Sill — preview

Last updated 1 August 2026 · Sill

What we collect

Only what an order actually needs, plus what you volunteer.

To deliver an order: name, phone number, delivery address, email

To take payment: the amount, the method and a reference. Card numbers never touch our server, the gateway handles them

If you make an account: your password as a hash, your saved addresses, the plants you bought, anything you saved for later

If you enable reminders: which room each plant lives in and how much light you said it gets

Automatically: a session cookie, and aggregate page counts with no personal identifier attached

Why we use it

To get the plant to your door, to honour the warranty without asking you for a receipt, and to send the watering reminder you asked for. That is the whole list.

We do not build advertising profiles, we do not run third-party trackers on this site, and we have never sold a customer list. If that changes, it will be announced here before it happens, not after.

Who else sees it

The delivery rider: your name, address and phone number, for that delivery only

The payment gateway: the amount and reference, so it can match your transfer

Our email provider: your email address, to send order and reminder messages

The tax authority: invoice records, where the law requires it

Nobody else. No analytics broker, no advertising network, no data enrichment service.

How long we keep it

Account details: until you close the account, then deleted within seven days

Order and invoice records: as long as tax law requires

Delivery notes and driver messages: 90 days

Marketing consent: until you withdraw it, and the withdrawal itself is logged

Your rights

You can ask us to show you everything we hold about you, correct it, or delete it. Account holders can do the first and third from account details without asking anyone. Everyone else can email or message the shop and we do it by hand.

We answer within seven working days. There is no fee, and we do not ask why.

Cookies

Three, and they are all functional:

A session cookie that keeps your basket between page loads

A preference cookie remembering whether you dismissed the delivery notice

A sign-in cookie, only if you tick remember this device

No advertising cookies, which is why this site never shows you a consent wall.

Security

Everything runs over HTTPS. Passwords are hashed with a modern algorithm and salted per account. Staff access to order data is limited to the people packing and delivering, and every lookup is logged.

If a breach ever affects your data, we will tell you directly and quickly, with what happened and what to do, rather than burying it in a notice on this page.

Contacting us about privacy

Email hello@example.com with the subject line "privacy", or ask in the shop. The person who answers is the same person who runs the shop, not a ticket queue.

Privacy