Our Growth Protection Policy (Privacy Policy)

Last Cultivated: 8 October 2026

At Boba’s Plants, we know that plants aren’t the only things that need a safe environment to thrive—your data does too. Just as we wouldn’t let a spider mite infestation go unchecked, we take your privacy seriously. This policy explains how we collect, protect, and “water” your information.

1. The Seeds We Collect

To get our hand-cast pots and succulents from our greenhouse to your doorstep, we need to gather a few “seeds” of information:

Identity Data: Your name (because “Hey You” is a terrible way to address a plant parent).
Contact Data: Your delivery address, email, and phone number (so our couriers don’t get lost in the weeds).
Transaction Data: Details about the beautiful plants and art you’ve bought from us.
Technical Data: Your IP address and “cookies.” These help us understand if our website is growing correctly or if it needs a little more “sunlight” (optimization).

2. How We Nurture Your Data

We don’t just collect data for the sake of it. We use it to:

Process your orders: Turning your “Add to Cart” into a “Hand-Delivered” reality.
Keep you in the loop: Sending you updates on your order or our latest “Beyond Boba” artist spotlights (only if you’ve opted in!).
Spam Protection: We use a few digital “ladybugs” (spam filters) to keep bots from clogging up our contact forms.

3. Sharing the Harvest

We are a family business, not a data broker. We will never sell your information to third-party “pests.” We only share your data with our trusted partners who help us function:

Couriers: So they know where to drop off your new cacti.
Stripe (payments): Card, Apple Pay and Google Pay payments are handled by Stripe. Your card details go straight to Stripe and never touch our own servers — we only ever see the card type and its last four digits. Stripe also uses payment details to help prevent fraud, and may process data in the USA under recognised legal safeguards. Stripe’s privacy policy.
Brevo (email): Our emails — order updates, Boba’s Plant Club messages and newsletters — are sent through Brevo, an email delivery service based in France. Brevo receives your name, your email address and the email itself, and tells us whether it was delivered and opened. It only sends what we ask it to and never uses your details for its own marketing. Brevo’s privacy policy.
Meta and Google (advertising and analytics): We use Meta’s and Google’s measuring tools to see how our website and our adverts are doing. What they collect, and how to switch it off, is explained in section 4 below.
Beyond Boba Partners: If you buy a painting from Marina’s Art, we share the necessary details to ensure your art arrives safely.

4. Digital “Cookies” (The Good Kind)

Our website uses cookies—tiny bits of data that act like plant labels. Here is every kind we use, and why:

Essential cookies: remember what’s in your basket and keep you signed in. The site can’t work without these.
How you found us (WooCommerce order attribution): remembers whether you arrived from an advert, a search or a link, and stores that with your order so we know which of our efforts are working. This stays with us and isn’t shared.
Meta Pixel (Facebook and Instagram): tells Meta when someone visits our site, adds a pot to their basket or places an order, so we can see which of our adverts work and show them to people likely to love our pots. It sets a cookie called _fbp. When you order, Meta may also receive a scrambled (hashed) version of contact details such as your email address, so it can match the visit to a Facebook or Instagram account. Meta may process this data in the USA. Meta’s privacy policy · your Meta ad preferences.
Google Analytics and Google Ads: count visits and show us how people use our site (which pages, how long, from which kind of device), and whether our Google adverts lead to orders. Google Analytics sets cookies called _ga. Google may process this data in the USA. Google’s privacy policy · opt out of Google Analytics · your Google ad settings.

You can tell your browser to refuse or delete cookies at any time. Turning off the Meta and Google ones won’t affect your shopping at all, but like a plant without water, the site won’t work properly without the essential ones.

5. Your Root Rights

You have the right to control your data. At any time, you can:

Ask to see what data we have on you.
Request a “Pruning”: Ask us to delete your data from our systems.
Unsubscribe: If our newsletters are no longer sparking joy, you can opt-out with a single click.

6. Security

We protect your data with the same care we give a rare propagation. We use Secure Socket Layer (SSL) encryption and modern server protections (like our secret login garden!) to keep intruders out of our digital greenhouse.

7. How to Reach Our Head Gardener

If you have questions about this policy, or if you just want to talk about succulent care, don’t be a wallflower. Get in touch:

Email: contact@bobasplants.com
Web: bobasplants.com/contact-us