Privacy policy

Last updated: January 21, 2026

This Privacy Policy describes how Epic Gardening Inc. and its subsidiaries and affiliates (“Epic Gardening”, “we”, “our” or “us”) collect, store, use and disclose personal data of individuals (“you” or “your”) who use our Services as detailed below:

1. Visit, shop, or otherwise interact with us, including at our websites available at https://www.epicgardening.com/ and https://shop.epicgardening.com/ – the former our “Site”, the latter our “Shop”; collectively the “Sites”);
2. download or otherwise interact with our mobile applications (the “Apps”);
3. interact and/or communicate with our chatbots, blogs or other similar forums, online ads and content, events, promotions, surveys, emails or other communications under our control (“interaction with us”), including all of our social media channels (i.e., YouTube, Instagram, TikTok, Facebook, etc.).

Specifically, this Privacy Policy describes our practices regarding:

1. Data Collection
2. Data Uses & Business Purposes
3. Data Location
4. Data Retention
5. Data Disclosure
6. Cookies and Tracking Technologies
7. Communications
8. Data Security
9. Data Subject Rights
10. Sale/Sharing/Targeted Advertising
11. Additional Information and Contact Details

We respect your privacy and are strongly committed to making our practices regarding your personal data transparent and fair.

Please read this Privacy Policy carefully and make sure that you fully understand and agree to it.

You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. However, please keep in mind that without it, we may be unable to provide you with the full range of our Services or deliver the best user experience. If you prefer not to share your personal data or have it processed by us or any of our Service Providers (defined in Section 5 below), please refrain from providing it or using our Services. You may also submit a request to exercise your rights, as explained in Section 9.

1. Data Collection

When we use the term “personal data” (or “personal information” under certain data protection laws such as the California Consumer Privacy Act (CCPA)) in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household. It does not include aggregated, de-identified or anonymized information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual.

Specifically, we collect or generate the following types of personal data through the Services:

• Direct interactions and communications with us: personal data contained in any forms and inquiries that you may submit to us, including form submissions, emails, as well as recordings of calls and chat conversations (e.g., for customer service and support).
• Data collected from your use of the Services: personal data we collect when you use the Services, including making a purchase, or creating an account. This may include account-related information, contact details, shipping address and payment method used for your order (e.g., credit card or third-party payment services like PayPal), your purchasing activity, including interests and order history.
• User-generated content data, such as photos, images, music, videos, comments, questions, messages, works of authorship, and other content or information (as well as associated metadata) that you generate, transmit, or otherwise make available on the Services.
• Usage and Device Information: when you use our Services, we may collect certain connectivity, technical and aggregated usage data. This may include your IP address and non-precise location derived from it, browsing history and interaction with our Services, and device information (including operating system, device ID, browser version, language settings used, currency chosen, cart activity), activity logs, cookies and pixels installed on your device, and inferred or presumed data generated from your use of the Services. Additionally, when you use certain of our Services, you may provide your garden location to us, in connection with our garden planner offering, which enables us to provide relevant gardening advice to you.

We collect the above personal data either through your interaction with us or our Services, automatically through cookies and other tracking technologies (as further detailed in Section 6 below), from our Service Providers (as further detailed in Section 5 below), or through third party services, social media, and other business initiatives.

For the purposes of the CCPA, in the last twelve (12) months, we have collected the following categories of personal information, as defined in the CCPA: identifiers; commercial information; customer record information; internet or other electronic network activity information; geolocation data; visual or similar information and inferences.

We may also combine the personal data outlined above with personal data that we receive from other sources, such as:

• Our Marketing partners, such as joint marketing partners and event co-sponsors.
• Our affiliate partners, such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.
• Third-party services, such as social media services. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.

2. Data Uses & Business Purposes

We use personal data as necessary for the performance of our Services (“Performance of a Contract”); to comply with our legal and contractual obligations (“Legal Obligations”); to support our legitimate interests in maintaining and improving our Services, e.g., understanding how they are used and how our campaigns and other activities are performing; gaining insights which help us dedicate our resources and efforts more efficiently; promoting our Services; providing customer services and technical support; and protecting and securing our Services, ourselves and the organizations and individuals we engage with (“Legitimate Interests”); and with your consent (“Consent”) such as to inform you about our offers and products in which you have expressed interest.

