Privacy Policy

The purpose of this Privacy Policy is to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. It will also outline your rights with respect to the data that we collect.

Personal data means any information relating to an identified or identifiable natural person (you, the 'data subject') by us (the 'data controller') or any other third party. An identifiable natural person, as defined by the EU General Data Protection Regulation (GDPR) is "one who can be identified, directly or indirectly, such as by a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person".

A cookie is a small piece of data that a website stores on your device when you visit it. A cookie typically contains information about the website itself, a unique identifier that allows the site to recognise your web browser when you return, additional data that serves the purpose of the cookie, and the lifespan of the cookie itself.

Cookies are used to enable certain features (e.g. logging in), to track site usage (e.g. analytics), to store your user settings (e.g. timezone, notification preferences), and to personalise your content (e.g. advertising, language).

We use essential cookies to remember your preferences when you visit our site, and store information such as what is in a shopping basket.

We use non-essential cookies to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. You can opt in or out of these non-essential cookies if you wish.

This website collects and uses personal information for the following reasons:

When you make an online purchase you are directed to Stripe, a Third Party payment platform. Thallo Plants Ltd is informed of your contact details for the purpose of dispatch but has no access to payment details.

Should you choose to contact us using the contact forms on our website, or an email, none of the data that you supply will be stored by this website or passed on / be processed elsewhere. Instead, the data will be collated into an email and sent to us. We will then only use this data to contact you with regards to your enquiry.

Hyper Text Transfer Protocol Secure (HTTPS) ensures an encrypted connection between your browser and our website or form, however we would suggest that you always consider email as an insecure medium and not include personal, confidential or otherwise sensitive information within an email.

The personal data regarding your order, such as name, email, address and phone number (we do not have access to ANY payment information) is stored on our database and is password protected. We are required by UK tax law to store personal data relating to your order for 6 years. After this time we shall delete your personal data from our database.

This privacy notice does not cover the links within this site linking to other websites. Those sites are not governed by this Privacy Policy, and if you have questions about how a site uses your information, you'll need to check that site's own privacy statement.

It is your legal right to request, at any time, to view, amend or remove any of the personal data we hold on you. Simply email us at information@thalloplants.co.uk with your request.

The data controller of this website is:

Thallo Plants Ltd

Our address is:
17 High Street, 8 Roydon Mews
Roydon
Essex, CM19 5EA

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.