Privacy Policy

Who is responsible for your information

Suburban Plenty (suburbanplenty.com) is run by an individual established in Spain, who is the controller of the personal information described in this policy:

• Controller: YUSEF MANKOU
• NIF: Y8742976E
• Postal address: C. de Illescas, 79, Latina, 28024 Madrid
• Email for privacy questions and requests: privacy@suburbanplenty.com

We have not appointed a data protection officer. Because the controller is established in Spain, the EU General Data Protection Regulation (GDPR) and Spain’s data protection law (Ley Orgánica 3/2018, LOPDGDD) apply to this processing, wherever you live.

Summary

• Controller: YUSEF, contact privacy@suburbanplenty.com.
• Purposes: running a secure website, sending the free guide you request, and sending marketing emails only if you opt in.
• Legal bases: providing the guide you asked for, your consent for marketing emails, our legitimate interests (site security and abuse prevention) and our legal obligations.
• Recipients: our service providers Hostinger (hosting) and MailerLite (email). We do not sell your information or share it for advertising.
• Your rights: access, correction, deletion, restriction, objection, portability and withdrawal of consent, and a complaint to the Spanish Data Protection Agency (AEPD). Details below.

What we collect, why, and our legal basis

• Visiting the website. Our hosting provider, Hostinger, automatically processes technical information such as your IP address, browser type, the page requested and the date and time, in server and security logs and in its content delivery network. We use this to deliver the site, keep it secure and fix problems. Legal basis: our legitimate interest in running a secure, working website (GDPR Art. 6(1)(f)).
• Spam and abuse protection on our form. To limit repeated attempts, our server briefly keeps a one-way, scrambled version of your IP address for about 10 minutes. The IP address itself is not stored. Legal basis: our legitimate interest in protecting the form from abuse (GDPR Art. 6(1)(f)).
• Requesting the Free Plant Guide. The sign-up form is our own form. Before you submit it, it does not load MailerLite or Google code. When you submit it, our server sends your email address to MailerLite, our email service provider. Our form does not send your IP address to MailerLite. MailerLite then sends you a confirmation email (double opt-in). After you confirm, you can download the guide on our website, and we send you a separate Free Plant Guide email with a link to download it. Legal basis: providing the free guide you asked for (GDPR Art. 6(1)(b)).
• Marketing emails (optional). We send occasional Suburban Plenty emails with gardening tips, new guides and product updates only if you tick the optional “Email updates” box. It is unchecked by default, and you do not need to tick it to get the guide. When you tick it, MailerLite records where and when you gave consent and which version of the form you used. Legal basis: your consent (GDPR Art. 6(1)(a)), which is also the prior express authorization that Spanish law requires for commercial emails (LSSI-CE Art. 21).
• Withdrawing marketing consent. You can withdraw consent at any time with the unsubscribe link in any of our emails or by emailing us. This does not affect emails sent before you withdrew. Leaving the box unticked on a later sign-up does not withdraw consent you gave before.
• Consent and unsubscribe records. We keep a record of your consent, and, if you unsubscribe, a minimal record of your email address and unsubscribe status. This lets us show that you agreed and make sure we don’t email you again. Legal basis: our legitimate interest in demonstrating compliance and respecting your choices (GDPR Art. 6(1)(f)).
• Email delivery and tracking. MailerLite records the dates and times of your sign-up and confirmation. When you click the confirmation link, your browser connects to MailerLite, which receives the usual technical information, such as your IP address. Open tracking is turned off for the Free Plant Guide email, and we don’t add campaign tracking (UTM) tags to its links. MailerLite may still record when you click a link in one of our emails. The confirmation email is sent through MailerLite’s standard double opt-in feature. We have not been able to confirm its tracking settings, so MailerLite may record whether you open that email and when you click its confirmation link. Legal basis: our legitimate interest in delivering the emails you asked for and running the email service reliably (GDPR Art. 6(1)(f)).
• When you contact us. If you email us, we use your email address and message to reply and to keep a record of the request. Legal basis: our legal obligation to handle data protection requests (GDPR Art. 6(1)(c)), or otherwise our legitimate interest in answering your message (GDPR Art. 6(1)(f)).

