Privacy policy
Last updated: March 27, 2025
This Privacy Policy explains how Odd Leaf ("we," "us," or "our") collects, uses, and shares your personal information when you visit www.oddleaf.co.uk (the "Site"), purchase our rare houseplants, or interact with us (collectively, the "Services"). "You" refers to you as a customer, visitor, or individual whose data we process. We’re committed to transparency and protecting your privacy, so please read this carefully.
Changes to This Privacy Policy
We may update this policy to reflect changes in our practices, legal requirements, or operations. Updates will be posted on the Site with a revised "Last updated" date. We’ll notify you of significant changes as required by law.
How We Collect Your Personal Information
We collect personal information from various sources to provide and improve our Services. The data we collect depends on how you engage with us—whether you’re browsing, buying, or contacting us.
Information You Provide Directly
We collect information you give us, such as:
- Contact Details: Name, email, phone number, and address when you order or contact us.
- Order Information: Billing/shipping addresses, payment details, and order history.
- Account Information: Username, password, and security details if you create an account.
- Support Queries: Details you share when reaching out to us, e.g., via email or chat.
You can choose not to provide this information, but it may limit your ability to use certain features, like placing an order.
Information We Collect Automatically
We use cookies, pixels, and similar tools to gather Usage Data, including:
- Device Information: IP address, browser type, and device details.
- Browsing Behavior: Pages visited, time spent, and interactions with our Site.
- Tracking Technologies: We use Meta, TikTok, Pinterest, and Google Analytics tags to understand how you use our Site, improve your experience, and tailor ads. Our compliant cookie banner lets you opt in or out of these non-essential trackers. For more details, see our "Cookies and Tracking" section below.
Information from Third Parties
We may receive data from partners, such as:
- Payment Processors: Information like card details to process your orders (e.g., via Shopify Payments).
- Analytics Providers: Aggregated insights from Meta, TikTok, Pinterest, and Google Analytics to refine our marketing and Site performance.
- Conversion APIs: Server-to-server integrations with Meta, TikTok, and Pinterest to track purchases and optimize ads securely, reducing reliance on browser-based tracking.
How We Use Your Personal Information
We use your data to:
- Deliver Services: Process orders, ship plants, manage accounts, and handle returns (based on our contract with you).
- Communicate: Send order updates, respond to queries, and improve our Services (in our legitimate interest to support you).
- Market to You: Share promotions and personalized ads via email or social platforms, where you’ve consented or it’s in our legitimate interest to promote our rare houseplants.
- Analyze and Improve: Use Usage Data to enhance our Site and offerings (in our legitimate interest).
- Prevent Fraud: Detect and address suspicious activity (in our legitimate interest to protect our business).
Cookies and Tracking
We use cookies and tracking technologies to power our Site and understand your preferences. These include:
- Essential Cookies: Necessary for basic Site functions (e.g., cart management).
- Analytics Cookies: Google Analytics tracks Site usage to help us improve (e.g., which plants are popular).
- Marketing Cookies: Meta, TikTok, and Pinterest tags show you relevant ads based on your behavior.
Our cookie banner lets you choose which non-essential cookies to accept. You can change your preferences anytime via the banner or your browser settings, though blocking cookies may affect Site functionality.
Server to Server Integrations
Conversion APIs complement these tools by sending data directly from our servers to Meta, TikTok, and Pinterest, ensuring accurate tracking.
How We Share Your Personal Information
We share data only when necessary, including:
- Service Providers: With Shopify (our platform), payment processors, and shipping partners to fulfill orders.
- Marketing Partners: With Meta, TikTok, and Pinterest for ads, where you’ve consented via our cookie banner.
- Legal Obligations: If required by law or to protect our rights.
- Business Transfers: In case of a merger or sale, your data may be transferred with safeguards.
We’ve shared identifiers (e.g., email) and Usage Data with marketing partners in the past 12 months for advertising, but only with your consent.
Third-Party Privacy Policies
We work with these platforms, and their privacy policies provide more detail:
- Meta: Meta Privacy Policy
- TikTok: TikTok Privacy Policy
- Pinterest: Pinterest Privacy Policy
- Google Analytics: Google Privacy Policy
- Shopify: Shopify Privacy Policy
Your Rights
Under UK GDPR, you have rights to:
- Access: See what data we hold about you.
- Correct: Fix inaccurate information.
- Delete: Request data removal, subject to legal exceptions.
- Restrict: Limit how we process your data.
- Portability: Get your data in a usable format.
- Object: Opt out of marketing or other processing based on legitimate interests.
- Withdraw Consent: Revoke consent anytime (e.g., via our cookie banner).
To exercise these, email hello@oddleaf.co.uk. We’ll verify your identity and respond within one month, as required by law. You can also complain to the UK’s Information Commissioner’s Office (ICO) if unsatisfied.
Data Retention and Security
We keep your data only as long as needed—e.g., order details for 7 years to meet tax laws, or account data until you delete it.
International Transfers
Your data may be processed outside the UK (e.g., by Shopify in Canada or Meta in the US). We use Standard Contractual Clauses to ensure protection aligns with UK standards.
Contact Us
Questions or requests? Reach us at:
- Email: hello@oddleaf.co.uk
Odd Leaf is the data controller under UK GDPR.