Legal
Privacy Policy
We respect your privacy and are committed to protecting your personal data. This policy explains clearly what we collect, how we use it, and your rights.
Last updated: March 2026Who We Are
Variegated Plant Shop is an online retailer of rare and collector-quality variegated plants, based at 501 Joyce Lane, New Baden, Illinois 62265, United States.
We operate the website variegatedplantshop.com and are the data controller responsible for your personal information collected through our site and during the course of our business operations.
If you have any questions about how we handle your data, you can reach us at sales@variegatedplantshop.com or by calling (408) 707-3517.
What Personal Data We Collect
We collect personal data in the following ways — when you place an order, create an account, contact us, or browse our website:
| Type of Data | What This Includes | When Collected |
|---|---|---|
| Identity Data | Your name | When you place an order or contact us |
| Contact Data | Email address, phone number | At checkout or when you contact us |
| Delivery Data | Shipping address, country, postal code | When you place an order |
| Transaction Data | Order details, products purchased, payment confirmation | When you complete a purchase |
| Technical Data | IP address, browser type, device type, pages visited | Automatically when you visit our website |
| Communications Data | Messages you send us via email, contact form, or social media | When you contact us directly |
| Marketing Data | Your preferences for receiving marketing from us | When you opt in or out of marketing |
We do not store your full payment card details. Payments are processed securely through our payment provider. We only retain a confirmation of the transaction.
How We Use Your Data
We use your personal data only for legitimate business purposes. Here is how and why:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process and fulfil your order | Identity, Contact, Delivery, Transaction | Contract performance |
| Send order confirmation and tracking updates | Contact, Transaction | Contract performance |
| Handle refund or damage claims | Identity, Contact, Transaction | Contract performance / Legal obligation |
| Respond to your enquiries and support requests | Identity, Contact, Communications | Legitimate interests |
| Improve our website and customer experience | Technical Data | Legitimate interests |
| Send marketing emails (if opted in) | Contact, Marketing | Consent |
| Comply with legal and regulatory obligations | All relevant data | Legal obligation |
We will only send you marketing emails if you have given us your consent to do so. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly at sales@variegatedplantshop.com.
Who We Share Your Data With
We do not sell, rent, or trade your personal data to third parties. We share your data only where necessary to fulfil your order or operate our business:
- Shipping couriers — to deliver your order (name and delivery address only)
- Payment processors — to securely handle your payment transaction
- Website platform and hosting providers — WordPress/WooCommerce infrastructure to run our store
- Email service providers — to send order confirmations and communications
- Legal or regulatory authorities — if required by law or to protect our legal rights
All third parties we work with are required to handle your data securely and in accordance with applicable privacy laws. They are not permitted to use your data for their own purposes.
Cookies & Tracking
Our website uses cookies — small text files stored on your device — to help the site function correctly and improve your experience. We use the following types of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for the site to function — shopping cart, checkout, login sessions | No — site won't work without these |
| Analytics | Help us understand how visitors use our site so we can improve it | Yes — via cookie settings |
| Marketing | Used to show relevant ads on platforms like Google and Facebook | Yes — via cookie settings |
| Functional | Remember your preferences such as currency and language | Yes — via cookie settings |
You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect how parts of our website function.
International Data Transfers
Variegated Plant Shop is based in the United States and ships worldwide. If you are located outside the US — including in the UK, Europe, Canada, or elsewhere — your personal data will be transferred to and processed in the United States.
We take appropriate steps to ensure that any international transfer of your personal data is handled securely and in compliance with applicable data protection laws, including through the use of standard contractual clauses or equivalent safeguards where required.
If you are located in the European Union or United Kingdom, you have additional rights under the GDPR and UK GDPR respectively. These are detailed in the "Your Rights" section below. By placing an order with us, you acknowledge that your data will be transferred to the United States for processing.
How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (for tax and accounting purposes) |
| Customer account information | Duration of account + 2 years after last activity |
| Marketing preferences | Until you unsubscribe or withdraw consent |
| Customer support communications | 3 years from last interaction |
| Website analytics data | 26 months (standard analytics retention) |
When your data is no longer required, we will securely delete or anonymise it.
Your Privacy Rights
Depending on where you are located, you may have the following rights regarding your personal data. We will respond to any request within 30 days.
Right to Access
Request a copy of the personal data we hold about you and how we use it.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request that we delete your personal data where there is no longer a lawful reason to hold it.
Right to Restriction
Ask us to pause processing your data in certain circumstances, such as while a dispute is being resolved.
Right to Portability
Request your data in a structured, machine-readable format so you can transfer it to another service.
Right to Object
Object to us processing your data for direct marketing or where we rely on legitimate interests as our legal basis.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
Right to Complain
You have the right to lodge a complaint with your local data protection authority if you believe we've mishandled your data.
To exercise any of these rights, contact us at sales@variegatedplantshop.com with your name, email address, and a description of your request. We will respond within 30 days. We may need to verify your identity before processing your request.
How We Protect Your Data
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:
- SSL encryption on our website (https) to protect data in transit
- Secure payment processing — we never store full card details
- Restricted access to personal data — only staff who need it can access it
- Regular review of our data handling and security practices
While we do our utmost to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at sales@variegatedplantshop.com.
Third-Party Links
Our website may contain links to third-party websites including our social media pages on Facebook, Instagram, TikTok, Pinterest, Twitter, and Telegram. Clicking these links will take you away from our site and this privacy policy will no longer apply.
We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal data.
Children's Privacy
Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at sales@variegatedplantshop.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please get in touch with us directly. We take all privacy enquiries seriously and will respond promptly.
Variegated Plant Shop
501 Joyce Lane, New Baden, Illinois 62265, United States
Email: sales@variegatedplantshop.com
Phone: (408) 707-3517