Who we are
GardensSorted provides subscription garden care services in Yorkshire. For data protection queries, contact hello@gardenssorted.co.uk.
Information we collect
- Account details — name, email address, phone number, and login credentials (passwords are stored hashed, never in plain text).
- Property information — address, postcode, garden size, access notes, and visit preferences.
- Subscription and billing — plan choice, visit history, and payment status. Card details are processed by Stripe; we do not store full card numbers on our servers.
- Communications — support chat messages, emails, and SMS where you have opted in or we need to notify you about a visit.
- Technical data — basic logs from our website and API (IP address, browser type, pages viewed) to keep the service secure and reliable.
How we use your information
We use personal data to:
- Provide and manage your subscription and scheduled garden visits
- Match you with approved local gardeners and coordinate dispatch
- Process payments and send billing-related communications
- Respond to support requests and resolve escalations
- Improve our service and prevent fraud or misuse
- Comply with legal and accounting obligations
Legal basis (UK GDPR)
We process personal data where:
- It is necessary to perform our contract with you (providing the subscription service)
- We have a legitimate interest (e.g. service improvement, security) that is not overridden by your rights
- You have given consent (e.g. optional marketing, where applicable)
- We have a legal obligation to retain or disclose information
Who we share data with
We use trusted processors to run the platform, including:
- Stripe — payment processing and customer billing portal
- SendGrid — transactional email
- Hosting providers — Vercel (website) and Railway (API/database)
- Approved gardeners — only the information needed to complete a visit (address, access notes, schedule)
We do not sell your personal data.
Cookies and local storage
When you log in, we store a session token in your browser (local storage) and set short-lived cookies so our website can keep you signed in and route you to the correct portal. These are essential for the service to work.
How long we keep data
We retain account and subscription records while you are a customer and for a reasonable period afterwards for support, disputes, and legal requirements. You can ask us to delete data where we are not required to keep it.
Your rights
Under UK data protection law you can request:
- Access to the personal data we hold about you
- Correction of inaccurate data
- Erasure in certain circumstances
- Restriction or objection to processing in certain circumstances
- Data portability where applicable
To exercise these rights, email hello@gardenssorted.co.uk. You may also complain to the ICO (ico.org.uk).
Changes
We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do.