Spalding Farm Shop

Privacy & Cookies

Last updated 4 September 2026

Who we are

This website is operated by Spalding Farm Shop, Seasonal Plant and Gift Centre, Scoldhall Lane, Spalding, Lincolnshire, PE11 4BJ (“we”, “us”). For anything to do with your personal data, contact us at shop@spaldingfarmshop.co.uk.

What we collect, and why

We only collect what we need to serve you:

  • Quotes and orders — your name, email, phone number, and (for delivery or postal orders) your address, so we can put a quote together, take payment and get your plants to you.
  • Pre-orders — your name, email, phone number and what you’re waiting for, so we can let you know when it lands.
  • Gift vouchers — the buyer’s and recipient’s name and email, and any personal message you add, so we can issue and deliver the voucher.
  • Payment — card payments are handled entirely by Stripe. We never see or store your card details ourselves.

Who we share it with

We don’t sell your data. We use a small number of trusted service providers to run the site, who process data on our behalf:

  • Stripe — payment processing.
  • Resend — sending order, quote and voucher emails.
  • Cloudflare — hosting product photos.
  • postcodes.io — looking up a delivery postcode to calculate mileage and delivery pricing. Only the postcode you enter is sent, never your name or address.

We may also share your details with HMRC, our accountants, or law enforcement where we’re legally required to.

How long we keep it

We keep order and payment records for as long as UK tax law requires (currently 6 years). Pre-order waitlist entries and quote details not converted to an order are kept only as long as needed to serve you, and are cleared periodically after that.

Your rights

Under UK data protection law, you can ask us to:

  • Show you the personal data we hold about you
  • Correct anything that’s inaccurate
  • Delete your data, where we’re not required to keep it (e.g. for tax purposes)
  • Stop or restrict how we use it

Email shop@spaldingfarmshop.co.uk and we’ll sort it. If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO).

Cookies

This site keeps things simple — we only use cookies that are strictly necessary to make it work. We don’t use advertising or tracking cookies, and nothing here tracks you around the web.

CookiePurposeDuration
authjs.session-tokenKeeps staff signed in to the back officeSession
sfs_previewInternal staff preview toggle — not used for customers1 year

Because we only use strictly-necessary cookies, UK cookie rules don’t require us to ask for your consent before setting them — but we wanted to be upfront about exactly what’s here and why.

Changes to this policy

We’ll update this page if what we collect or how we use it changes — the date at the top always reflects the latest version.