Fern Trail Market is run by BIRCH SHOP LTD, a private limited company registered in England and Wales (company number 17531695). We are the controller of the personal data described here. This policy sets out what we learn about you when you visit ferntrailmarket.com or buy from us, why we keep it, and the say you have over it.
1. Information We Collect
We gather only what we need to sell you something and to answer you.
- Order details: your name, email address, delivery address, a phone number if you choose to give one, and a billing address if it differs. Card details are typed in at checkout; Section 4 covers where they go.
- Messages: anything you send through the contact or cancellation forms or by email, which is usually your name, email address, order number and what you wrote.
- Technical records: what any web server receives with a request, such as your IP address, the browser and device you are using, the page requested and when. No analytics or advertising tags are installed.
You cannot open an account with us, so we hold no passwords.
2. Why We Use It
We use your details to take payment, pack and post your order, email your receipt and tracking number, reply to your messages, and deal with cancellations, returns and refunds. Under UK data protection law, the basis for most of this is that we need the data to carry out our contract with you.
We also review order and technical records to spot fraud and protect the shop, which is in our legitimate interests, and we keep financial records because the law requires us to.
Marketing emails go only to people who have asked for them, and you can stop them whenever you like.
3. Who We Share It With
Your personal information is not for sale here. Nor is it shared for cross-context behavioural advertising, the practice of targeting ads at you from what you do on other websites.
A few companies help run the shop, and each one receives only the details its job needs: Cloudflare, our host and image store; the providers that manage our orders and process payments; PayPal, when you check out with it; the service that delivers our order emails; and whichever carrier takes your parcel. None of them may use the data for anything other than the work they do for us.
We will disclose information if the law requires it, if we receive a valid legal request, or to stop fraud. Should the business change hands through a sale or merger, the new owner would take on customer records and be bound by this policy.
4. Payment Card Details
Card details go to our payment processor and are handled there. We never see or keep your full card number or security code. An order record may show the last four digits so you can tell which card was used.
5. Security
Every page on the site is served over HTTPS. Only the staff who pack orders and answer customers can open order records, and they use them for that work alone. No system can be made perfectly secure, so if a breach affects your data we will tell you, and we will tell the UK Information Commissioner's Office where the law requires it.
6. How Long We Keep It
We retain order and payment records for six years after the end of the financial year they fall in, because UK tax rules expect a company to keep its books that long. Support emails and form messages are deleted three years after the conversation ends. Server logs are kept briefly by our hosting provider, on its own schedule. Full card numbers never reach us, so there are none to keep.
7. Where Your Data Is Processed
BIRCH SHOP LTD is based in the United Kingdom, and your data is processed there. Our customers are in the United States, and several of the companies named in Section 3 are based in the United States or elsewhere. Whenever your data is handled outside the UK, we rely on appropriate safeguards, such as UK-approved contract clauses for international transfers, so it stays protected to the standard UK law expects.
8. Your Rights
Under UK data protection law you may request a copy of your personal data, have mistakes in it fixed, or have it erased. You may also object to our use of it, ask us to limit that use, or ask for it in a portable format. Records we are legally bound to keep, such as tax records of orders, stay until their retention period ends.
Residents of California have extra rights, set out on our California privacy rights page.
Email support@ferntrailmarket.com with any request. We may check that a request really is from you before acting on it, and we reply within 30 days. Making a request will not change how we deal with you.
9. Cookies and Browser Signals
Checkout relies on one necessary cookie, and your basket sits in your browser's local storage. Both are listed in our Cookie Policy. Nothing optional runs here, and browsers that send Global Privacy Control or Do Not Track keep it that way.
10. Links to Other Sites
Some links lead to other sites, for example a carrier's tracking page or PayPal. Those sites have privacy policies of their own, and this one does not cover them.
11. Children
Our customers are adults, and orders are accepted only from people aged 18 and over. If we learn that a child under 13 has given us personal data, we erase it. You can tell us about it at support@ferntrailmarket.com.
12. Updates to This Policy
Any revision to this policy comes with a new date beside the title. If a revision would change how we use data we already hold, we put a notice on the site first.
13. Contact and Complaints
Questions about your data, or a request under Section 8, can go to:
BIRCH SHOP LTD, trading as Fern Trail Market
Registered office: 3rd Floor Suite, 207 Regent Street, London, W1B 3HH, United Kingdom
Company number 17531695, registered in England and Wales
Email: support@ferntrailmarket.com
Phone: +1 866 402 9907
Hours: Monday – Friday, 9:00 AM – 6:00 PM EST
We acknowledge messages within one business day. If our answer does not satisfy you, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to a data protection regulator in the country where you live.