Privacy

The short version

You choose whether we count your visit in the panel shown when you first enter. The software runs on our own server, sets no analytics cookie and shares nothing with another company. If you say no, it does not load. One cookie is set when you sign in and it only keeps you signed in.

What the counting records is set out below under visit statistics. You can change the choice at any time from Privacy choices in the footer.

What is stored in your browser

Ten things can be stored. Five make the basket, checkout, chat and account work. Three remember the answers from the first-visit panel.Two more come with session recordings, described below.

Your basket is kept in your browser under the name zomia-cart. It stays until you empty the basket or clear your browsing data.

Once your basket reaches checkout, a random code is kept beside it under zomia-cart-token. It links the basket to the copy we save, described under baskets left at checkout, and it is removed when you place an order.

Your most recent order is kept under the name zomia-last-order until you close the tab. That is there because the confirmation screen is your only copy of the payment details while we have no order emails running, so reloading the page should not lose them.

If you start a chat, your browser keeps a key to that conversation under the name zomia-chat. It is written the first time you send a message and never before, so reading the site without chatting stores nothing and sends nothing. The key is what lets you close the tab, come back and find our reply waiting. We hold only a scrambled copy of it, so if you clear it we cannot get that conversation back to you.

Signing in sets a cookie called payload-token. It keeps you signed in from one page to the next, it goes to our server with every request while it lasts and signing out clears it.

Clearing your browser data for this site removes all five. You lose your basket, you lose your way back into any chat you had started and you are signed out.

The first-visit panel stores your age confirmation under zomia-age, your location under zomia-region and your language preference under zomia-language. They stop the same questions returning on every page. The language preference is ready for translated pages later. Your statistics choice is stored separately under zomia-analytics. The choice expires after 24 months, then we ask again. Rejecting keeps the counter off.

Accounts

You do not need an account to order. If you make one it holds the email address you sign in with, a password we store hashed, a name if you give one, a delivery address if you save one and the accessions you have put aside. Orders placed while you are signed in are listed on it.

The saved address and the put-aside list are yours to change or empty on the account page. For anything else, write to us.

A shop account is a login here and nothing more. The French association keeps its own record of members and nothing joins the two.

When you order

We collect your name, email address, delivery address, what you ordered and the total. We need those to send you seed and to match up your payment. They are stored on our own server.

Ordering while signed in attaches the order to your account. As a guest it stands on its own, though we can attach it later if you ask.

We never see card details, because there is no card payment on this site. A bank transfer shows us what your bank tells us when the money arrives. Paying by PayPal, Western Union, MoneyGram or crypto starts with writing to us for the details or a payment request, so we end up with the email address you write from.

Baskets left at checkout

When you reach our checkout we save what is in your basket, so we can see where people stop and, if you typed an email address into the checkout form, write to you about it. We keep the products and quantities, the country you picked and that email address. We do not keep the rest of the form. The basket is tied to a random code held in your browser's local storage under zomia-cart-token, and the code is removed when you place an order. A basket that never becomes an order is deleted 30 days after you last touched it. A basket that becomes an order stays with that order and has no deletion date of its own. Only Zomia staff can see it and it goes to nobody else. To have yours deleted sooner, write to hello@zomiacollective.com with the address you typed.

When you write to us

The contact form sends us your name, email address, subject and message, plus an order number if you give one. We keep it so we can answer you and find it again if you write back.

We also keep which country the message came from. We do not record your IP address. The form has two spam checks: a field hidden from you that only automated scripts fill in, and a check on how quickly the form was submitted. Messages sent in under three seconds are kept but marked for review, because that is faster than a person can type.

The back in stock form on an accession page keeps your email address and the accession you asked about. We use them only to tell you when it is back. Write to hello@zomiacollective.comand we will remove them.

The research request form on an accession page sends us your name, your institution, your email address and what you want the seed for, with the accession you asked about. We keep them so we can answer you and keep a record of where the seed went. We also keep which country the request came from. The form has the same two spam checks as the contact form.

The chat button works the same way and runs on our own server, not a third party's. We keep what is said, which page you were reading when you opened it and which country the request came from. No IP address and no name unless you give us one. There is no account to make and no email needed: we ask for one only after you have already sent a message, and only so we can reach you if you have gone by the time we answer.

