This policy explains what personal information Grown Local collects when you visit or buy from grownlocal.co.uk, why, who we share it with, how long we keep it and your rights. It’s also our cookie policy.
Who we are
Grown Local Scotland Ltd (company number SC646441), 5 Chisholm Terrace, Penicuik, EH26 0HF, is responsible for your information (the “controller”). We’re registered with the Information Commissioner’s Office. For anything about your information, email orders@grownlocal.co.uk.
What we collect
- Your orders: name, delivery and billing addresses, email address, phone number if you give one, what you bought and how you paid. Card details go straight to our payment providers; we never see or keep them.
- Your account, if you make one: your details and order history.
- Checkouts you don’t finish: if you type your email address at checkout but don’t complete the order, we keep what you entered and what was in your basket.
- Emails you sign up for: your first name and email address for the newsletter, and your email address for back-in-stock alerts.
- Reviews and surveys: your rating, words and first name, and your answers to growing surveys.
- Messages: what you send us by email or live chat.
- Your visit: technical information such as your IP address and browser, and, if you allow it in the cookie banner, how you use the site.
- Affiliates: if you join our affiliate programme, the details you give us to be paid.
Why we use it
- To take and send your orders, run your account and answer your questions (because we have a contract with you).
- To keep records the law requires, such as orders and payments for tax.
- To help you grow and to improve the shop (our legitimate interests): sowing reminders for seeds you’ve bought, our newsletter when you buy from us (unless you untick the box at checkout), growing surveys, asking you to review what you bought, reminding you about a checkout you didn’t finish (up to three emails), and stopping fraud and spam. You can stop any of these emails with the link in each one, and you can tick the box at checkout if you’d rather not get sowing reminders.
- With your consent: our newsletter if you sign up on the site, back-in-stock alerts, live chat, and the statistics and marketing cookies you allow. You can withdraw your consent at any time.
Who we share it with
We never sell your information. We share only what each service needs to do its job for us:
- Payments: Square (cards, Apple Pay and Google Pay) and Klarna, which may run its own checks and has its own privacy notice.
- Delivery: Royal Mail and Parcelforce, who get your name, address and contact details for tracking.
- Finding your address: Ideal Postcodes, which gets the postcode or address you type at checkout.
- Emails: Resend sends our order and account emails, and MailerLite sends our newsletter. Sowing reminders, surveys and review requests come from Seedhaus, our own customer system, which we run ourselves.
- Trustpilot: after some orders we invite you to review us on Trustpilot, which gets your name, email address and order number to do that.
- Keeping out bots: Cloudflare Turnstile checks that log-in, account and checkout forms are sent by a person, which means Cloudflare sees technical information about your browser and device.
- Live chat: Tawk.to runs our chat and keeps what you write in it.
- Statistics and adverts, only with your consent: Google (Analytics, and measuring our adverts and product listings), Meta (Facebook and Instagram), and WooCommerce Analytics by Automattic. Our product list is shared with Google and Meta, but that holds no personal information.
- Running the shop: our hosting provider, and backups of the site kept on our server and in Google Drive.
- The law: if we’re legally required to, for example by a court order.
Outside the UK
Some of these services handle information outside the UK, for example in the EU or the United States. When they do, it’s protected by the UK’s adequacy rules, the UK-US data bridge or the UK’s approved transfer contracts.
How long we keep it
- Orders and payment records: six years, as tax law requires.
- Your account: until you ask us to close it.
- Checkouts you don’t finish: 30 days.
- Newsletter: until you unsubscribe. Back-in-stock alerts: until we’ve emailed you or you cancel.
- Reviews: for as long as they’re shown on the site.
- Backups: replaced within about four weeks.
Your rights
You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, stop or limit using it, or send it to you or another company. You can object to any use based on our legitimate interests and stop marketing at any time. Email us and we’ll reply within a month.
If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Cookies
Cookies are small files a website stores in your browser. When you first visit, our cookie banner asks which kinds you allow, and you can change your choice at any time with the “Manage consent” button.
- Essential (always on): your basket and checkout, logging in to your account, Cloudflare’s check that you’re not a bot, and remembering your cookie choice.
- Statistics (if you allow them): Google Analytics and WooCommerce Analytics show us how the shop is used.
- Marketing (if you allow them): the Meta pixel and Google’s advert measurement, WooCommerce’s note with your order of how you found us (such as a search engine or an advert), the Tawk.to live chat button, and our affiliate programme’s cookie, which records which affiliate sent you, so they can be paid if you buy. With this consent, the shop also tells Meta directly about your visits and purchases (your email address is sent in scrambled form) to measure our adverts.
You can also block or delete cookies in your browser’s settings, though the basket and checkout need the essential ones.
Changes
We’ll update this policy when what we do changes. If the change is significant, we’ll say so on the site or email you.
Last updated 3 October 2026.