Privacy Policy

Last updated: 19 June 2026

This privacy policy explains how From My Mother’s Garden Ltd collects, uses, stores and protects personal information when you use our website, place an order, contact us, sign up to our mailing list, visit us, or otherwise interact with us.
For the purposes of this policy, “we”, “us” and “our” means From My Mother’s Garden Ltd.

We are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and the Data (Use and Access) Act 2025.

1. Who is responsible for your personal information?

From My Mother’s Garden Ltd is the controller of the personal information we collect and use.

Contact details

From My Mother’s Garden Ltd

Responsible person: Penny Callaghan
Email: info@frommymothersgarden.co.uk

Telephone: +44 (0) 1308 426517

Please use these details if you have any questions about this policy, wish to exercise your data protection rights, or wish to make a data protection complaint.

2. What personal information we collect

We may collect and use the following types of personal information:

• your name;
• billing and delivery address;
• email address;
• telephone number;
• order details and purchase history;
• payment confirmation details, although we do not store full card details;
• information you provide when you contact us;
• marketing preferences;
• survey, feedback or review responses;
• website usage information, such as pages visited, device information, browser type and cookie preferences;
• any other information you choose to provide to us.

We do not intentionally collect special category personal data, such as health information, biometric data, racial or ethnic origin, religious beliefs, or political opinions.

3. How we collect your personal information

We may collect personal information when you:

• place an order through our website;
• contact us by email, telephone, post, social media or through our website;
• sign up to our mailing list;
  complete a form, survey or review;
• interact with us on social media;
• visit or browse our website;
  buy from us in person, where relevant;
• enter a competition, promotion, workshop or event.

Some information may be collected automatically when you use our website, including through cookies and similar technologies.

4. Why we use your personal information

We use your personal information for the following purposes:

To process and fulfil orders

We use your information to process your order, take payment, arrange delivery or collection, provide order confirmations, handle returns and respond to order-related queries.
Lawful basis: contract.

To provide customer service

We use your information to respond to enquiries, complaints, feedback and requests.

Lawful basis: contract, legitimate interests, or legal obligation, depending on the nature of the request.

To send marketing communications

If you have signed up to receive marketing from us, or where we are otherwise permitted to do so under applicable law, we may send you information about our products, offers, events, news and services.

You can unsubscribe at any time by clicking the unsubscribe link in our emails, or by contacting us using the details above.

Lawful basis: consent or legitimate interests, where applicable.
Electronic marketing rules: we comply with the Privacy and Electronic Communications Regulations.

To improve our website, products and services

We may use customer feedback, order trends and website analytics to improve our website, product range, customer experience and business operations.

Lawful basis: legitimate interests.

To keep business records

We keep records for accounting, tax, legal, insurance and administrative purposes.

Lawful basis: legal obligation and legitimate interests.

To prevent fraud and keep our website secure

We may use information to protect our website, business, customers and systems from fraud, misuse, unauthorised access or other security issues.

Lawful basis: legitimate interests and legal obligation.

To comply with legal requests

We may disclose information where required by law, court order, law enforcement, government authority, regulator or statutory body.

Lawful basis: legal obligation.

5. Payment information

We do not store full credit or debit card details.

Payments are processed securely by our payment service providers. They may process your payment information in accordance with their own privacy policies and legal obligations.

6. Who we share personal information with

We do not sell your personal information.

We may share personal information only where necessary with trusted service providers and partners who help us operate our business, including:

• payment processors;
• delivery and courier providers;
• website hosting and e-commerce platform providers;
• email marketing service providers;
• IT, security and website support providers;
• analytics providers, where cookies or similar technologies are used;
  accountants, insurers, professional advisers and legal advisers;
• regulators, public authorities, courts or law enforcement where required.

Where we use service providers, we require them to protect your personal information and only use it for the purposes we have instructed.

7. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where this happens, we will take appropriate steps to ensure your personal information receives a level of protection that is equivalent to UK data protection requirements. This may include using adequacy regulations, approved contractual safeguards, or other lawful transfer mechanisms.

8. How long we keep your personal information

We only keep personal information for as long as necessary for the purposes for which it was collected.

As a general guide:

• order and transaction records are usually kept for up to 6 years for tax, accounting and legal purposes;
• marketing records are kept until you unsubscribe or ask us to remove you, unless we need to keep limited suppression records to make sure we do not contact you again;
  customer service correspondence is kept for as long as needed to manage your enquiry and maintain appropriate business records;
• cookie and analytics information is kept in accordance with the retention periods set out in our cookie tools or analytics settings.
• We may keep information for longer where required by law, where there is a dispute, or where we need to protect our legal rights.

9. Marketing

We may contact you with marketing information about our own products, offers, events and services.

We will only send electronic marketing where we have your consent or where we are permitted to do so under applicable law, such as where you have bought from us and have not opted out of receiving similar product or service updates.

You can opt out of marketing at any time by:

• clicking the unsubscribe link in any marketing email;
• contacting us using the details in this policy.

We will not sell your personal information to third parties for their own marketing purposes.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• make the website work properly;
• remember your preferences;
• understand how visitors use our website;
• improve our website and services;
• support marketing or advertising, where applicable.

Some cookies are necessary for the website to function and cannot usually be switched off. Other cookies, such as analytics or advertising cookies, will only be used where legally permitted and, where required, with your consent.

You can usually manage cookies through our cookie banner or settings tool, and through your browser settings. Blocking some cookies may affect how the website works.

For more information, please see our Cookie Policy, if available.

11. Analytics, profiling and advertising

We may use analytics tools to understand how people use our website, such as which pages are visited and how customers interact with our products.

Where we use profiling or advertising technologies, we will do so in accordance with applicable law and cookie consent requirements. This may include using limited website browsing information to understand customer interests or to show relevant advertising.

We do not use personal information to make decisions that have legal or similarly significant effects on you without human involvement.

12. Security

We are committed to keeping your personal information secure.

We use appropriate physical, technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include secure systems, restricted access, password protection, supplier checks and staff awareness.

No website or online transmission is completely secure, but we take reasonable steps to protect the information we hold.

13. Links to other websites

Our website may contain links to other websites.

Once you leave our website, we are not responsible for the privacy practices, security or content of those other websites. You should read the privacy policy of any website you visit.

14. Your data protection rights

You have rights under UK data protection law. These may include the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your personal information;
• ask us to restrict how we use your information;
• object to certain uses of your information;
• withdraw consent, where we rely on consent;
• ask for your information to be transferred to you or another organisation, where applicable;
• complain about how we handle your personal information.

These rights are not absolute and may depend on the circumstances.

To exercise your rights, please contact us using the details in this policy. We may need to confirm your identity before responding.

15. Data protection complaints

If you have a concern or complaint about how we collect, use, store or protect your personal information, please contact us using the details in this policy.

We will:

• provide a clear way for you to make a data protection complaint;
• acknowledge your complaint within 30 days;
• consider the complaint fairly and without undue delay;
• keep you informed about progress where appropriate;
• tell you the outcome of your complaint.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection matters.

Information Commissioner’s Office

Website: www.ico.org.uk

Telephone: 0303 123 1113

We would, however, appreciate the opportunity to deal with your concern first.

16. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our business, website, legal requirements or data protection practices.

The latest version will be posted on our website with the date it was last updated.

17. Contact us

For questions about this policy, your personal information, your rights, or a data protection complaint, please contact:

From My Mother’s Garden Ltd

Responsible person: Penny Callaghan

Email: info@frommymothersgarden.co.uk

Telephone: +44 (0) 1308 426517