Stillroot Botanics
StillrootBotanics

Privacy Policy

Last updated: 25 March 2026

Stillroot Botanics ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website at stillrootbotanics.com and make purchases from us.

1. Data Controller

Stillroot Botanics is the data controller responsible for your personal data. If you have any questions about this policy or your data, please contact us at hello@stillrootbotanics.com.

2. What Data We Collect

We may collect and process the following personal data:

  • Identity data: your name, as provided when placing an order or contacting us.
  • Contact data: your email address, delivery address, and phone number.
  • Transaction data: details of orders you place with us, including products purchased, order value, and payment confirmation.
  • Technical data: your IP address, browser type, operating system, and browsing actions on our site.
  • Marketing data: your preferences for receiving marketing communications and newsletter subscriptions.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders.
  • To communicate with you about your orders and respond to enquiries.
  • To send marketing emails if you have opted in to our newsletter.
  • To improve our website and customer experience.
  • To comply with legal obligations.

4. Cookies

Our website uses cookies to ensure the site functions correctly and to improve your experience. We use:

  • Essential cookies: required for the site to operate, including session and cart functionality.
  • Analytics cookies: to understand how visitors interact with our site so we can improve it.

You can manage cookie preferences through your browser settings.

5. Third-Party Services

We share data with the following third-party services as necessary:

  • Stripe: to process payments securely. Stripe may collect and process payment card data in accordance with their own privacy policy at stripe.com/privacy.
  • Google Fonts: we use Google Fonts to display typography on our site. Google may collect your IP address when fonts are loaded. See Google's Privacy Policy.
  • Royal Mail: to deliver your orders. We share your name and delivery address with Royal Mail for shipping purposes.

6. Your Rights Under GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

  • Right of access: you can request a copy of the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate or incomplete data.
  • Right to erasure: you can request that we delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing: you can ask us to suspend the processing of your data in certain circumstances.
  • Right to data portability: you can request a copy of your data in a structured, machine-readable format.
  • Right to object: you can object to the processing of your data for direct marketing purposes.
  • Right to withdraw consent: where we rely on your consent to process data, you may withdraw it at any time.

To exercise any of these rights, please email us at hello@stillrootbotanics.com.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Order data is typically retained for 6 years in accordance with HMRC requirements.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. All payment processing is handled securely by Stripe and we do not store your payment card details on our servers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.