Privacy & Cookie Policy

1. Data Controller Information

Verdant Botanics Ltd is the designated Data Controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration reference ZB598214.

If you have questions about how your data is handled or wish to exercise your statutory data subject rights, please contact our Data Protection Officer at support@verdantbotanics.shop or write to our registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

2. Personal Data We Collect

We only collect personal information strictly necessary to fulfill your orders and provide customer support:

• Identity Data: First name, last name, and title.
• Contact Data: UK delivery address, billing address, email address, and telephone number.
• Transaction Data: Details of products ordered, order totals, and payment confirmation tokens (we do not store raw card numbers on our servers).
• Technical Data: IP address, browser type, and operating system collected for security verification and fraud prevention.

3. Legal Bases for Processing

Under the UK GDPR, we process personal information on the following lawful grounds:

• Contractual Performance: To process, pack, and deliver your supplement orders via Royal Mail or DPD, and communicate order tracking updates.
• Legal Obligation: To maintain accurate tax and accounting records as mandated by HM Revenue & Customs (HMRC).
• Legitimate Interests: To detect fraudulent transactions and optimize our store security and browsing experience.

4. Third-Party Data Disclosures

We never sell, rent, or trade your personal data to external marketing companies. Your information is only shared with trusted service providers necessary for order fulfillment:

• Postal Carriers: Royal Mail Group plc and DPD UK to fulfill parcel delivery and SMS tracking.
• Payment Gateways: PCI-DSS Level 1 certified processors to process encrypted payments securely.
• Cloud Infrastructure: Secure UK and EU-hosted server environments with 256-bit encryption.

5. Cookie Policy

Our website utilizes necessary cookies to maintain your shopping basket state and session security across page visits. We do not deploy invasive third-party cross-site tracking cookies without prior explicit consent.

6. Your UK GDPR Statutory Rights

As a UK resident, you have the following rights under UK data protection legislation:

• The right to access a copy of the personal data we hold about you.
• The right to rectify inaccurate or incomplete personal records.
• The right to request erasure (“Right to be Forgotten”) subject to HMRC statutory record-keeping periods.
• The right to object to or restrict processing of your data.
• The right to lodge a formal complaint with the Information Commissioner's Office (ICO) at ico.org.uk.