Last updated: 29 October 2026
This policy explains what personal information World of Mosses collects when you visit world-of-mosses.co.uk, place an order, collect from us or message us, and what we do with it.
Who we are
World of Mosses is run by Michal Kwil, a sole trader trading as World of Mosses, at 7 York Place, Kirkcaldy KY1 3HN, United Kingdom. We are the controller of your personal data. If you have a question about this policy or your data, email us or call or text 07736 304055.
What we collect
- Order details: your name, delivery and billing address, email address, phone number (if you give it), what you ordered and how much you paid.
- Payment details: card, Apple Pay, Google Pay and Klarna payments are handled by Stripe (and by Klarna if you choose it). We never see or store your full card number.
- Account details: if you create an account, your login email, a securely stored password and your order history.
- Messages: what you send us by WhatsApp, text, phone or email, for example a question about a plant or a request to book a visit.
- Technical data: your IP address, browser type and the pages you open, recorded by our hosting provider in security logs, plus the cookies described below.
Why we use it
| Purpose | Legal basis |
|---|---|
| Taking payment, packing and posting your order, arranging collection, sending order and delivery emails | Performing our contract with you |
| Answering your questions and booking visits | Our legitimate interest in replying to you, or steps you ask for before ordering |
| Keeping sales records for HMRC | Legal obligation |
| Preventing fraud and keeping the website secure | Legitimate interests |
We do not send marketing emails unless you have asked to receive them, and we never sell your data.
Who we share it with
We share only what each service needs to do its job:
- Stripe Payments Europe processes card and wallet payments and checks them for fraud.
- Klarna handles the payment if you choose to pay with Klarna.
- Royal Mail receives your name and address to deliver your parcel.
- Hostinger hosts the website and its database.
- WhatsApp (Meta) carries any messages you send us through WhatsApp.
- Google Fonts and unpkg supply the website’s fonts and icons, so your browser sends them your IP address when a page loads.
Some of these companies process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK’s adequacy regulations or by the UK International Data Transfer Agreement or Addendum.
Cookies
We use only cookies the shop needs to work: they keep your basket, your login and your checkout session, and Stripe uses cookies to help prevent fraud during payment. We do not use advertising or analytics cookies. You can delete cookies in your browser settings, but the basket and checkout will not work without them.
How long we keep it
- Orders and sales records: 6 years after the end of the tax year, as HMRC requires.
- Customer accounts: until you ask us to close the account.
- Messages: up to 2 years after our last conversation, unless they relate to an order.
- Hosting security logs: a few weeks.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data;
- correct it;
- delete it;
- restrict how we use it;
- send it to you in a portable format.
You can also object to how we use it. To do any of this, email us. We will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If we change this policy, we will update the date at the top of this page.