If you interact with us from or reside or are using the Services in a territory governed by privacy laws which determine that Consent is the only or most appropriate legal basis for the processing of personal data as described in this Privacy Policy (either in general, based on the types of personal data you expect or elect to process or have processed by us or via the Service, or due to the nature of such processing), your continued interaction with us and/or use of our Services means that you have the opportunity to read and that you accept this Privacy Policy and will be deemed as your Consent to the processing of your personal data for all purposes detailed in this Privacy Policy, unless applicable law requires a different form of consent. If you wish to withdraw such consent, please contact us at privacy@epicgardening.com.

Specifically, we collected and used personal data in the last twelve (12) months for the following purposes (and in reliance on the legal bases for processing noted next to them, as appropriate):

Purpose	Legal basis for processing
To facilitate, operate, enhance, interactions with us and provide usage of our Services	● Performance of a Contract ● Legitimate Interests
To provide you with optimal assistance and support, including analysing and improving our customer support services	● Performance of a Contract ● Legitimate Interests ● Consent
To develop, customize and improve the Services and enhance the user experience, including based on common or personal preferences, experiences, difficulties and feedback, including through the utilization and optimization of Artificial Intelligence and Machine Learning capabilities	● Performance of a Contract ● Consent ● Legitimate Interests
To contact you with general or personalized service-related messages (such as account/password-retrieval, billing or customer service); or with promotional messages that may be of specific interest to you (as further described in Section 7 below); and to facilitate, sponsor and offer certain events and promotions	● Performance of a Contract ● Consent (as required) ● Legitimate Interests
To support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity	● Performance of a Contact ● Legal Obligations ● Legitimate Interests
To create aggregated statistical data, inferred non-personal data or anonymized or pseudonymized data (rendered non-personal), which we or our business partners may use to provide and improve our respective services or for any other business purpose	● Legitimate Interests
To enforce our Terms, resolve disputes, and protect our business interests and the interests and rights of third parties	● Legitimate Interests
To comply with our contractual and legal obligations and requirements, and maintain our compliance with applicable laws, regulations and standards	● Performance of a Contract ● Legal Obligations ● Legitimate Interests

3. Data Location

We and our Service Providers (defined below) maintain, store and process personal data in the United States, the UK, and other locations as reasonably necessary for the proper performance and delivery of our Services, and interactions with us or as may be required by law.

While privacy laws may vary between jurisdictions, we and our affiliates and Service Providers are each committed to protect personal data in accordance with this Privacy Policy, customary industry standards, and such appropriate lawful mechanisms and contractual terms requiring adequate data protection, regardless of any lesser legal requirements that may apply in the jurisdiction from which such data originated. This includes implementation of appropriate transfer mechanisms as applicable and necessary.

4. Data Retention

We retain personal data for as long as we deem it as reasonably necessary in order to maintain and expand our relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e., as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether those purposes can be achieved through other means, as well as applicable legal requirements.

Please note that we do not process your payment information, only your chosen payment method and a token of such payment information (which cannot be used to reidentify it). Payment and payment information, is facilitated and processed by a third-party that is PCI certified.

You also have the right to request the deletion of your personal data at any time, as further described in Section 9 below.

If you have any questions about our data retention policy, please contact us at privacy@epicgardening.com.

5. Data Disclosure

We may disclose your personal data in the following instances:

Legal Compliance: in exceptional circumstances, we may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations, with or without notice to you. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our Services.

Service Providers: we engage selected third-party companies and individuals to perform services on our behalf or complementary to our own. Such service providers may include hosting services, manufacturing, printing and shipping services, payment processing, data security services, billing and payment processing services, fraud detection and prevention services, web and product analytics, e-mail distribution and monitoring services, session or activity recording services, chatbot services, performance measurement, data optimization and marketing services, social and advertising networks, event production and hosting services, e-mail, voicemails, support, enablement and customer relation management systems, and our legal, financial, insurance, and compliance advisors (collectively, “Service Providers“). Our Service Providers may have access to personal data, depending on each of their specific roles and purposes in facilitating and enhancing our Services, and may only use the data as determined in our agreements with them.

SMS Campaigns: We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

Sharing your Feedback or Recommendations: If you submit a public review or feedback, note that we may (at our discretion) store and present your review to other users of our Services. If you wish to remove your public review, please contact us at privacy@epicgardening.com.

