Legal
Privacy Policy
What we collect when you use Podhewaley, why, and how it is protected.
Working version, last updated 25 September 2026. This text describes how the platform behaves today and is pending review by a lawyer before public launch.
What we collect
- Account details you give us: name, email address, mobile number and a password (stored only as a salted Argon2id hash, never in plain text).
- Your activity on the platform: bookings, projects, addresses you save and support requests.
- Security records: sign-in events, IP address and device type, kept in an append-only audit log.
- Your cart and wishlist, which are stored in your own browser until you sign in.
Why we use it
To run your account, fulfil bookings and orders, keep the platform secure, and contact you about things you asked for. We do not sell personal data. Marketing messages are sent only if you opt in, and you can withdraw consent at any time.
Cookies
Signing in sets strictly necessary, HttpOnly cookies that hold your session. They are not readable by scripts on the page and are removed when you sign out.
Sharing
A vendor or gardener you book sees only what is needed to serve you (name, contact and site address). Service providers such as hosting and messaging process data on our behalf under contract.
Your choices
You can ask to see, correct or delete your data, and to close your account. Use the Book an expert page to reach the Podhewaley team and mention your request.