Last updated: 31 October 2026
This policy explains what personal data untoldseasons.com collects, why, and what you can do about it. We keep it short because we collect very little.
Who we are
Untold Seasons is run by Fan Yang, based in Ireland. For the purposes of the GDPR, Fan Yang is the data controller for this website. You can reach us at hello@untoldseasons.com.
Our email list
If you sign up for updates, we store:
- your email address;
- the date and time you signed up and confirmed, and the IP address you used each time. This is our record that you asked to join.
We use this only to send you our own emails: garden notes and news about the shop. Our legal basis is your consent (Article 6(1)(a) GDPR). You won’t be added until you click the link in the confirmation email.
Every email has an unsubscribe link, and you can also just reply and ask. When you unsubscribe we stop emailing you straight away. If you’d like your details erased completely, tell us and we’ll do it. We don’t track whether you open our emails or which links you click.
We don’t sell, rent or share the list with anyone for their own marketing.
Who processes data for us
- Hetzner Online GmbH (Germany) hosts this website and the database the email list is stored in.
- MailPoet (part of Automattic) delivers our emails. To do that it receives your email address and the content of each email. Some of its processing may take place outside the EU. Its privacy notice explains how it protects that data.
- Zoho Corporation hosts our mailbox on its EU data centre. If you email us, your message is stored there.
Server logs
Like most web servers, ours keeps a log of requests: IP address, the page requested, the time, and your browser’s user agent. We use these logs only to keep the site running and secure, which is our legitimate interest (Article 6(1)(f) GDPR). They are deleted automatically after 30 days.
Visitor statistics
To see which pages people read, we use Umami, an open-source analytics tool that we run on our own server. Nothing is sent to a third party. It doesn’t use cookies, and it doesn’t store your IP address. For each page view it records the page, the site that sent you here, your browser, operating system and device type, and the country your visit came from (worked out from your IP address, which is then discarded). Visits are counted using a scrambled value that is reset regularly, so we can’t identify you or follow you across the web. We only ever look at the totals. If your browser sends a “Do Not Track” signal, your visits aren’t counted at all. Our legal basis is our legitimate interest in understanding which content is useful (Article 6(1)(f) GDPR).
Cookies
We don’t use analytics, advertising or tracking cookies, and our pages don’t load fonts, scripts or images from other companies. Our visitor statistics (above) run on our own server and don’t use cookies. The only cookies this site sets are strictly necessary ones for logging into the site’s admin area, which visitors never see.
Links to other sites, such as Amazon, take you to services with their own privacy policies.
Your rights
You have the right to access the data we hold about you, to correct it, to have it erased, to restrict or object to how it’s used, to receive a copy of it, and to withdraw your consent at any time. Withdrawing consent doesn’t affect anything we did before. Email hello@untoldseasons.com and we’ll reply within one month.
If you’re not happy with how we’ve handled your data, you can complain to the Data Protection Commission at dataprotection.ie.
Changes
If we change this policy, we’ll update the date at the top. If we change what we do with the email list, we’ll tell subscribers by email first.