Privacy
Last updated: 26 October 2026
The short version
We ask for your name, email and — if we are sending it to you — your address. We use those to pick, pack and deliver your order. We never see your card details. We do not track you around the internet, we do not use analytics, and we do not sell anything about you to anybody. If you want your details deleted, email and we will delete them.
Who is responsible for your information
Plot 48 is a trading name of Michael Wells, a sole trader, of New Farmhouse, Ballaquiggin Manor, Balnahowe, Santon, Isle of Man, IM4 1HW. He is the data controller for the information described here. Contact admin@plot48.co.uk.
The Isle of Man applies the GDPR through its own data protection legislation, so the rights set out below are real and enforceable.
What we collect, and why
| What | Why | Our lawful basis |
|---|---|---|
| Your name and email | To confirm your order and tell you when it is on its way | Performance of a contract |
| Your delivery address | To get the order to you. Not asked for if you are collecting | Performance of a contract |
| What you ordered, and what you paid | To pick the right thing, and to keep accounting records | Contract, and legal obligation for the records |
We ask for the least we can. If you collect from the farm, the site does not ask for your address at all. There is no mailing list on this site; we will not email you about anything but your order.
Your card details
We never receive them. Payment is taken by PayPal, on PayPal's own page or in its own window, whether you pay by PayPal, by card, or with Apple Pay or Google Pay. Your card details go to PayPal and not through this website; we have no way to see or store them.
PayPal tells us only that a payment of a given amount succeeded against your order reference. It handles your payment information under its own privacy policy and the card industry's security standards.
Who else sees your information
- PayPal — processes every payment: PayPal, card, Apple Pay and Google Pay.
- Our hosting provider — the website runs on Cloudflare, which necessarily handles requests to the site, including your IP address, in order to serve it.
- Our email provider — the order confirmation and the on-its-way email are sent through Resend, and messages to and from admin@plot48.co.uk pass through the mailbox's provider.
- Whoever delivers your order — if we post it, your name and address go on the parcel.
That is the whole list. We do not sell your information, we do not share it for advertising, and nobody buys access to our customers.
Cookies and what the site stores
We set no tracking cookies, and we use no analytics. There is no advertising pixel on this site and nothing follows you to other websites.
Your basket exists only while the page is open. It is not written to your device and it does not survive closing the tab; nothing about it leaves your browser until you check out.
When you choose to pay, PayPal's buttons load and PayPal may set cookies of its own which are necessary to process the payment securely. Browsing the shop does not involve PayPal.
How long we keep things
We keep order records for as long as we are required to for tax and accounting purposes, and then delete them. If you ask us to delete your details and we are not legally required to keep them, we will.
Your rights
You can ask us to:
- tell you what we hold about you, and give you a copy
- correct anything that is wrong
- delete it, where we are not required to keep it
- give you your data in a portable form
Email admin@plot48.co.uk. There is no charge, and we will respond within one month.
If you are not happy with how we have handled your information, you can complain to the Isle of Man Information Commissioner. We would rather you told us first so we can fix it, but it is your right either way.
Changes
If we change what we do with your information we will update this page and change the date at the top.