Privacy Policy

Effective date: June 26, 2026

Heritage Hill Nursery, Inc. (“Heritage Hill Nursery,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website at heritagehillnurseryinc.com (the “Site”), how we use and protect it, the parties with whom we share it, and the rights and choices available to you. It applies to visitors and customers located in the United States, the European Economic Area (EEA), the United Kingdom, and elsewhere.

Please read this Privacy Policy together with our Cookie Policy and Terms of Service. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are (Data Controller)

The controller responsible for your personal information is:

Heritage Hill Nursery, Inc.
10801 Pleasant Valley
Cedarburg, WI 53012, United States
Phone: 262-675-0153
Email: info@heritagehillnurseryinc.com

2. Information we collect

We collect the following categories of personal information:

  • Identity and contact information — your name, billing and shipping address, email address, and telephone number, which you provide when you create an account, place an order, sign up for our newsletter, or contact us.
  • Order and transaction information — products purchased, order history, order value, and related correspondence.
  • Payment information — payment card and account details are collected and processed directly by our payment providers (PayPal and WooCommerce Payments). We do not store full payment card numbers on our servers; we receive only confirmation of payment and limited details such as the transaction status and the last digits of a card where applicable.
  • Account credentials — your username and a securely hashed password if you create a customer account.
  • Communications — the content of messages you send us through our contact form, by email, or by phone, and your marketing preferences.
  • Technical and usage data — your IP address, browser type and version, device information, operating system, referring pages, the pages you view, and the dates and times of your visits, collected through cookies and similar technologies. See our Cookie Policy for details.

We do not knowingly collect special categories of sensitive personal information, and we ask that you do not submit such information to us.

3. How we use your information

  • To process, fulfill, and deliver your orders, including arranging shipping and handling returns and warranty claims;
  • To create and manage your customer account;
  • To communicate with you about your orders, respond to your inquiries, and provide customer support;
  • To send you newsletters, seasonal gardening tips, and promotional offers where you have asked to receive them;
  • To operate, maintain, secure, and improve the Site, including measuring and analyzing site traffic and performance;
  • To prevent fraud, abuse, and spam, and to protect the security of the Site and our customers;
  • To comply with our legal, tax, and accounting obligations and to enforce our Terms of Service.

4. Legal bases for processing (EEA and UK visitors)

If you are located in the EEA or the UK, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

  • Performance of a contract — to process and deliver the orders you place with us and to manage your account;
  • Consent — to send you marketing emails and to set non-essential cookies; you may withdraw your consent at any time;
  • Legitimate interests — to secure and improve the Site, prevent fraud, and understand how our Site is used, provided these interests are not overridden by your rights;
  • Legal obligation — to retain transaction records and meet tax, accounting, and other legal requirements.

5. Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember your shopping cart, secure your session, and — with your consent — to measure traffic. Non-essential cookies are not placed until you accept them through our cookie consent banner. We honor browser-based opt-out signals, including the Global Privacy Control (GPC). For a full description of the cookies we use and how to manage your preferences, see our Cookie Policy.

6. How we share your information

We do not sell your personal information for money. We share personal information only as described below, and only with service providers who are contractually required to protect it and to use it solely to perform services on our behalf:

  • Payment processing — PayPal and WooCommerce Payments to process your payments securely;
  • Order fulfillment and shipping — ShipStation and our shipping and tax services to prepare, label, and ship your orders and calculate taxes;
  • Email and marketing — Mailchimp to deliver our newsletters and manage subscriptions;
  • Analytics — Google Analytics to help us understand how visitors use the Site (placed only with your consent);
  • Security and anti-spam — Google reCAPTCHA and spam-filtering tools to protect our forms, and Cloudflare to secure and deliver the Site;
  • Hosting and infrastructure — WP Engine, which hosts the Site;
  • Web fonts — Google Fonts, used to display the Site’s typography;
  • Gift cards — Gift Up, if you purchase or redeem a gift certificate.

We may also disclose personal information when required by law, in response to lawful requests by public authorities, to enforce our agreements, or in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information consistent with this Privacy Policy.

7. International data transfers

We are based in the United States, and the information we collect is processed and stored in the United States. If you access the Site from the EEA, the UK, or another region with laws governing data transfers, please be aware that your information may be transferred to and processed in the United States. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect personal information transferred internationally.

8. Data retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide our services, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we securely delete or anonymize it.

9. Your privacy rights

9.1 EEA and UK residents

If you are located in the EEA or the UK, you have the right to access, correct, update, or request deletion of your personal information; to restrict or object to our processing; to data portability; and to withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).

9.2 United States residents

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws), you may have the right to:

  • Know and access the categories and specific pieces of personal information we have collected about you;
  • Request correction of inaccurate personal information;
  • Request deletion of your personal information;
  • Opt out of the “sale” or “sharing” of personal information and of targeted advertising;
  • Limit the use of sensitive personal information; and
  • Not receive discriminatory treatment for exercising your privacy rights.

While we do not sell personal information for money, our use of analytics and similar technologies may be considered a “sale” or “sharing” under some state laws. You can exercise your opt-out by adjusting your preferences through our cookie consent banner, by enabling a Global Privacy Control (GPC) signal in your browser, or by contacting us using the details below.

10. How to exercise your rights

You may exercise any of the rights described above by contacting us by email at info@heritagehillnurseryinc.com, by telephone at 262-675-0153, through our contact form, or by mail at the address in Section 1. We will respond to your request within the timeframe required by applicable law. To protect your privacy, we may need to verify your identity before acting on your request. You may use an authorized agent to submit a request on your behalf where permitted by law.

11. Security

We use appropriate technical and organizational measures, including encryption in transit (SSL/TLS), access controls, and reputable hosting and payment providers, to protect personal information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children’s privacy

The Site is intended for a general audience and is not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Third-party links

The Site may contain links to third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing them with personal information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will update the “Effective date” above and, where appropriate, provide additional notice. We encourage you to review this Privacy Policy periodically.

15. Contact us

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us:

Heritage Hill Nursery, Inc.
10801 Pleasant Valley, Cedarburg, WI 53012
Phone: 262-675-0153
Email: info@heritagehillnurseryinc.com