PRIVACY POLICY
Last updated: 20 September 2026
This Privacy Policy explains how Lets do Bonsai Ltd collects, uses, stores and protects your personal information when you use our website, purchase products from us, contact us or use our services.
We take the privacy of your personal information seriously and process it in accordance with applicable UK data protection law.
1. Who We Are
Lets do Bonsai Ltd is the data controller responsible for the personal information described in this Privacy Policy.
Lets do Bonsai Ltd
Registered in England and Wales
Company number: 17453660
Email: info@letsdobonsai.co.uk
Website: www.letsdobonsai.co.uk
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.
2. Personal Information We Collect
Depending on how you use our website and services, we may collect the following personal information:
-
your name;
-
email address;
-
telephone number;
-
billing and delivery address;
-
order and purchase information;
-
payment and transaction information;
-
account information where you create an account;
-
information you provide when contacting us;
-
workshop booking or enquiry information;
-
newsletter and marketing preferences;
-
IP address;
-
device and browser information;
-
information about how you use and interact with our website; and
-
cookie and consent preferences.
We only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.
3. How We Collect Your Information
We may collect personal information directly from you when you:
-
place an order through our website;
-
create a customer account;
-
contact us by email, telephone, through our website or by another method;
-
book or enquire about a training workshop or other service;
-
sign up to our newsletter or marketing communications;
-
enter a competition or promotion;
-
complete a survey; or
-
otherwise provide information to us.
We may also receive information from third parties that help us operate our website, process payments, fulfil orders or provide services on our behalf.
Certain technical information may be collected automatically when you use our website, including through cookies and similar technologies.
4. How We Use Your Personal Information
We may use your personal information to:
-
process and fulfil your orders;
-
process payments and refunds;
-
arrange delivery of your purchases;
-
communicate with you about your order;
-
manage your customer account;
-
respond to questions, requests or complaints;
-
process and manage training workshop or service bookings;
-
provide customer service;
-
maintain appropriate business, tax and accounting records;
-
prevent and investigate fraud or misuse of our website;
-
maintain the security and operation of our website;
-
understand how our website is used and improve our website, products and services;
-
send marketing communications where we are permitted to do so; and
-
comply with legal and regulatory obligations.
We will not use your personal information for a purpose that is incompatible with the reason it was collected unless permitted or required by law.
5. Our Legal Bases for Using Your Information
UK data protection law requires us to have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on the following legal bases.
Contract
We process personal information where it is necessary to enter into or perform a contract with you.
This includes processing information to:
-
accept and fulfil an order;
-
take payment;
-
arrange delivery;
-
process a return or refund;
-
manage a customer account where necessary for our service; and
-
manage a training workshop or other service booking.
Legal Obligation
We may process and retain personal information where necessary to comply with our legal obligations, including tax, accounting and other regulatory requirements.
Legitimate Interests
We may process personal information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
This may include:
-
providing customer service;
-
maintaining appropriate business records;
-
protecting our website and business against fraud and misuse;
-
maintaining website and information security;
-
improving our website, products and services; and
-
establishing, exercising or defending legal claims.
Consent
Where required, we may rely on your consent.
This can include:
-
certain marketing communications; and
-
non-essential cookies and similar technologies.
Where we rely on consent, you can withdraw your consent at any time.
6. Payments
Payments made through our website are processed using payment services available through our ecommerce platform and/or third-party payment providers.
The information required to process a payment may be collected directly by the relevant payment provider.
We may receive information confirming the transaction, such as the amount paid, payment status, transaction reference and limited payment information, but we do not need to store your complete payment card details ourselves in order to fulfil your order.
Payment providers process personal information in accordance with their own privacy and security obligations.
7. Delivery Companies
Where you place an order requiring delivery, we may share information with the courier or delivery company responsible for delivering your order.
This may include:
-
your name;
-
delivery address;
-
telephone number;
-
email address; and
-
relevant delivery instructions.
We only provide information reasonably necessary to complete the delivery.
8. Wix
Our website is built and hosted using Wix.com.
Wix provides services used to operate the website, which may include website hosting, ecommerce functionality, customer accounts, website security, consent management and other website features.
Personal information submitted through our website may therefore be processed by Wix on our behalf.
Some of Wix's systems or service providers may process information outside the United Kingdom. Where this involves an international transfer of personal information, appropriate safeguards must be used as required by UK data protection law.
9. Who We May Share Your Information With
Where necessary for the purposes described in this Privacy Policy, we may share personal information with:
-
Wix and other website or technology providers;
-
payment processors;
-
delivery and courier companies;
-
email and communication providers;
-
accountants and professional advisers;
-
IT and security providers;
-
organisations providing services to us on our behalf; and
-
government authorities, regulators, courts or law enforcement agencies where required or permitted by law.
