Privacy and Cookie Policy

Last updated: 8 September 2026

This policy explains how MAX GROW LIMITED collects, uses, stores and shares personal information when you visit maxgrow.uk, place an order, create an account, subscribe to marketing or contact us. It also explains how we use cookies and the rights available to you under UK data-protection law.

1. Who we are

MAX GROW LIMITED, trading as “MaxGrow”, is the data controller for the personal information described in this policy, except where another organisation acts as an independent controller.

Company number: 13652679
Registered office: Unit B, Danes Road, Romford, Essex, England, RM7 0HL
Email: sales@maxgrow.uk
Telephone/WhatsApp: +44 7405 454074

2. Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact details: name, billing and delivery address, email address and telephone number;
• Order and transaction details: products viewed or purchased, order value, discounts, delivery status, returns, refunds and communications about an order;
• Account details: customer-account identifier, preferences and account activity. Authentication may be managed by Shopify, and we do not need access to your password;
• Payment information: payment status, method and transaction reference. Full card details are normally processed directly by our payment providers and are not made available to us;
• Communications: emails, WhatsApp messages, enquiries, reviews, complaints and information you choose to provide;
• Technical and usage information: IP address, browser, device, operating system, pages visited, referral source, cookie identifiers and interactions with the website; and
• Marketing preferences: whether you subscribed, consent records, email engagement and opt-out status.

We do not intentionally collect special-category information, such as health, biometric, religious or political information. Please do not send it unless genuinely necessary and requested.

3. How we collect information

We collect information directly from you at checkout, through forms, when you create an account, subscribe, contact us or return goods. We also collect limited information automatically through Shopify and cookies, and may receive information from payment providers, delivery carriers, fraud-prevention providers and other service providers involved in your transaction.

4. Why we use information and our lawful bases

• Orders, payment, delivery, accounts and returns: to take steps at your request and perform our contract with you;
• Customer service: to perform our contract and pursue our legitimate interest in responding to customers and improving service;
• Accounting, tax, consumer-law and regulatory records: to comply with legal obligations;
• Fraud prevention, security and enforcing our terms: to pursue our legitimate interests in protecting customers, our business and the website, and where necessary to comply with law;
• Service improvement and essential website operation: to pursue our legitimate interests in operating an efficient, secure store, provided those interests are not overridden by your rights;
• Email or electronic marketing: with your consent, or under the permitted existing-customer “soft opt-in” where applicable. You can unsubscribe at any time;
• Optional analytics, advertising and personalisation cookies: with consent where required; and
• Legal claims and official requests: to comply with legal obligations or pursue our legitimate interests in establishing, exercising or defending legal claims.

Where information is required to enter into or perform a contract, failing to provide it may mean we cannot accept, deliver or support your order.

5. Marketing

If you subscribe for a first-order discount, product updates or grow-room guides, we use your email address and related preferences to send that marketing. The discount may be subject to separate promotional terms.

You can unsubscribe using the link in any marketing email or by contacting us. Unsubscribing does not stop essential service messages about your orders or account. We may keep a minimal suppression record so we do not contact you again by mistake.

6. Cookies and similar technologies

Cookies are small files or identifiers stored on or accessed from your device. Shopify and our authorised providers may use them for the following purposes:

• Strictly necessary cookies: required for security, checkout, shopping basket, customer login, fraud prevention, privacy choices and core website functions. These do not require consent where legally exempt;
• Preference cookies: remember settings such as language, region and display choices;
• Analytics and performance cookies: help us understand visits and improve the store. This may include Google Analytics if and when we enable it; and
• Marketing cookies: measure campaigns, limit repeated advertising and support relevant advertising where enabled.

We ask for consent before using non-essential cookies where required by law. You can accept, reject or change optional cookies through the Cookie preferences link in the website footer. You can also control cookies in your browser, although blocking necessary cookies may prevent parts of the store from working.

Cookie names and lifetimes can change as Shopify and other authorised providers update their services. The current consent interface and browser storage provide more detail about cookies active on your device. Withdrawing consent does not affect processing that occurred before withdrawal.

7. Shopify

Our store is hosted by Shopify. Shopify processes personal information to provide the storefront, checkout, customer accounts, security and related services. For some activities Shopify acts as our processor; for certain enhanced or independent services it may act as a controller in its own right.

Read the Shopify Privacy Policy and use the Shopify Privacy Portal for information and requests relating to Shopify’s independent processing.

8. Who we share information with

We share personal information only where reasonably necessary, including with:

• Shopify and providers supporting hosting, checkout, customer accounts, security and store functionality;
• payment processors and banks to authorise payments, refunds and prevent fraud;
• delivery carriers, warehouses and fulfilment providers to deliver and return orders;
• email, customer-service and communication providers;
• analytics and advertising providers, such as Google if relevant services are enabled and the required consent has been obtained;
• professional advisers, accountants, insurers and IT/security providers;
• law-enforcement bodies, regulators, courts or other parties where required by law or necessary to protect legal rights; and
• a buyer, investor or successor in connection with a genuine sale, restructuring or transfer of the business, subject to appropriate confidentiality and data-protection measures.

We do not sell your personal information for money.

9. International transfers

Shopify and other providers may process information outside the United Kingdom. Where UK personal information is transferred to a country without UK adequacy regulations, we rely on an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful transfer mechanism. You may contact us for further information about relevant safeguards.

10. How long we keep information

We keep information only as long as reasonably necessary for the purpose collected, including legal, accounting, fraud-prevention and dispute-resolution needs. In general:

• order, payment, refund and tax records are normally retained for at least six years where company or tax law requires;
• customer-account information is retained while the account remains active and afterwards only where necessary;
• customer-service and complaint records are retained for as long as needed to resolve the matter and protect legal rights;
• marketing information is retained until you unsubscribe or we no longer need it, with a minimal suppression record kept where appropriate; and
• cookie and analytics information is retained according to the relevant cookie or provider setting.

We may retain information longer where a dispute, investigation, legal hold or statutory requirement applies. We securely delete or anonymise information when it is no longer needed.

11. Security

We use reasonable organisational and technical measures designed to protect personal information, and our providers use their own security controls. No online system is completely secure. Do not send full card details, passwords or other highly sensitive information by ordinary email or WhatsApp.

12. Your rights

Subject to conditions and exceptions in applicable law, you may have the right to:

• receive information about how we use your data;
• request access to your personal information;
• correct inaccurate or incomplete information;
• request deletion of information;
• restrict processing;
• receive certain information in a portable format;
• withdraw consent at any time where processing relies on consent; and
• complain to a supervisory authority.

Your right to object: You may object at any time to processing for direct marketing. You may also object to processing based on legitimate interests, although we may continue where we have compelling legitimate grounds or need the information for legal claims.

To exercise a right, email sales@maxgrow.uk. We may request proportionate information to verify your identity. We normally respond within one month, although the law permits an extension in some circumstances.

13. Automated decision-making

Payment and fraud-prevention providers may use automated tools to assess transactions. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on you. If this changes, we will provide the information required by law.

14. Children

Our store is not directed at children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, please contact us so we can investigate and delete it where appropriate.

15. Third-party links

Our website may link to third-party sites. Their privacy practices are controlled by them, so review their policies before providing personal information.

16. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.

17. Changes to this policy

We may update this policy to reflect operational, legal or regulatory changes. We will post the revised version here, update the date above and provide additional notice where required.