Privacy Policy - Jensplantbase

Jensplantbase ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are the data controller for the personal data we collect through this website.

1. Information We Collect

Account Information

When you create an account, we collect your email address, first name, and last name.

Profile Information

If you choose to complete your profile, we may collect additional information including your weight, height, age, gender, activity level, fitness goal, and unit preference. This information is optional and used to personalise your experience.

Payment Information

If you subscribe to a premium plan, payment is handled by a third-party payment processor. We do not store your full card number or payment credentials. We may receive billing confirmation details such as the last four digits of your card and your billing address for our records.

Newsletter Subscription

If you subscribe to our newsletter, we collect your email address and optionally your name. You can unsubscribe at any time.

Usage and Analytics Data

We collect anonymised data about how you interact with our website, including pages visited, time spent, and general location (country/region). This is collected via a third-party analytics provider and helps us improve the service.

Contact Enquiries

When you contact us via the contact form, we collect your name, email address, subject, and message content.

2. How We Use Your Information

We use your personal data for the following purposes:

To create and manage your account (legal basis: contract)
To process subscription payments (legal basis: contract)
To personalise your experience based on your profile (legal basis: contract / legitimate interest)
To send transactional emails such as account confirmations and subscription receipts (legal basis: contract)
To send marketing newsletters, if you have opted in (legal basis: consent)
To respond to your contact enquiries (legal basis: legitimate interest)
To analyse site usage and improve our service (legal basis: legitimate interest)
To comply with legal obligations (legal basis: legal obligation)

3. Third-Party Service Providers

We share your data with trusted third-party providers only where necessary to operate our service. These providers act as data processors on our behalf and are contractually required to protect your data. The categories of providers we use include:

Authentication and database hosting provider
Payment processing provider
Email delivery provider (for transactional and marketing emails)
Website analytics provider
Hosting and content delivery provider

We do not sell your personal data to third parties.

4. International Data Transfers

Some of our third-party service providers are based outside the UK or European Economic Area. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant data protection authority, to protect your data to the same standard as required under UK GDPR.

5. How We Use Cookies

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off. They are set in response to actions such as logging in or managing your session.

Analytics Cookies

These cookies allow us to count visits and measure site performance. They help us understand which pages are most popular and improve the overall experience. Data collected is anonymised.

Preference Cookies

These cookies remember your preferences such as dismissed popups or UI settings, to improve your experience on return visits.

Essential cookies are set automatically as they are required for the site to function. Non-essential cookies (analytics and preference) are only set with your consent, in accordance with PECR. You can manage your cookie preferences at any time.

6. Email Marketing

We will only send you marketing emails if you have given your explicit consent by subscribing to our newsletter, in accordance with the Privacy and Electronic Communications Regulations (PECR). You can withdraw consent and unsubscribe at any time via the link in any marketing email or through your account settings.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, payment records may be retained for up to 7 years).

Newsletter subscriber data is retained until you unsubscribe or request deletion.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your personal data in certain circumstances
Right to restriction — request that we limit how we use your data
Right to data portability — request your data in a machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at support@jensplantbase.com. We will respond within 30 days.

9. Right to Complain

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

ICO website: ico.org.uk — Helpline: 0303 123 1113

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is stored securely and access is restricted to authorised personnel only.

Despite these measures, no method of transmission or storage over the internet is completely secure. If you believe your account has been compromised, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Continued use of Jensplantbase after changes take effect constitutes your acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of England and Wales.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@jensplantbase.com

Last updated: January 2026