Privacy Policy
Last updated: March 2026
1. Who We Are
ZCSucculents is a small independent succulent nursery based at 1 The Barn Bunny Lane, Tunbridge Wells, Kent, TN3 9BY, United Kingdom. We are the data controller for any personal information you provide to us through this website.
2. What Information We Collect
We may collect the following personal information:
- Account information — your name and email address when you create an account
- Order information — your name, delivery address, and order details when you make a purchase
- Booking information — your name, email, and chosen appointment time when you book a nursery visit
- Communications — any messages you send us via our contact form
- Usage data — basic analytics about how you use the website (pages visited, browser type)
3. How We Use Your Information
We use your personal information to:
- Process and fulfil your orders
- Manage your account and nursery visit bookings
- Respond to your enquiries and provide customer support
- Send you order confirmations and delivery updates
- Improve our website and services
- Send you occasional newsletters or promotions — only if you have opted in
We will never sell your personal data to third parties.
4. Legal Basis for Processing
Under UK GDPR, we process your data on the following grounds:
- Contract — to fulfil orders and bookings you have made with us
- Legitimate interests — to improve our services and communicate with you about your purchases
- Consent — for marketing emails, which you can withdraw at any time
5. Cookies
Our website uses essential cookies to keep your shopping cart working and to keep you logged in to your account. We may also use anonymous analytics cookies to understand how visitors use our site. You can disable cookies in your browser settings, although this may affect some functionality.
6. Third Parties
We use a small number of trusted third-party services to run our website:
- Payment processor — to handle payments securely (we never see or store your card details)
- Google Calendar — to manage nursery visit bookings
- Delivery couriers — your name and address are shared with our courier to fulfil orders
These services are bound by their own privacy policies and we share only the minimum data necessary.
7. How Long We Keep Your Data
We retain account and order information for as long as your account is active and for up to 7 years thereafter for legal and accounting purposes. You can request deletion of your account at any time (see below).
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate information
- Request deletion of your personal data
- Object to or restrict certain types of processing
- Withdraw your consent for marketing at any time
- Lodge a complaint with the ICO (ico.org.uk) if you believe we have mishandled your data
To exercise any of these rights, please contact us via our website.
9. Security
We take reasonable steps to protect your personal information from unauthorised access or disclosure. Our website uses HTTPS encryption for all data in transit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated to registered users by email. Continued use of our website after updates are posted constitutes acceptance.
11. Contact Us
If you have any questions about how we handle your data, please contact us through the form on our website or visit us at the nursery.