Privacy policy
Last updated: July 8, 2026 10:26
Privacy Policy
Wild Gardens operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Wild Gardens is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
Who We Are (Data Controller)
For the purposes of the UK GDPR, the EU GDPR and other applicable data protection laws, the controller of your personal information is:
Wild Gardens, a trading brand of Wildflower Turf Limited (Company Registration No. 07724908), Ashe Warren Farm, Overton, Basingstoke, Hampshire, RG25 3AW, United Kingdom.
Personal Information We Collect or Process
When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so it cannot be linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process the following categories, including inferences drawn from them:
- Contact details including your name, address, billing address, shipping address, phone number, and email address.
- Financial information including payment card information, transaction details, form of payment, and payment confirmation. Card payments are processed by Shopify Payments and/or our payment providers; we do not store full card numbers on our systems.
- Account information including your username, password, security questions, preferences and settings.
- Transaction information including items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions.
- Communications with us including the information you include when you contact us, for example a customer support enquiry or a product review.
- Device information including information about your device, browser or network connection, your IP address, and other unique identifiers.
- Usage information including how and when you interact with or navigate the Services.
Personal Information Sources
We may collect personal information from the following sources:
- Directly from you — when you create an account, use the Services, communicate with us, or otherwise provide your information;
- Automatically through the Services — from your device when you use our products or visit our websites, and through cookies and similar technologies;
- From our service providers — when they collect or process your information on our behalf;
- From our partners or other third parties.
How We Use Your Personal Information
Depending on how you interact with us and which Services you use, we may use personal information to:
- Provide, tailor and improve the Services — to perform our contract with you, process payments, fulfil and ship orders, manage returns and exchanges, maintain your account, enable reviews, remember your preferences, recommend products, and improve the Services.
- Market and advertise — to send marketing and promotional communications by email, text message or post, and to show you online advertisements, including based on items you previously viewed or purchased.
- Ensure security and prevent fraud — to authenticate your account, provide a secure payment and shopping experience, and detect, investigate or act on possible fraudulent, illegal, unsafe or malicious activity.
- Communicate with you — to provide customer support, respond to you, and maintain our business relationship.
- Comply with legal obligations — to meet applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.
Legal Bases for Processing
Where the UK GDPR or EU GDPR applies, we rely on the following legal bases (Article 6). More than one basis may apply to a given activity:
- Performance of a contract — to process and fulfil your orders, manage your account, and provide the Services you request.
- Legitimate interests — to run, secure, analyse and improve our business, prevent fraud, and carry out certain marketing, where these interests are not overridden by your rights and freedoms.
- Consent — for certain marketing communications and for non-essential cookies and similar technologies. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Legal obligation — to comply with our legal and regulatory duties, for example tax and accounting requirements.
Cookies and Similar Technologies
We and our service providers use cookies, pixels, tags and similar technologies to operate the Services, remember your preferences, analyse usage, and support advertising. Strictly necessary cookies are always active because they are required to run the site. For all other categories — preferences, statistics and marketing — we ask for your consent through our cookie banner, and you can change or withdraw your choices at any time.
You can also control cookies through your browser settings. If you disable certain cookies, some features of the Services may not work properly.
Marketing Communications
We may send you marketing about our products and offers where we are permitted to do so. Where consent is required, we use a double opt-in process and only send marketing to subscribers who have confirmed their subscription. Every marketing message includes an unsubscribe link, and you can opt out at any time. If you opt out of marketing, we may still send you non-promotional messages about your account or orders.
How We Disclose Personal Information
In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy, including:
- With Shopify and other vendors who perform services on our behalf (for example IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping);
- With business and marketing partners to provide marketing and advertising services. These partners use your information in accordance with their own privacy notices, and depending on where you live you may have a right to opt out of certain sharing for targeted advertising;
- When you direct, request or consent to disclosure to a third party, such as to ship your order or through social media or login integrations;
- With our affiliates and others within our corporate group;
- In connection with a business transaction (such as a merger or insolvency), to comply with legal obligations, to enforce our terms, and to protect our rights and the rights of our users or others.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit may be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside. We also use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants and Shopify; for those features Shopify is responsible for the processing, including responding to your rights requests. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Our Brands
Wild Gardens is one of several brands operated by Wildflower Turf Limited, which also trades as Wildflower Co (wildflowerexperts.com). Wildflower Turf Limited is the single legal entity responsible for your personal information across these brands, and we may use your information across our brands for the purposes described in this Privacy Policy, including administration, fulfilment, customer service and improving our products and services.
Third-Party Websites and Links
The Services may link to websites or platforms operated by third parties. If you follow those links, you should review their privacy and security policies. We are not responsible for the privacy or security of those sites, or the accuracy of information found on them. Information you share on public or third-party platforms may be viewable by others. Our inclusion of a link does not imply endorsement.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with their information, please contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) the personal information of individuals under 16.
Security and Retention of Your Information
No security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Information you send us may not be secure in transit, so we recommend you do not use unsecure channels to send sensitive information.How long we keep your personal information depends on why we hold it. As a general guide: we keep order and transaction records for six years after the relevant tax year to meet UK tax and accounting requirements; we keep account information for as long as your account remains active and for a reasonable period afterwards; we keep marketing consents and preferences until you withdraw or change them, and review inactive marketing contacts periodically; and we keep customer service correspondence for a limited period after your query is resolved. Where we no longer need personal information, we securely delete or anonymise it. We may keep information for longer where we are required to do so by law or to establish, exercise or defend legal claims.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.
- Right to access / know — to request access to the personal information we hold about you.
- Right to delete — to request that we delete personal information we hold about you.
- Right to correct — to request that we correct inaccurate personal information.
- Right to portability — to receive a copy of your personal information and, in certain cases, have it transferred to a third party.
- Managing communication preferences — to opt out of marketing at any time using the unsubscribe link; we may still send non-promotional account or order messages.
If you are in the UK or the European Economic Area, you may also, subject to local law:
- Object to or restrict processing — ask us to stop or restrict processing for certain purposes.
- Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing.
You may exercise these rights where indicated on the Services or by contacting us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, and you may use an authorised agent (with proof of authorisation). We will respond within the time required by applicable law.
Your Privacy Choices (Targeted Advertising)
We, or our advertising partners, may use cookies and similar technologies to show you targeted advertising based on your activity across different websites and merchants. Depending on where you live, you may have the right to opt out of this activity — sometimes described as an opt-out of the “sale” or “sharing” of personal information or of “targeted advertising.” You can exercise this choice through our cookie preferences and, where offered, a “Your Privacy Choices” control on the Services.
Complaints
If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or to lodge a complaint with your local data protection authority. In the UK, that authority is the Information Commissioner’s Office (ICO). In the EEA, you can find the relevant supervisory authorities via the European Data Protection Board.
International Transfers
We may transfer, store and process your personal information outside the country you live in. If we transfer personal information out of the UK or the European Economic Area, we rely on recognised transfer mechanisms such as the UK International Data Transfer Agreement / Addendum or the European Commission’s Standard Contractual Clauses, unless the transfer is to a country that has been determined to provide an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised policy on this website, update the “Last updated” date, and provide notice as required by applicable law.
Contact
If you have any questions about our privacy practices or this Privacy Policy, or would like to exercise your rights, you can contact us at hello@wildgardens.uk, or write to us at Wild Gardens, Ashe Warren Farm, Overton, Basingstoke, Hampshire, RG25 3AW, United Kingdom. For the purposes of applicable data protection law, we are the data controller of your personal information.