Partnerships/ Advertising partners: Our third-party advertising partners may use cookies and similar technologies to collect information about your interactions with us, the Sites and the Apps and use that information to serve online ads that they think will interest you. We may also share information with these companies to facilitate interest-based advertising to you or similar individuals on other online platforms. We may also share your personal data with third parties with whom we co-sponsor events, and with whom we jointly offer products or services.

We are affiliated with CMI Marketing, Inc., d/b/a Raptive (“Raptive”) for the purposes of placing advertising for the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive’s data usage, please visit: https://raptive.com/creator-advertising-privacy-statement.

Protecting Rights and Safety: we may share your personal data with others if we believe in good faith that this will help protect our rights, property or personal safety of that of any of our users, visitors, or any members of the general public.

Third-Party Websites and Services: our Services may include links to third-party websites, and integrations with third-party services. Such websites and third-party services, and any information you process, submit, transmit or otherwise use with such websites and third-party services, are beyond the scope of our Terms and Privacy Policy and will therefore be governed by such third-party’s terms and privacy practices and policies, and not by this Privacy Policy. We encourage you to carefully read the terms and privacy policies of such websites and third-party services.

Our Subsidiaries and Affiliated Companies; Change of Control: we may share personal data internally within our group companies (including Epic Gardening, Inc. (USA), Botanical Interests LLC (USA), Botanical Interests Online LLC (USA) and Growing Interactive Limited (UK)) for the purposes described in this Privacy Policy. In addition, should we or any of our affiliates undergo any change in control or ownership, including by means of merger, acquisition or purchase of assets or bankruptcy, or will be found eligible for a governmental grant, your personal data may be shared (to the extent necessary and customary) with the parties involved in such an event. If we believe that such an event might materially affect your personal data then stored with us, we will notify you of this event and the choices you may have via any of the means of communication available to us.

Payments: Any payment card information that you use to make a purchase on our Services is collected and processed directly by the purchase platform where applicable, e.g. Shopify, and by the payment service provider that is PCI-certified. They then share with us what your chosen method of payment was.

Shopify: Our Store operates on the Shopify platform. You can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.

Additional Sharing: we may share your personal data in additional manners, pursuant to your request or explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.

When we disclose personal data for a purpose listed above, we enter into a contract that describes the purpose and requires the recipient to both keep that personal data confidential and not use it for any purpose except in accordance with our contracts with them.

For the purposes of the CCPA, in the past twelve (12) months, we may have disclosed the following categories of personal information to the recipients listed above: identifiers; commercial information; customer record information; internet or other electronic network activity information; geolocation data; visual or similar information, and inferences. We did so in pursuit of the business and commercial purposes described in Section 2 above.

6. Cookies and Tracking Technologies

Our Sites and Apps, as well as certain interactions with us utilize “cookies”, anonymous identifiers, pixels, container tags and other technologies in order to provide and monitor them and our Services, ensure that they perform properly, analyse our performance and marketing activities, for product development and improvements, and to personalize your experience.

To learn more about our practices concerning cookies and online tracking, please visit our Cookie Policy.

7. Communications

We engage in service and promotional communications, through social media, e-mail, phone, surveys, SMS and notifications.

Service Communications: we may contact you with important information regarding our Services. For example, we may send you notifications (through any of the means available to us) of order summaries and shipping updates, to inform you of changes or updates to our Services, billing issues, etc. Please note that you will not be able to opt-out of receiving certain service communications which are integral to provision of the Services (like shipment updates or billing notices, payment issues etc.).

Promotional Communications: subject to applicable regulations, we may also notify you about new features, current offerings, events, special opportunities or any other information we think you will find valuable. We may provide such notices through any available contact means (e.g., SMS, mobile notifications or e-mail), through the Services, or through our marketing campaigns on any other sites or platforms. By opting in to receive promotional communications through SMS, you agree to our SMS terms of service. The terms also include important information relating to your ability to opt out of the text messaging services at any time.

Please note that we may use information from previous orders or your abandoned cart to send you personalized emails. Information used for this purpose will be saved and deleted in accordance with our data retention practices described in Section 4 above.

If you wish not to receive such promotional communications via SMS, notifications or e-mail, you may notify us at any time by e-mailing us at privacy@epicgardening.com, or by following the "unsubscribe", "stop" or "change e-mail preferences" instructions contained in the promotional communications you receive.

