How We Handle Your Data

This Privacy Policy explains how Fresh Coast Seed Co UK (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website, place an order, or create a membership account. This policy is designed in accordance with UK data protection law and the UK GDPR.

1. Who we are

Fresh Coast Seed Co UK operates as the United Kingdom division of Fresh Coast Seed Co. All seeds are sold as collectible, novelty, or souvenir items. For privacy matters, we act as the “data controller” for the personal data you provide through this website.

2. What data we collect

We only collect the information necessary to process your orders, manage your membership, and operate this website. This may include:

• Account details: name, email address, login information.
• Order information: billing details, shipping details (where applicable), items ordered.
• Payment information: processed securely by third‑party providers; we do not store full card numbers.
• Technical data: IP address, device/browser information, and essential cookies.

3. What we do not do

• We do not sell your data.
• We do not share your data with third parties for their own marketing.
• We do not collect more data than necessary.

4. How and why we use your data

We use your personal data only where we have a lawful basis to do so:

• To process and fulfil orders (contractual necessity).
• To manage your membership account (contractual necessity).
• To communicate about orders or account issues (contractual necessity / legitimate interests).
• To maintain and improve our website (legitimate interests).
• To comply with legal obligations (tax, accounting, regulatory).

5. How long we keep your data

We retain data only as long as necessary:

• Order records for legally required periods.
• Membership data while your account is active or until deletion is requested.

6. Cookies and analytics

We use essential cookies for site functionality and basic analytics. Where required, we will request consent for non‑essential cookies.

7. Third‑party services

Trusted third‑party providers may process payments, host the website, or send transactional emails. They only receive the data necessary to perform their services.

8. Your rights under UK GDPR

You may have the right to:

• Access your personal data.
• Request corrections.
• Request deletion (where applicable).
• Object to or restrict processing.
• Request data portability.

To exercise these rights, contact us at [email protected] .

9. Data security

We take reasonable technical and organizational measures to protect your data. No system is completely secure, but we work to ensure your information is handled responsibly.

10. International transfers

Some technical services may operate outside the UK. Where transfers occur, we aim to ensure appropriate safeguards consistent with UK GDPR.

11. Contact for privacy questions

For privacy‑related inquiries:
📧 [email protected]

12. Changes to this policy — Last Updated 03.11.2026

We may update this Privacy Policy to reflect changes in law or services. Updates will be reflected in the “last updated” date.