Privacy Policy

1. Who is responsible

Stylianos Karydakis runs the internet of seeds and decides what happens to the data described here — the data controller, in the language of the GDPR. The address is Afrikis Street, 3052 Limassol, Cyprus, and you can reach us at [email protected].

2. What we collect

When you plant a flower: the name you choose to display, the recipient's name if it is a gift, the plot you picked, the seed you picked, and the time you did it.

For the purchase: your email address and a payment reference from our payment provider. We never see or store your card details.

From the visit itself: the ordinary server and security logs any website keeps — IP address, browser, the pages requested.

3. Why, and on what basis

To take the payment and put your flower in the garden — that is performing the contract you entered into.

To send you the receipt and anything you need about your purchase — also the contract.

To keep the site up and stop abuse — our legitimate interest in a garden that works.

To meet tax and accounting rules — a legal obligation.

4. What becomes public

The plot number, the flower, the display name, and the recipient's name on a gift are shown publicly on that plot, and stay there. Anyone can look at any plot. Your email address is never shown.

Choose the display name accordingly — it does not have to be your real one.

5. Who else sees it

Polar, our payment provider and Merchant of Record, which handles the checkout, the payment and the tax, and holds its own copy of the purchase data under its own privacy policy.

Our hosting and content-delivery provider, which serves the site and keeps the security logs.

Our email provider, which sends receipts.

Nobody else. We do not sell data, and there is no advertising network in this website.

6. How long we keep it

The public part of a plot stays for as long as the garden runs — that is the point of it.

Purchase records are kept for as long as tax law requires, then deleted. Server logs are kept for a short period and then rotated out.

7. Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Email us and we will deal with it.

Deleting the personal side of a purchase is straightforward. Removing a planted flower is not — the garden is a public record of what has been planted — but we can replace a display name with an anonymous one on request.

If you think we have handled your data badly, you can complain to your local data protection authority — or, since the garden is run from Cyprus, to the Office of the Commissioner for Personal Data Protection there.

8. Cookies and tracking

There are no advertising or analytics cookies on this site. Fonts are served from our own servers, not from a third party, so simply reading the page tells nobody anything.

There is no sign-in on the site today. Accounts are planned, so that a flower can be found again from another device, and this page will be updated before they or any analytics go live.

9. Changes

If this policy changes, the date at the top changes with it.