Privacy & Your Data

A little clarity about your information, so you can feel at home in the garden.

What we keep, and why

• Your email, sign-in details and adult/Terms declaration, to provide and protect your account. A small record helps us recognise first-time membership.
• Your chosen name, listings, photographs and town or area, to help gardeners share.
• Messages, reports, blocks, enquiries and relevant security records, to support conversations and keep the community safe.

Your date of birth is used during registration to check that you are 18 or over. We do not save it to your account or show it to other members. We keep the adult/Terms declaration instead.

You can choose a first name or nickname for your private welcome and change or remove it in Account settings. It is not taken from your email or automatically shared with other members.

Who can see it?

Listings and photographs are public. Use a town or area, not a home address. New private conversations use member access controls; your account email is not displayed to the other gardener. Earlier guest enquiries may contain the sender’s supplied email and are available to the original listing owner. The operator may review relevant records when necessary for safety or a legal request.

We use secure connections, protected sign-in and controls on who can see your information. Messages are not end-to-end encrypted. Our full Privacy Policy explains the operator, service providers, lawful bases and your rights.

The services behind the garden

We use Supabase for accounts, messages and photographs; Vercel for hosting; Resend for service emails; Cloudflare for domain services and mail routing; and Yahoo Mail for forwarded contact messages. Our Privacy Policy explains these services and how your information is handled.

Listings and photographs

New or renewed listings stay active for 90 days. Ordinary editing does not renew them. Expiry hides a listing from public browsing; it does not immediately erase it.

• Inactive listing information: approved deletion period of 12 months after inactivity.
• Unneeded photographs: approved removal within 30 days after inactivity. Shared photographs, uncertain older ownership or a specific lawful safety hold need review first.

Messages and account information

Conversations have an approved retention period of 12 months after the last message. Earlier guest enquiries are checked separately, protecting linked conversations and necessary safety records. Reports and complaints are kept for 12 months after closure; contact enquiries for 6 months after resolution.

Account information is kept while you use the service. Dormant accounts are reviewed after 24 months, with advance notice before any proposed closure.

Your choices: Automatic deletion is switched off. We review older information against these limits, and you can ask us for help or deletion. A photograph can remain visible if it is also used by an active listing. Copies already saved by others cannot be recalled.

If you close your account

To close your account, choose “Delete my account” in Account settings and confirm once. If the option is unavailable, you cannot sign in or you need help, email us to request closure.

Closing your account removes your sign-in account, owned listings, unneeded photographs and notifications waiting to be sent. Your own messages are removed or redacted; other gardeners keep their accounts and remaining history. Shared photographs are handled safely. Only specific necessary legal or safety evidence may be kept privately, with a reason and review date. A child-safety report to the National Crime Agency has separate legal retention periods, explained in our Privacy Policy.

If closure is interrupted, Account settings lets you check its progress. We only show your account as closed when the process is finished. Emails already delivered cannot be recalled. Recovery copies are encrypted and access is restricted. They may retain older information until securely replaced or removed. We record erasure requests and necessary safety holds so that restoring a backup does not restore a closed account for ordinary use. Contact us about information in recovery copies or service records.

Your information, your choice

For access, correction, deletion or another data-rights request, email hello@plantiton.com, from your account address where possible. You do not need a new account. We verify control proportionately; never send your password or identity documents by default.

We normally respond within one calendar month; any lawful extension or exception must be explained. You can raise a concern with us or the ICO. Read the Privacy Policy and cookie information for the fuller picture.