Privacy Policy
Last updated: 10 June 2026
Tuft keeps this simple: we collect the minimum needed to grow, bill and deliver your grass, and we don’t sell or share your data with anyone for marketing. Contact for anything privacy-related: marcos@gmx.co.uk.
What we collect and why
- Name, delivery address and postcode — to deliver your order and plan delivery rounds. Legal basis: performing our contract with you.
- Email address — for order confirmations, delivery updates and subscription management emails. Contract again — these are service messages, not marketing.
- Phone/WhatsApp number — only if you message us or ask for delivery updates that way.
- Payment details — handled entirely by Stripe. We never see or store card numbers.
What we don’t do
- No marketing emails unless you explicitly opt in.
- No selling or sharing of your data with third parties for their purposes.
- No advertising trackers on this site.
Who processes your data
- Stripe — payments and subscription billing.
- Vercel — hosts this website; standard server logs apply.
How long we keep it
Order and delivery records are kept for 6 years as required for tax purposes, then deleted. If you cancel a subscription, we keep only what those records require.
Your rights
Under UK GDPR you can ask us at any time to access, correct or delete the personal data we hold about you, or to stop processing it. Email marcos@gmx.co.uk and we’ll act on it promptly. You can also complain to the ICO (ico.org.uk) if you think we’ve got something wrong.