Privacy Policy

Last updated: 24 October 2026

Your privacy matters to me. This policy explains, in plain English, what information WRJ Snowdrops collects when you visit this website, buy from me or sign up to my emails, how it is kept safe, and your rights. WRJ Snowdrops is the data controller for your information under UK data protection law (UK GDPR and the Data Protection Act 2018).

The short version

I only collect what I need to send you your plants and, if you choose, to keep you updated by email.
Your details are never sold, rented or shared with anyone for their own use.
My emails are occasional and useful, never spam, and you can unsubscribe at any time with one click.
Your information is stored securely by Shopify, the platform this shop runs on.

What information I collect

Order details: your name, delivery and billing address, email address, phone number (if you give one) and what you ordered.
Payment information: payments are processed securely by Shopify and its payment partners. I never see or store your full card details.
Email sign-ups: your email address, if you choose to subscribe, either at checkout or using a sign-up box on this website.
Messages: anything you send me through the contact form or by email.
Website usage: information collected by cookies, such as your device, browser and pages visited. See 'Cookies' below.

My emails

If you sign up, I'll send you occasional emails to let you know:

when new snowdrops and plants are coming up for sale
when I publish a new blog post
when anything interesting or important is happening, such as Cheshire Snowdrop Day

That's it. I won't bombard you, and I'll never pass your email address on to anyone else. You'll only receive emails if you have chosen to sign up, and every email includes an unsubscribe link, so you can stop them at any time with one click. You can also ask me to remove you by getting in touch. Unsubscribing won't affect any orders you have placed.

How and why I use your information

To fulfil your order, including delivery and contacting you about it. (Lawful basis: performance of a contract.)
To keep records I'm required to keep, such as sales records for tax and Plant Passport traceability records required by Defra. (Lawful basis: legal obligation.)
To send you my emails, only if you have subscribed. (Lawful basis: consent, which you can withdraw at any time.)
To keep the website secure and working well. (Lawful basis: legitimate interests.)

Where your information is stored

This shop runs on Shopify, which securely stores and processes your information on my behalf as my data processor. This includes your order details, your account (if you create one) and your email subscription. Shopify only uses this information to provide its service to me, under a data processing agreement that meets UK GDPR requirements.

Shopify stores data on secure servers which may be located outside the UK. Where this happens, your information is protected by recognised legal safeguards, such as UK-approved contract terms.

Keeping your information secure

All information you send through this website and checkout is encrypted (HTTPS/TLS).
Payments are handled by Shopify's checkout, which meets the PCI DSS Level 1 standard, the highest level of card payment security. I never see your full card details.
Only I can access your information, and my Shopify account is protected by a strong password and two-step verification.
I only keep your information for as long as it's needed (see below).

Who sees your information

Your information will never be sold, rented or shared with anyone for their own marketing or any other use. The only people who handle any of it are the services needed to run the shop and get your plants to you:

Shopify, which hosts the shop and stores your information securely, and its payment partners, to take payment.
Royal Mail, which receives your name and delivery address, only so it can deliver your parcel.

I would only ever disclose information to anyone else if I were required to by law.

How long I keep it

Order and sales records: up to 6 years, as required for tax purposes.
Plant Passport records: at least 3 years, as required by plant health rules.
Email subscriptions: until you unsubscribe.
Messages: only as long as needed to deal with your enquiry.

Cookies

This website uses cookies, which are needed for things like your basket and checkout to work. Shopify may also use cookies for analytics. Where consent is required, you'll be asked for it, and you can change your choice at any time.

Your rights

You have the right to:

ask for a copy of the information I hold about you
ask me to correct anything that's wrong
ask me to delete your information (unless I have to keep it by law)
object to, or ask me to restrict, how I use it
receive your information in a portable format
withdraw your consent at any time, for example by unsubscribing from my emails

To use any of these rights, just get in touch using the details below. I'll respond within one month.

Complaints

If you're unhappy with how your information has been handled, please contact me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Contact

For any questions about this policy or your information, please use the contact page or email wrj23@yahoo.com.

Shopify also processes some information as an independent controller for its own services, such as fraud prevention. You can read more in the Shopify Consumer Privacy Policy.