Privacy Policy
Last updated: October 28, 2026
1. Introduction
The Borrowed Garden ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our plant rental service and website.
Please read this privacy policy carefully. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
Personal Information You Provide
When you place an order or create an account, we collect:
- Full name
- Email address
- Phone number
- Delivery/pickup address
- Account credentials (if you create an account)
Payment Information
Payment card information is collected and processed directly by our payment processor, Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We only receive a payment confirmation and the last four digits of your card for reference.
Room Designer Pictures
The room photos and designs you make in our room designer are kept in your own browser. When you send us a quote request from the room designer, the request carries one picture of your design, which can show the inside of your home. We store that picture privately, where only our team can view it, and use it only to prepare your quote and your event. We delete it 12 months after your request unless the request became an order, in which case it stays with that order's records (see section 7).
Automatically Collected Information
When you visit our website, we may automatically collect device and usage information such as your IP address, browser type, operating system, and pages visited. This helps us improve our service and detect potential security issues.
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your plant rental orders
- Communicate with you about your orders and rental periods
- Send order confirmations and important service updates
- Provide customer support
- Improve our website and services
- Detect and prevent fraud or security issues
- Comply with legal obligations
4. Information Sharing and Third Parties
We share your information with the following service providers who assist us in operating our business:
Stripe (Payment Processing)
Processes your payments securely. Stripe receives your payment card details, billing address, and email. Stripe is PCI-DSS compliant. Stripe Privacy Policy
Supabase (Database & Authentication)
Stores your account information, order history, and design data securely. Supabase Privacy Policy
Resend (Email Service)
Sends order confirmation and transactional emails. Resend receives your email address and order details for email delivery. Resend Privacy Policy
Google Analytics (Website Analytics)
Counts visits and shows which pages are used, so we can improve the website. Google Analytics sets cookies and receives device and usage information, such as the pages you visit, your browser type, and your approximate location. It does not receive your name, email address, or payment details. Google Privacy Policy
Google Gemini (Realistic Room Pictures)
Paints the realistic picture in our room designer. This happens only when you choose Make it real. Then Google Gemini receives your room photo and your design, which means the plants you chose and where you placed them, so it can draw them into your room. Making the picture stores nothing on our servers. We keep a picture of your design only when you send us a quote request from the room designer (see Room Designer Pictures in section 2). Google handles what it receives under its own privacy policy. Google Privacy Policy
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data transmission
- Secure password hashing for account credentials
- Access controls limiting who can view your data
- Regular security assessments and updates
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your personal information (subject to legal retention requirements)
- Data Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
To exercise any of these rights, please contact us at privacy@theborrowedgarden.co.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Order records may be retained for up to 7 years for tax and legal compliance purposes. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.
A room designer picture sent with a quote request is deleted 12 months after the request unless the request became an order. A picture that reached us without a finished quote request is deleted within ten days.
8. Cookies
We use essential cookies to maintain your session and shopping cart. These cookies are necessary for the website to function properly. We also use Google Analytics cookies to understand how visitors use the website (see section 4). We do not use advertising cookies. Your browser settings allow you to control cookie preferences, and you can opt out of Google Analytics with Google's opt-out browser add-on.
We also set two cookies of our own that note how you first and most recently reached our website, such as the site, search, or campaign that linked you here. When you send a quote request or book online, we keep that note with it, so we know which of our efforts reach people. It never includes your name, contact details, or payment details.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
The Borrowed Garden
Email: privacy@theborrowedgarden.co
General inquiries: hello@theborrowedgarden.co