Privacy policy

This policy explains what personal information The Plant Collector collects when you visit our nursery, shop with us online, join our mailing list or talk to us about a garden project, why we collect it, and the rights you have over it. We never sell your personal information.

Who we are

The Plant Collector Limited is a company registered in Ireland under number 720366, with its registered office at Stacumny, Celbridge, Co. Kildare, W23 HN6Y. We are the controller of the personal information described in this policy, under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

For any question about your personal information, or to use any of your rights, email info@theplantcollector.com with “Data protection” in the subject line, write to us at the address above, or call +353 1 437 0916.

What we collect and why

We collect information you give us directly: when you buy in the nursery or online, place an order by phone or email, open a trade account, book a consultation, fill in a project enquiry, join our mailing list, or contact us. We also collect some information automatically when you use our website, as explained under Cookies below.

The table sets out each purpose, the information involved, the legal basis we rely on, and how long we keep it.

Purpose	Information	Legal basis	How long we keep it
Taking, preparing, delivering and supporting your orders	Name, email, phone, delivery address and Eircode, what you bought, delivery notes and signed dockets	Performing our contract with you	Six years from the end of the financial year of the sale
Taking payment	Payment confirmation and the last four digits of your card. Full card details are handled by our payment providers, not stored by us	Performing our contract with you	Six years from the end of the financial year of the sale
Accounting and tax	Invoices, receipts and transaction records	Legal obligation under tax and company law	Six years from the end of the financial year
Garden project enquiries, consultations and Project Centre sessions	Contact details, property address, project type and timing, plans and photographs you share, and the name of any architect, designer or contractor you mention	Taking steps at your request before entering a contract	24 months from our last contact if no order follows; otherwise as for orders
Our mailing list and membership offer	Name, email, mobile, area or Eircode, purchases and preferences	Your consent, which you can withdraw at any time	Until you unsubscribe, or after 24 months with no purchase or email engagement
Emails to existing customers about similar products	Name and email	Our legitimate interest, as permitted by the ePrivacy Regulations, with an opt-out in every email	Until you opt out
Trade and designer accounts	Business contact details, account terms and account history	Performing our contract, and our legitimate interest in managing credit	Six years after the account closes
Customer service, complaints and guarantee claims	Your messages, photographs and our notes	Performing our contract, legal obligation, and our legitimate interest in resolving issues	Six years after the matter is closed
Running and improving our website	Device and browser details, IP address, pages visited	Strictly necessary cookies: our legitimate interest. Analytics and marketing cookies: your consent	As set out in our cookie banner and Cookie Policy
Keeping our nursery, customers and staff safe	CCTV images at the nursery	Our legitimate interest in security and safety	30 days, unless needed for an incident or claim

Where we rely on legitimate interests, we have weighed our interests against yours. You can ask us for details of that assessment, and you can object at any time.

If you apply for a job with us, a separate privacy notice for applicants explains how we handle your application.

Marketing

We send marketing emails and texts only to people who have chosen to receive them, or to existing customers about products similar to ones they have bought, with a clear way to opt out each time. Joining our mailing list is always a separate, unticked choice. Every email has an unsubscribe link, and you can also tell any member of staff or email us. Once you opt out, we keep a minimal record so that we do not contact you again.

When you tell us about a garden project and ask us to follow up, we contact you about that project only. We do not add you to our mailing list unless you also choose to join it.

We share personal information only where we need to, and only with the people and organisations below.

Companies in our group, including Outlook Gardens design and build and Outlook Gardens Maintenance Services, where your project needs their services or you ask to be introduced.

Service providers who handle information on our behalf and under our instructions. These include our e-commerce and in-store till platform (Shopify, which also processes our card payments), our customer relationship and email system (HubSpot), our stock and order system (WinTree), our accounting system (Xero), email, file storage and website analytics providers (including Google and Dropbox), delivery couriers, and IT support. Each is bound by a written data processing agreement.

Klarna, if you choose to pay with Klarna. Klarna uses your information as an independent controller under its own privacy notice.

An architect, designer or contractor you name, where you ask us to work with them on your project.

Our professional advisers, insurers and auditors, and public authorities such as the Revenue Commissioners, An Garda Síochána and the Department of Agriculture, Food and the Marine, where the law requires it.

Transfers outside the European Economic Area

Some of our service providers process information outside the European Economic Area, for example in the United States or Canada. Where they do, we make sure the transfer is protected by a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission’s standard contractual clauses. You can ask us for details.

Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies keep the website and checkout working and do not need your consent. We use analytics and marketing cookies only if you agree to them in our cookie banner, where rejecting is as easy as accepting. You can change your choice at any time using the Cookie settings link at the foot of every page. Our Cookie Policy lists each cookie, who sets it, what it does and how long it lasts.

When you follow or interact with our pages on Facebook, Instagram, LinkedIn, Pinterest or YouTube, those platforms process your information under their own privacy notices. For page statistics we receive from Meta, Meta and we are joint controllers.

Your rights

You have the right to ask for a copy of the personal information we hold about you, to have it corrected, to have it deleted, to restrict how we use it, and to receive it in a portable format. You have the right to object to our use of it where we rely on legitimate interests, and an absolute right to object to direct marketing. Where we rely on your consent, you can withdraw it at any time.

There is no charge. We may ask you to confirm your identity, and we will respond within one month. For complex requests the law allows up to two further months, and we will tell you if we need them. Some rights have legal limits. For example, we must keep invoices for six years even if you ask us to delete them, and we will explain any such limit.

We do not make decisions about you based solely on automated processing.

Complaints

If you are unhappy with how we have handled your information, please contact us first and we will try to put it right. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, at dataprotection.ie.

Keeping your information safe

We limit access to personal information to staff who need it, use secure, access-controlled systems, and train our team in data protection. If a breach occurs that is likely to put you at high risk, we will tell you and the Data Protection Commission as the law requires.

Children

Our online shop, mailing list and membership offer are for adults. We do not knowingly collect personal information from children under 16.

Changes to this policy

We will update this policy when our practices change. If a change materially affects how we use your information, we will tell you by email where we have your address.

Last updated 7 October 2026.