Privacy Policy
Last updated: January 12, 2026
1. Introduction
The Borrowed Garden ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our plant rental service and website.
Please read this privacy policy carefully. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
Personal Information You Provide
When you place an order or create an account, we collect:
- Full name
- Email address
- Phone number
- Delivery/pickup address
- Account credentials (if you create an account)
Payment Information
Payment card information is collected and processed directly by our payment processor, Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We only receive a payment confirmation and the last four digits of your card for reference.
Automatically Collected Information
When you visit our website, we may automatically collect device and usage information such as your IP address, browser type, operating system, and pages visited. This helps us improve our service and detect potential security issues.
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your plant rental orders
- Communicate with you about your orders and rental periods
- Send order confirmations and important service updates
- Provide customer support
- Improve our website and services
- Detect and prevent fraud or security issues
- Comply with legal obligations
4. Information Sharing and Third Parties
We share your information with the following service providers who assist us in operating our business:
Stripe (Payment Processing)
Processes your payments securely. Stripe receives your payment card details, billing address, and email. Stripe is PCI-DSS compliant. Stripe Privacy Policy
Supabase (Database & Authentication)
Stores your account information, order history, and design data securely. Supabase Privacy Policy
Resend (Email Service)
Sends order confirmation and transactional emails. Resend receives your email address and order details for email delivery. Resend Privacy Policy
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data transmission
- Secure password hashing for account credentials
- Access controls limiting who can view your data
- Regular security assessments and updates
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your personal information (subject to legal retention requirements)
- Data Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
To exercise any of these rights, please contact us at privacy@theborrowedgarden.co.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Order records may be retained for up to 7 years for tax and legal compliance purposes. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.
8. Cookies
We use essential cookies to maintain your session and shopping cart. These cookies are necessary for the website to function properly. We do not use tracking or advertising cookies. Your browser settings allow you to control cookie preferences.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
The Borrowed Garden
Email: privacy@theborrowedgarden.co
General inquiries: hello@theborrowedgarden.co