detect, prevent and investigate fraud, abuse, chargebacks and security incidents.
- Manage reviews, feedback, competitions, promotions and customer queries.
- Comply with legal obligations, including tax, accounting and regulatory requirements.
If you contact us with a question, complaint, product enquiry, plant care query or customer service request, we will use the information you provide to respond and may keep a record of the conversation.
4. Legal Bases for Processing
We rely on the following legal bases when processing your personal data:
- Contractual necessity – to fulfil your order, deliver products, manage your account and provide services you have requested.
- Legitimate interests – to improve our services, prevent fraud, secure our website, respond to customer enquiries, understand business performance and market to existing customers where permitted by law.
- Consent – for certain marketing communications and non-essential cookies or tracking technologies.
- Legal obligation – to retain records and comply with tax, accounting, consumer protection and other legal requirements.
We may send marketing emails where you have consented, or where permitted by law under the “soft opt-in” rules for existing customers. You can unsubscribe at any time using the link in our emails.
5. Sharing Your Information
We share your data only where necessary to operate our business, provide our services, fulfil orders, comply with legal obligations, protect our website, or market our products where permitted by law.
5.1 Analytics, Advertising and Site Performance
We may use the following providers for analytics, advertising, remarketing, conversion tracking and website performance:
- Microsoft Clarity – behavioural analytics, heatmaps and session insights. Privacy Policy: https://privacy.microsoft.com/privacystatement
- Google Analytics, Google Tag Manager, Google Ads and Google Merchant Center – site analytics, advertising, conversion tracking and remarketing. Privacy Policy: https://policies.google.com/privacy
- TikTok – advertising and analytics. Privacy Policy: https://www.tiktok.com/legal/page/row/privacy-policy/en
- Meta / Facebook / Instagram – advertising and analytics. Privacy Policy: https://www.facebook.com/privacy/policy/
5.2 Marketing and Communications
We may use the following providers to send marketing, transactional emails and customer communications:
- Klaviyo – email marketing and customer communications. Privacy Policy: https://www.klaviyo.com/legal/privacy/privacy-notice
- Postmark – transactional email delivery. Privacy Policy: https://www.activecampaign.com/legal/privacy-policy
5.3 Reviews and Customer Feedback
We may use third-party review platforms to collect and display customer reviews and feedback.
- Feefo – customer reviews and ratings. Privacy Policy: https://www.feefo.com/en/privacy-policy
If you submit a review, question, comment or other content, it may be displayed publicly along with your name or chosen display name.
5.4 Security, Hosting, Cookies and Backups
We may use the following providers to host, secure, back up and manage our website:
- Cloudflare – content delivery, performance and security. Privacy Policy: https://www.cloudflare.com/privacypolicy/
- BlogVault / MalCare – site backups and security scanning. Privacy Policy: https://blogvault.net/privacy/
- CookieHub – cookie consent management. Privacy Policy: https://www.cookiehub.com/privacy-policy
5.5 Payments
We use third-party payment providers to process payments securely. We do not store full card details on our website.
- Stripe – payment processing. Privacy Policy: https://stripe.com/gb/privacy
- PayPal / Braintree – payment processing. Privacy Policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
5.6 Fulfilment and Delivery
We share your name, delivery address, email address, phone number, order contents and delivery instructions with fulfilment partners and couriers where necessary to dispatch and deliver your order.
This may include:
- Our primary warehouse and customer service partner.
- Specialist plant despatch partners.
- Couriers such as Evri, DPD, Royal Mail and Amazon Logistics.
- Order management and fulfilment platforms used to route orders to warehouses, couriers and fulfilment partners.
Where used, this may include:
- OrderDesk – order management and fulfilment routing. Privacy Policy: https://www.orderdesk.com/privacy-policy/
6. Cookies and Tracking Technologies
We use cookies and similar technologies to make our website work, improve performance, understand how visitors use our site, personalise content and support advertising.
Some cookies are essential for the website to function. Others are optional and are only used where permitted by law.
We use CookieHub to manage cookie consent. You can view details of the cookies we use and change your preferences at any time by selecting the “Cookie Preferences” link in the footer of our website.
7. International Data Transfers
Some of our service providers may process personal data outside the UK or EEA.
Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards where required, such as adequacy regulations, Standard Contractual Clauses, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
8. Data Retention
We keep personal data only for as long as necessary for the purposes described in this policy.
Typical retention periods include:
- Order and account data – up to 6 years for tax, accounting and legal purposes.
- Customer service correspondence – for as long as reasonably necessary to manage your account, respond to queries, handle complaints and maintain business records.
- Marketing data – until you unsubscribe, withdraw consent, or we no longer have a lawful reason to retain it.
- Cookie data – as described in our cookie information, available via the “Cookie Preferences” link in the footer of our website.
We may retain certain information for longer where required by law, to resolve disputes, enforce our terms, or protect our legal rights.
9. Security
We use appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, access controls, security monitoring and other safeguards.
While no method of transmission or storage is 100% secure, we take reasonable steps to protect your information from unauthorised access, loss, misuse, alteration or disclosure.
10. Your Rights
You have rights under data protection law, including the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data.
- Restrict or object to certain processing.
- Withdraw consent where we rely on consent.
- Request data portability.
- Object to direct marketing.
- Raise concerns about automated decision-making or profiling, where applicable.
To exercise your rights, please email in**@***********co.uk.
You also have the right to complain to the UK Information Commissioner’s Office: https://ico.org.uk/
11. Profiling and Personalisation
We may use limited profiling or segmentation to personalise marketing, measure advertising performance, prevent fraud, improve our services and better understand customer behaviour.
We do not use automated decision-making that produces legal or similarly significant effects on you without appropriate safeguards.
12. Third-Party Links
Our website may contain links to other websites. Those websites have their own privacy policies and practices. We are not responsible for how third-party websites collect, use or protect your personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how we use your personal data, please contact us:
Email: in**@***********co.uk
Postal Address: Jigsaw Marketing & Media Limited, G.01 Power Road Studios, 114 Power Road, London W4 5PY