Free UK delivery on every mystery pot — no minimum spend.10% off your first order — new customers only.Free UK delivery on every mystery pot — no minimum spend.10% off your first order — new customers only.

We protect your privacy as fiercely as we protect our ingredients.

Just as we're careful about what goes into every jar we make, we're careful about what we do with the information you share with us. This page explains, plainly, what we collect, why, and what rights you have over it. If anything here is unclear, email us at info@petalby.com and we'll explain it properly — a policy that isn't understandable isn't really a policy.

Who We Are

Petalby is a small, independent brand based in the United Kingdom. For the purposes of data protection law, Petalby is the "data controller" of the personal information described below.

What Data We Collect

Information you give us directly:

Information collected automatically:

Why We Use It

We do not sell your data. We do not share it with third parties for their own marketing purposes.

Cookies

Our website uses a small number of cookies:

Essential cookies — required for the site and checkout to function (for example, remembering what's in your basket). These cannot be switched off.

Analytics cookies — help us understand how the site is used, in aggregate and anonymised form.

You can control or delete cookies at any time through your browser settings. Blocking essential cookies may affect your ability to use the checkout.

How Long We Keep It

We keep order and account information for as long as necessary to fulfil legal, accounting, and tax obligations — typically up to seven years for financial records. Newsletter contact details are kept until you unsubscribe. Enquiry correspondence is retained only as long as reasonably needed to resolve and follow up on your query.

Your Rights

Under UK GDPR, you have the right to:

To exercise any of these rights, contact us at info@petalby.com. We'll respond within one month, as required by law.

Changes to This Policy

If this policy changes materially, we'll update this page and note the date below. We won't quietly change how we handle your data without telling you.

Last updated: 4 August 2026