Where we rely on legitimate interests, you can object at any time (see “Your rights”).

Do you have to give us your information?

No. But we need your email address to send you the free guide; without it, we can’t send it. The “Email updates” box is optional.

Cookies and similar storage

Our public pages do not set cookies for visitors who are not logged in. WordPress may store a small technical value in your browser for the current session to check emoji support; it does not identify you. Site administrators who log in receive login cookies. We do not use analytics or advertising tools such as Google Analytics or advertising networks.

Who receives your information

We share personal information only with service providers that process it on our behalf and under our instructions, and only as needed:

• Hostinger (HOSTINGER, UAB, Lithuania): website hosting, content delivery and our email accounts.
• MailerLite: subscriber records, confirmation and guide emails, and marketing emails if you opt in. MailerLite processes subscriber data as our processor. It may separately act as a controller for certain service, account, operational or usage data under its own privacy terms.

We may also disclose information where the law requires it. We do not sell your personal information, and we do not share it for advertising. See the MailerLite privacy policy and the Hostinger privacy policy for how they handle data.

International transfers

Our providers may process personal information outside the European Economic Area, for example on servers or through content delivery in other countries. Where they do, they state that they rely on safeguards recognized by the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You can ask us for more information about these safeguards.

How long we keep information

• Subscribers who opted in to marketing emails: for as long as you stay subscribed, subject to periodic review and any legal obligation to keep certain records. If you unsubscribe, we may keep a minimal record of your email address and unsubscribe status so we don’t email you again.
• Subscribers who only requested the free guide: we review the record for deletion after 90 days from when you confirmed your sign-up.
• Sign-ups that are never confirmed: we review the unconfirmed record for deletion after 30 days from when you signed up. You can ask us to delete it sooner at any time.
• How these reviews work: deletion is not automatic. We review records by hand and delete those we no longer need. We don’t select subscribers who opted in to marketing for these reviews, and we may keep a record longer where the law requires it or to respect an unsubscribe request. These reviews take place once a month, starting in November 2026, the first month in which any record can reach one of the review points above.
• Anti-abuse records: the scrambled IP value used to limit repeated attempts is kept for about 10 minutes.
• Server logs: for the limited period our hosting provider keeps them for security and operation.
• Emails you send us: for as long as needed to answer you and keep a record of the request, including any period in which we may need to show how we handled it.

Your rights

You have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• have your information deleted;
• restrict how we use it;
• object to processing based on our legitimate interests, and object at any time to direct marketing;
• receive information you gave us in a portable format; and
• withdraw consent at any time, without affecting processing before you withdrew.

To exercise these rights, email privacy@suburbanplenty.com or write to C. de Illescas, 79, Latina, 28024 Madrid. We may need to confirm your identity before acting on a request. To stop marketing emails, you can also use the unsubscribe link in any of our emails.

If you think we have not handled your information properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). If you live or work in another EU or EEA country, you can also complain to the data protection authority there.

Automated decisions

We do not make decisions about you based solely on automated processing, and we do not use profiling that has legal or similarly significant effects on you.

Children

This site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 14, or under a higher minimum age set by the law where they live. If you believe a child has given us personal information, contact us and we will delete it.

Links to other websites

Our pages and guides may link to other websites, such as university extension services and other sources. Those sites have their own privacy practices, and this policy doesn’t cover them.

Security

We use reasonable technical and organizational measures to protect the information we hold. No website, email or online service is completely secure.

Changes to this policy

We will update this policy when our practices change, for example before adding analytics or selling products. The “Last updated” date at the top shows when it last changed. See also our Legal Notice.