Privacy Policy

1. Introduction

Right Plant, Right Place Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Right Plant, Right Place™ service (the "Service").

We are a company registered in England and Wales. For any privacy-related enquiries, please contact us at [email protected].

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name
• Your email address
• Your password (stored in encrypted/hashed form)

2.2 Garden Data

When you use the Service, we collect:

• Video recordings of your garden that you upload
• 3D models generated from your video uploads
• Location data for your garden (used for sun analysis and plant recommendations)
• Images of plants you upload for identification purposes

2.3 Authentication Data

If you choose to sign in using Google OAuth, we receive basic profile information from Google, including your name and email address.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your garden videos and generate 3D models
• Perform sun analysis on your garden
• Provide personalised plant recommendations based on your garden's conditions
• Identify plants from images you upload
• Communicate with you about the Service
• Respond to your enquiries and support requests

4. Third-Party Services

We use the following third-party services to operate the Service:

Heroku

We use Heroku (a Salesforce company) for hosting the Service and database storage. Your data is stored in Heroku's EU region.

Stackhero

We use Stackhero for cloud storage of images and media files.

Google OAuth

If you choose to sign in with Google, your authentication is processed by Google. Please refer to Google's Privacy Policy for information on how they handle your data.

PlantNet

We use the PlantNet API for plant identification. When you upload a plant image for identification, that image is sent to PlantNet for processing.

Modal Labs

We use Modal Labs to run the computational processes that create 3D models from your garden videos.

5. Data Storage and Security

Your data is stored on servers located in the European Union (Heroku EU region). We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Your password is stored in hashed form and is never stored or transmitted in plain text.

6. Data Retention

We retain your personal data for as long as your account is active. Your uploaded videos, 3D models, and other garden data are retained while your account remains active.

If you delete your account, your personal data will be deleted within 30 days of the deletion request.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erasure (the "right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

8. Account Deletion

You may delete your account at any time through the Service. Upon deletion:

• Your account information will be permanently deleted
• All your garden data, including videos, 3D models, and plant images, will be deleted within 30 days
• This action is irreversible

9. International Data Transfers

While our primary data storage is in the EU, some of our third-party service providers may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Cookies and Tracking

We do not currently use marketing cookies or tracking pixels. We may use essential cookies necessary for the functioning of the Service, such as session cookies for authentication.

11. Age Restrictions

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected personal data from someone under 18, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

14. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of our contract with you to provide the Service
• Legitimate interests: Processing necessary for our legitimate interests, such as improving the Service
• Consent: Where you have given consent for specific processing activities

15. Data Controller

Right Plant, Right Place Ltd is the data controller responsible for your personal data. We are registered in England and Wales.