8. Data Security

In order to protect personal data held with us, we and our Service Providers implement industry standard physical, procedural and technical measures designed to secure personal data and minimize the risks of theft, damage, loss of information, or unauthorized access or use of information. However, we cannot guarantee that our Services will be immune from any wrongdoings, malfunctions, unlawful interceptions or access, or other kinds of abuse and misuse. If there is any unexpected activity or inaccurate information or if you have reason to believe that your information is no longer secure, or if you have any questions about our security, please contact us by e-mail at privacy@epicgardening.com.

9. Data Subject Rights

Individuals have rights concerning their personal data. Please contact us by e-mail at privacy@epicgardening.com if you wish to exercise your privacy rights under any applicable law, including the CCPA and the EU or UK General Data Protection Regulations (GDPR).

Such rights include, to the extent available to you under the laws which apply to you, but are not limited to: the right to know/request access to the personal data collected, and request information regarding the sources from whom the personal data was collected, the purposes of processing, the categories of third parties with whom we have shared personal data, etc.; to request rectification or erasure of your personal data collected, or to restrict or object to such personal data processing (including, for US states residents, the right to direct us not to “sell” or “share” your personal information, or process it for “targeted advertising”, as explained below), to obtain a copy or port such personal data, or the right to equal services and prices (e.g. freedom from discrimination).

To the extent applicable to you, you may also designate an authorized agent, in writing or through a power of attorney, to request to exercise your privacy rights on your behalf. The authorized agent may submit a request to exercise these rights by emailing us.

When you or an authorized agent asks us to exercise any of your rights under this Privacy Policy or applicable law, we may request you to provide us with certain additional information to verify your identity, prevent the disclosure of personal data relating to other individuals, and better understand the nature and scope of your request. Such additional data will be then retained by us for legal purposes (e.g. as proof of the identity of the person submitting the request, or proof of request fulfillment), in accordance with Section 4 above.

We will not charge a fee to process or respond to your verifiable privacy request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. Alternatively, we may refuse to comply with your request in such circumstances.

You may also have the right to lodge a complaint with the relevant supervisory authority, applicable to the processing of your personal data.

Each right may be executed to the extent available to you under the laws which apply to you and is subject to various exclusions and exceptions under applicable laws.

10. Sale/Sharing/Targeted Advertising

Under some US data protection laws, our disclosure of certain internet activity and device information to third parties may be considered a “sale” or “sharing” of personal information or processing of personal information for “targeted advertising” (as such terms are defined in applicable data protection laws). We do so in pursuit of the business and commercial purposes described in Section 2 above.

For the purposes of the CCPA, in the last twelve (12) months we have "sold" or "shared" internet or other electronic network activity information, geolocation data, and commercial Information with our analytics and advertising partners. We have not knowingly sold or shared the personal information of individuals under the age of 16.

11. Additional Information and Contact Details

Updates and amendments: we may update and amend this Privacy Policy from time to time by posting an amended version on our Services. The amended version will be effective as of the date it is published. We will provide prior notice if we believe any substantial changes are involved via any of the communication means available to us. After such notice period, all amendments shall be deemed accepted by you.

External links: while our Services may contain links to other websites or services, we are not responsible for their privacy practices and we encourage you to pay attention and to read the privacy policies of each and every website and service you visit. This Privacy Policy applies only to our Services.

Our Services are not designed to attract children under the age of 16: we do not knowingly collect personal data from children and do not wish to do so. If we learn that a child is using the Services we will attempt to prohibit and block such use and to promptly delete any personal data stored with us which we deem to relate to such child. If you believe that we might have any such data, please contact us at privacy@epicgardening.com.

US Privacy Matters: If you have any questions or inquiries regarding our US privacy practices, or would like to exercise your rights under any applicable US state privacy laws, you can contact us by email at privacy@epicgardening.com or by post at:

Epic Gardening Inc. (Attn: Legal)
525 Burbank St., Unit 1
Broomfield, CO 80020, United States

Questions, Concerns or Complaints: if you have any comments or questions regarding our Privacy Policy, or if you have any concerns regarding your personal data held with us, or if you wish to make a complaint about how your personal data is being processed by us, you can contact us at privacy@epicgardening.com.