Your Privacy
We may collect and store:
- Identity and contact details: name, email address, delivery address, and any telephone number you provide.
- Order information: products ordered, pack sizes, amounts, currency, order dates, and payment reference numbers from Stripe.
- Messages you send us: name, email, and the text of enquiries submitted through our contact form.
- Technical data needed to run the site, such as a session cookie for secure staff areas, a currency preference cookie for the shop, and (if you accept analytics cookies) usage information collected through Google Analytics.
Why we use your data
We use personal data to:
- Process and fulfil orders, arrange delivery, and deal with payment-related queries (contract).
- Respond to contact messages and provide customer support (legitimate interests / contract).
- Keep business records for accounting, tax, and dispute resolution where the law requires it (legal obligation / legitimate interests).
- Protect the website and prevent fraud or abuse (legitimate interests).
We do not sell your personal data to third parties. We do not add customers to marketing mailing lists without clear consent.
Who we share data with
We share personal data only where needed:
- Stripe, to process card payments (their privacy policy applies to payment processing).
- Email and website hosting providers that help us operate the site and send messages.
- Couriers or postal services to deliver orders (name and address only as required).
We limit what we share to what is necessary for those purposes.
International transfers
Some providers may store or process data outside the UK or European Economic Area. Where required, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses). You may ask us for more detail.
How long we keep data
We keep order and customer records for as long as needed to run the business, meet legal and tax requirements, and resolve disputes. Contact form messages are kept for a reasonable period to handle enquiries and follow-up, then deleted or archived unless we must keep them longer by law.
You may ask us to delete data sooner where we have no overriding legal reason to keep it.
How we protect your data
Customer order files and contact messages are stored on our server in areas not open to public download. Staff tools are protected by login. We use secure connections (HTTPS) on the live website. No system is completely secure; please tell us promptly if you believe your data has been accessed without authority.
Your rights
Under UK data protection law (and for many visitors from the European Economic Area, the UK GDPR / GDPR), you may have the right to:
- Access a copy of your personal data.
- Ask us to correct inaccurate data.
- Ask us to delete data in certain circumstances.
- Object to or restrict some processing.
- Data portability where applicable.
- Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise your rights, email info@tobaccoseedshop.com with enough detail for us to identify you. We may need to verify your identity before responding.
Cookies and similar technologies
Cookie choices on this website
When you first visit, you can choose:
- Essential only — we use the currency cookie only; we do not load Google Analytics.
- Accept analytics — we load Google Analytics (GA4) to understand how visitors use the site.
You can change your choice later by clearing this site’s cookies in your browser; the banner will appear again.
Cookies we use on the public shop
- shop_currency — remembers whether you prefer GBP, USD, or EUR. Duration: about 1 year. Always used so the shop can show the right prices (essential).
- Google Analytics (cookies such as _ga and _ga_*, and similar technologies) — only if you click Accept analytics. Helps us see which pages are viewed, how visitors move around the site, and general device/browser information. Provided by Google Ireland / Google LLC. Data may be processed outside the UK, including in the United States, under Google’s safeguards. See Google’s privacy policy (linked below).
You can change currency in the site menu; that updates shop_currency. You can delete cookies in your browser settings at any time.
Staff-only area
- TSC_BOSS_SESSION — used only when an authorised person logs into our private workshop area. Not set for normal customers.
Stripe and other third parties
When you pay through Stripe Checkout, Stripe may set its own cookies. We do not control those. See Stripe’s privacy information (linked below).
Browser controls
Most browsers let you block or delete cookies. Blocking shop_currency may mean we cannot remember your currency between visits. Blocking analytics cookies means we receive less information about how the site is used.
Changes to this notice
We may update this page from time to time. The version published on this website is the one that applies when you use the site.
Last updated: June 2026.