Privacy policy
This Privacy Policy explains how Tree2mydoor collects, uses, shares and protects personal information when you visit our website, place an order, receive a gift, register for MyTree™, contact us or choose to receive marketing from us.
Who we are
Tree2mydoor is operated by TREE 2 MY DOOR LIMITED, trading as Tree2mydoor.
We are the controller responsible for the personal information described in this policy.
Registered office:
TREE 2 MY DOOR LIMITED
151 The Rock
Bury
Greater Manchester
England
BL9 0ND
Company number: 04890218
For privacy or data protection enquiries, email care@tree2mydoor.com and include the word "Privacy" in the subject line.
Personal information we collect
The information we collect depends on how you use Tree2mydoor.
Purchasers and customers
When you make a purchase or enquiry, we may collect information such as:
- your name
- email address
- telephone number
- billing address
- delivery details
- order and transaction information
- communications with our Customer Care team.
Gift recipients
Because Tree2mydoor is a gifting business, a purchaser may give us personal information about another person so that we can fulfil an order.
This may include the recipient's name, delivery address, telephone number, delivery instructions and information contained in a gift message.
We use recipient information to prepare, deliver and support the gift and for other purposes that are reasonably necessary to fulfil the order.
MyTree™ recipients
When a gift recipient activates MyTree™, we may collect their contact details, order information, delivery details and information about the tree or plant they are registering.
We use this information to provide MyTree™ care communications, support and any applicable warranty service.
MyTree™ is primarily a recipient service. A purchaser may register a gift on the recipient's behalf where appropriate.
Website and technical information
When you use our website, we may collect information such as:
- IP address
- browser and device information
- pages viewed and navigation information
- website interaction and performance information
- cookie and similar technology identifiers.
Marketing information
We may hold information about your marketing preferences, interactions with our emails or messages, and the products or content that may be relevant to you.
Payment information
Payments made through our website are processed through Shopify and supported payment services such as Shop Pay.
Tree2mydoor does not directly store your full payment card details.
Why we use personal information
We use personal information where we have a lawful reason to do so. Depending on the activity, this may include:
- Contract: where information is needed to process and fulfil an order or provide a service you have requested.
- Legal obligation: where we need to keep or use information to comply with the law, accounting requirements, taxation or regulatory obligations.
- Legitimate interests: where it is reasonably necessary to operate, protect and improve our business, provide customer support, prevent fraud, understand our customers and improve our services, provided those interests do not override your rights.
- Consent: where you have actively agreed to a particular use, such as certain forms of electronic marketing or non-essential cookies.
Customer Care and communications
We keep records of communications with customers and recipients so that we can respond to enquiries, resolve problems, understand previous contact and improve our service.
Customer Care communications may be managed through Help Scout.
Marketing
We use Klaviyo and other approved systems to manage marketing and customer communications.
We may send marketing emails or messages where you have given consent or where the law allows us to contact existing customers about our own similar products or services.
Where the electronic marketing rules allow us to rely on the existing customer or "soft opt-in" exception, we will provide an opportunity to opt out when details are collected and in each marketing message.
You can stop receiving marketing at any time by using the unsubscribe option provided in the message.
Stopping marketing does not prevent us from sending messages that are necessary to fulfil an order, provide a service, administer MyTree™, respond to an enquiry or meet a legal obligation.
MyTree™ care communications
MyTree™ care communications are designed to support the recipient in caring for their registered tree or plant.
Any separate marketing preferences are managed independently from MyTree™ service communications.
Analytics, advertising and profiling
We may use analytics, advertising and affiliate technologies to understand how our website is used, measure the effectiveness of our advertising and present more relevant content or advertising.
Services used for these purposes may include Shopify, Google Analytics, Google Ads, Meta or Facebook, Pinterest, Webgains and Adtraction.
We may use customer segmentation or profiling to understand audiences and make communications or advertising more relevant.
If we use automated decision-making in a way that produces legal or similarly significant effects, we will provide the information and rights required by data protection law.
Cookies
We use Cookiebot to manage cookie choices on our website.
Essential cookies may be required for the website to work correctly. Where required by law, analytics, advertising and other non-essential cookies will only be used in accordance with the choices you make through our cookie controls.
You can review or change your cookie choices using the Cookiebot controls available on the website.
Who we share personal information with
We only share information where it is reasonably necessary for the purposes described in this policy or where we are required to do so by law.
This may include:
- Shopify and payment service providers for ecommerce and payment processing
- Help Scout for customer service communications
- Klaviyo for customer and MyTree™ communications
- Collaber where it supports Tree2mydoor systems and MyTree™ services
- delivery and logistics providers, including DPD, Whistl and 1Post where appropriate
- analytics, advertising and affiliate providers
- IT, hosting and security providers
- professional advisers such as accountants, insurers and legal advisers
- government bodies, regulators, courts or law enforcement where disclosure is legally required
- a purchaser or successor if all or part of our business is sold, transferred or reorganised.
Our suppliers and service providers may change from time to time.
International transfers
Some of our service providers may process personal information outside the United Kingdom.
Where this involves a restricted international transfer, we take steps to ensure the transfer is permitted under UK data protection law.
Depending on the destination and provider, this may include relying on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework where applicable, approved contractual safeguards or another lawful transfer mechanism.
Special category information
We do not normally ask customers or recipients to provide special category personal information, such as health information, religious beliefs or information about sexual orientation.
However, information of this kind may occasionally be included voluntarily in a gift message, free-text field or communication with Customer Care.
Please only provide information that is reasonably necessary for the order or enquiry.
How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including any period needed to comply with legal, tax, accounting, contractual or regulatory requirements or to establish, exercise or defend legal claims.
Different types of information may therefore be kept for different periods.
Where information is no longer required, we will delete, anonymise or securely dispose of it in accordance with our retention procedures.
We may keep a record of a marketing opt-out so that we can respect your request not to receive further marketing.
Keeping information secure
We use appropriate organisational and technical measures intended to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
Access is limited to people and service providers who need the information for a legitimate business purpose.
If a personal data breach occurs, we will investigate it and notify the Information Commissioner's Office and affected individuals where the law requires us to do so.
Your rights
Depending on the circumstances, you may have the right to:
- ask for a copy of personal information we hold about you
- ask us to correct inaccurate or incomplete information
- ask us to delete personal information
- ask us to restrict how information is used
- object to certain uses of your information
- ask for certain information to be transferred to you or another organisation
- withdraw consent where we rely on consent.
These rights are subject to the conditions and exemptions set out in data protection law.
To make a request, email care@tree2mydoor.com with "Privacy" in the subject line.
We may need to ask for information to confirm your identity before responding.
We will normally respond within the period required by data protection law.
Complaints
If you have a concern about how we use personal information, please contact us so that we can investigate it.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.
For our current contact details, see our Contact Information.
Third-party websites
Our website may contain links to websites operated by other organisations. We are not responsible for how those organisations use personal information. We recommend reading their privacy information when you visit their websites.
Changes to this policy
We may update this Privacy Policy when our services, systems or legal obligations change. The current version published on this website will apply.