Privacy notice

Last updated: 16 October 2026

1. Who we are

High Rise Farming LTD, company number 13458897, is the data controller responsible for the personal information described in this notice relating to Lamps and Plants.

Our address is Unit 1, Ozdil House, River Way, Harlow, Essex, CM20 2DR, United Kingdom.

For privacy questions, complaints or requests, contact info@lampsandplants.co.uk or write to our address above.

2. What we collect

When you order: your name, delivery and billing addresses, email address, telephone number, order details and payment information needed to confirm and manage your transaction. Our payment providers process your payment details.

When you join our waitlist or subscribe: your email address, subscription preferences and records of your consent.

When you browse: technical and usage information, such as your IP address, approximate location, device, browser, referring website and pages viewed, depending on the technologies used and your cookie choices.

When you contact us: your contact details, message and any other information you provide.

We collect information directly from you, through your use of our website, and from payment and delivery providers supplying transaction confirmations, fraud alerts and delivery updates.

3. Why we use your information

Where we rely on legitimate interests, we consider the effect on your rights and interests.

If you do not provide information necessary to process an order, we may be unable to accept or fulfil it. Joining our waitlist or receiving marketing is optional.

4. Marketing

We send waitlist updates and marketing emails where you have consented to receive them. Joining a product waitlist does not automatically subscribe you to unrelated marketing.

You can withdraw your consent at any time using the unsubscribe link in our emails or by contacting us. This does not affect essential service messages about an existing order.

5. Who we share information with

Where necessary, we share information with:

• Payment providers, to process payments and help prevent fraud.

• Delivery services, to deliver orders and provide delivery updates.

• Hosting, website, email and analytics providers, to operate our services.

• Accountants, legal advisers and other professional advisers.

• Public authorities, where disclosure is legally required.

Providers acting as our processors handle information under appropriate contracts and our instructions. Some recipients, including certain payment providers and delivery services, act as independent controllers for some activities and have their own privacy notices.

We do not sell your personal information.

6. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where we make a restricted international transfer, we ensure that it is covered by applicable UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any additional measures required.

You can contact us for details of the destinations and safeguards applicable to your information, including a copy of relevant safeguards, subject to necessary redactions.

7. How long we keep information

We retain information only for as long as necessary for the purposes described in this notice.

Accounting and tax records: normally six years from the end of the financial year they relate to, or longer where legally required.

Other order and customer-service records: normally up to six years after the order is completed, where necessary to deal with warranties, disputes or legal claims.

Waitlist information: until you unsubscribe, or up to 12 months after signup if the relevant product or service has not launched. After launch, we remove waitlist information within three months of the final update unless you separately subscribe to marketing.

Marketing subscriptions: until you unsubscribe, or after 24 months without interaction with our marketing or services.

Consent records: while we rely on your consent and for up to six years afterwards where necessary to demonstrate compliance or address legal claims.

Unsubscribe records: we retain the minimum information needed to prevent further marketing for as long as we operate the relevant marketing list.

Analytics information: six months.

General enquiries: normally 24 months after the enquiry is resolved.

Complaints: normally up to six years after resolution, where necessary to demonstrate how we handled the complaint or address legal claims.

We may retain relevant information for longer where required by law or necessary for an ongoing dispute. We delete or anonymise information when it is no longer needed.

8. Cookies

We use cookies and similar technologies to operate our website. Essential technologies support functions such as the shopping basket and checkout.

We obtain your consent before using optional analytics or advertising technologies. You can withdraw or change your consent through our website’s cookie settings.

Our Cookie Policy explains the technologies used, their purposes, durations and providers.

9. Your rights

Depending on the circumstances, you have the right to:

• Access your personal information.

• Have inaccurate information corrected.

• Request deletion of your information.

• Restrict how we use your information.

• Receive certain information in a portable format.

• Object to processing based on legitimate interests.

You can object to direct marketing at any time, including related profiling.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise your rights, contact info@lampsandplants.co.uk or write to us. These rights are subject to applicable legal conditions and exemptions.

We respond without undue delay, normally within one month. If an extension is permitted and necessary, we will explain why within the applicable initial deadline. We may request information reasonably needed to verify your identity.

10. Automated decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

11. Complaints

You can raise a privacy complaint with us using the contact details above.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator. You do not need to complain to us first.

12. Changes to this notice

We will update this notice when our handling of personal information changes. Where required, we will inform you before using your information for a new purpose.