What we hold about you · reviewed 14 March 2026
Your Data
In plain English
- Four things, no more: the address you paid from, the fact that the order settled, whatever you and a grower wrote to each other, and ordinary server logs.
- Card numbers live at the processor and never travel to us. Your broker login, your balance and your trades are invisible from here.
- None of it is sold, rented or handed to another business, and marketing mail goes only where it was asked for.
- Three companies touch a fragment each, because the grove cannot run without them: the processor, the host and the mail carrier.
- One message and we show you the lot, correct it, or delete it. No reason required, no retention team to argue with.
The box is a summary. The lettered sections below are the rule itself, and where the two differ the sections win.
The short version
Eabotnica sells one compiled file against one payment. That transaction needs an email address and a record that money arrived, and almost nothing else, so almost nothing else is what we keep. The sections below are the full inventory rather than a summary of one.
What actually reaches us
- Out of a purchase. Your name, your address and your card are typed into the processor’s own form. What travels back to this side is the settled order and the email address attached to it. The card number reaches the processor and stops dead there.
- Out of your messages. The thread itself and the address it arrived from, so a grower can answer you and pick the conversation up again weeks later.
- Out of the server. Which pages were asked for, a coarse location guessed from the network address, the browser and the page that referred you — written automatically, as every web server writes them, to keep the grove standing and to notice abuse.
What never reaches us
Nothing whatever about your trading. Not the broker login, not the balance, not a single position. The organism is a compiled file that runs on your machine against your broker; it phones nothing home, and there is no channel by which it could.
Why each item is held, and for how long
| Held | Because | Until |
|---|---|---|
| The settled order | It opens your seed packet and keeps the harvest page serving it for the whole of the term. It is also the sale record that tax and accounting rules oblige us to keep. | The years the tax rules of our jurisdiction require. |
| Your email address | So a grower can reply about an organism you bought and send a notice that concerns that order — nothing else is sent to it. | Alongside the order record. |
| The correspondence | So the thread makes sense when you write again about the same organism months later. | While either side might still need it, then deleted. |
| Server logs | Keeping the site up, tracing a fault, and noticing someone probing it. | Overwritten on a cycle measured in weeks. |
Marketing mail goes to people who asked for it, which at the time of writing is nobody at all. Personal data is never passed to another business, for money or for any other consideration.
The three companies that see a fragment
The grove cannot run without them: the company that takes the card payment, the company that hosts the site, and the company that carries our email. Each is shown the piece its own job requires and no more than that. Beyond those three, data leaves here only where a law compels it.
Asking us what we have, and telling us to delete it
Write once to [email protected] and, so far as the law where you live entitles you, we will show you what is held, correct whatever is wrong, erase it, stop using it, or hand you a copy to take elsewhere. You owe us no explanation and you will meet no form, no retention offer and no delay invented to wear you down.
Two limits, stated rather than buried
- Where tax law obliges us to keep the record of a sale, that record survives a deletion request.
- Erasing your data neither extends a licence nor brings an expired one back to life.
Crossing borders, and how the little we hold is kept
Some processing, at those three companies included, may happen outside the country you live in. What protects it is unremarkable rather than exotic: traffic moves encrypted, the handful of people who can reach the records are the ones who could not do the work otherwise, and the secrets sit somewhere other than the database holding orders. Perfect security is not a thing that exists, and a page claiming to have achieved it would be lying to you.
Nobody under eighteen
This grove is for adults, and nothing here is knowingly collected from a minor. If you believe we hold something belonging to one, say so and it goes.
Cookies, and where to write
Cookies have their own document, the Cookie Notice. Everything else about your data, requests included: [email protected].