We do not sell your personal information to other organisations.
Where another organisation processes personal information on our behalf, we expect it to handle that information appropriately and in accordance with applicable data protection requirements.
10. Marketing Communications
We may send you information about our bonsai trees, products, training workshops and other related products or services where we are permitted to do so.
Where your consent is required, we will ask you to actively choose to receive marketing communications.
You can withdraw your consent or unsubscribe at any time by:
-
using the unsubscribe link provided in a marketing email; or
-
contacting us at info@letsdobonsai.co.uk.
In certain circumstances, UK law allows us to send marketing about our own similar products and services to existing customers without obtaining separate consent. This is sometimes known as the soft opt-in.
We will only rely on this where the legal requirements are met, including providing you with an opportunity to opt out when your details are collected and in every subsequent marketing communication.
We will not sell or provide your contact details to other organisations for their own marketing purposes.
11. Cookies
Our website uses cookies and similar technologies.
We use Usercentrics for Wix to manage cookie consent and preferences. Cookies may be used for essential website functionality and, where you consent, for functional, analytical and marketing purposes.
When you first visit the website, you can accept all non-essential cookies, reject them, or manage your preferences by category.
You can change or withdraw your consent at any time by selecting the privacy settings icon displayed on the website.
Further details about the cookies and services currently in use are available within the website’s privacy settings.
You can also control or delete cookies using your browser settings, although disabling certain cookies may affect how parts of the website operate.
12. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting and regulatory obligations.
The appropriate retention period will depend on the type of information and why we hold it.
For example:
-
order, payment and transaction records may normally be retained for up to six years, or longer where required for tax, accounting, dispute or legal purposes;
-
customer correspondence may be retained for as long as reasonably necessary to deal with the enquiry and any subsequent issue;
-
customer account information may be retained while an account remains active and for an appropriate period afterwards;
-
workshop booking records may be retained for an appropriate period for accounting, customer service and legal purposes;
-
marketing information may be retained until you unsubscribe or withdraw your consent; and
-
we may retain limited information recording that you have opted out of marketing so that we can respect your preference in the future.
Information may be retained for longer where required by law or where reasonably necessary in connection with a legal claim or dispute.
13. Keeping Your Information Secure
We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, destruction, alteration, disclosure or unauthorised access.
Our website and ecommerce services are provided through Wix and associated service providers, which maintain their own technical and security measures.
Access to customer accounts is protected by account credentials, and access to personal information within our business is limited where appropriate.
No electronic storage or transmission system can be guaranteed to be completely secure, but we take reasonable precautions appropriate to the information we process.
If you believe that your personal information has been misused, lost or accessed without authorisation, please contact:
14. International Transfers
Some organisations that provide services to us may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that any safeguards required by UK data protection law are in place.
Depending on the destination and circumstances, this may include:
-
transferring information to a country recognised as providing an adequate level of data protection; or
-
using approved contractual protections or another legally recognised transfer mechanism.
You can contact us if you would like further information about safeguards applying to your personal information.
15. Your Data Protection Rights
Depending on the circumstances, you may have the following rights in relation to your personal information:
Right of Access
You can ask for a copy of personal information we hold about you.
Right to Rectification
You can ask us to correct information that is inaccurate or complete information that is incomplete.
Right to Erasure
In certain circumstances, you can ask us to delete your personal information.
Right to Restrict Processing
In certain circumstances, you can ask us to restrict the way we use your personal information.
Right to Data Portability
In certain circumstances, you may have the right to receive personal information you provided to us in a commonly used electronic format or ask us to transfer it to another organisation.
Right to Object
You may have the right to object to certain uses of your personal information, including processing based on legitimate interests.
You have the right to object to the use of your personal information for direct marketing at any time.
Right to Withdraw Consent
Where we rely on your consent, you can withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, contact:
We may need to ask for information to confirm your identity before responding to your request.
Your rights are subject to certain conditions and exemptions under data protection law.
16. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.
Email:
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information about making a complaint and the ICO's current contact details are available at:
17. Links to Other Websites
Our website may contain links to websites operated by other organisations.
We do not control those websites and are not responsible for their privacy practices.
When visiting another organisation's website, we recommend reviewing its privacy information to understand how it uses your personal information.
18. Changes of Business Ownership
If all or part of our business is sold, transferred or reorganised, personal information relevant to that part of the business may be transferred to a new owner or organisation as part of that transaction.
Where this occurs, personal information will continue to be protected in accordance with applicable data protection law.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, products, services, business practices or legal obligations.
The latest version will be published on this page and the Last updated date at the top of the policy will be changed accordingly.
20. Contact Us
If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:
Lets do Bonsai Ltd
Email: info@letsdobonsai.co.uk