When it says somebody is here, somebody is. The line is drawn from whether one of us has the panel open at that moment rather than from opening hours, so it goes quiet when we do.

Search

The search box queries our own search service, running on the same server as the site. Your searches do not leave it. What you typed and how many results came back are also recorded in the visit statistics described below, which sit on that same server.

There is one exception. When the site has few results for what you typed, the search page also asks landrace.wiki. That request goes from your browser straight to their servers, so it carries your search term and your IP address to a site we do not run. Apart from the link previews in the field reports and method pages, described next, this only happens on the search page. The shop, the map and the accession pages do not do it.

Field reports and methods

The field reports, and the method pages they follow, link to pages on landrace.wiki and on Wikipedia. When you rest the mouse pointer on one of those links, or move to it with the keyboard, your browser asks that site for a preview: the first lines of the page and its picture, if it has one. The request goes from your browser straight to landrace.wiki, or to Wikipedia and the Wikimedia image server, so it carries your IP address and the name of the page to a site we do not run. It only happens when you point at a link. On a touch screen a tap just opens the link and no preview is fetched.

The small cards that show a report's sources when you point at a note number are part of the page and contact nobody.

Fonts and maps

The typefaces are part of the site rather than loaded from a font service. The map itself is ours too, drawn from a file on our own server, so looking at it contacts nobody.

The satellite and terrain views are the exception, and they are the only one. Those images come from Esri, who publish them for anyone to use, and your browser fetches them from Esri directly, which means Esri can see your IP address and which squares of the world you asked for. Nothing is requested from them until you press one of those two buttons. If you never do, nothing about your visit reaches them.

Visit statistics

If you choose Accept all, or enable statistics under Manage choices, we count visits with Umami, which runs on the same server as the site. The script and the address it reports to are both on this domain, so your browser never contacts anyone else for it. It sets no analytics cookie and builds no profile across visits. If you choose Reject all, it does not load.

A visit records the pages you open and the order you open them in, the site or search engine you arrived from, your screen size, your browser's language and the country, region and city your connection resolves to. Your IP address is what that location is worked out from. It is not stored, here or anywhere else in the statistics.

Page addresses are recorded without anything after the question mark, so a link carrying a search term or an order number leaves those behind before the visit is counted. There is one exception. Links we post on Instagram, Facebook and LinkedIn carry three tags, utm_source, utm_medium and utm_campaign, saying where the link was posted and for which post. On the page a visit starts on, those three are kept. Everything else after the question mark is still dropped.

Four things you do are recorded alongside it. A search, with the words you typed and the number of results. Putting an accession in your basket, with which accession. Starting a checkout. Placing an order. The searches are the ones we actually act on, because a search that finds nothing tells us what people come here wanting and cannot get, and that is how we decide what to go looking for.

An order recorded this way carries the number of lines in it and nothing more. No order number, no total, no name. Nothing in the visit statistics points back at an order or at you.

We also record how you move around a page, on every page here. How far down you scroll, in quarters. Which parts of a page hold your attention for a few seconds. Which buttons and links get used and which never do. And clicks that usually mean something is wrong: several on the same spot in quick succession, or one on something that does not seem to do anything. None of it carries what you typed or who you are, only which part of the page you touched.

Speed is measured the same way: how long the main content takes to appear, how quickly the page answers a tap and how much it shifts around while it loads. Three numbers, taken from real visits on real phones instead of a test rig.

Individual visits are deleted after 90 days. Daily totals are kept past that, which is how we compare one month against another without keeping the visits themselves.

One thing sits apart from all of that. Our own admin screen shows who is reading the site at this moment: the page, the country and city it resolves to and the kind of device. It is held in the server's memory under a value that cannot be turned back into an address, nothing about it is written to a file or a database, and it is gone the moment the server restarts.

The places mentioned on this page, in the statistics, the live view, chat and the contact form, are all looked up on our own server in GeoLite, a database of where internet addresses are. Your address is not sent anywhere to do it. This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.

Session recordings

If you tick Session recordings in the first-visit panel, we may record how your visit moves around the pages: what is on the screen, where the pointer goes, scrolling and clicks. Only a share of the visits that say yes are recorded. The recordings go to our own server and nowhere else.

Anything you type is hidden in the recording, and so are the email address in the account menu and the contents of the basket drawer. The chat window and the first-visit panel are left out entirely. The checkout, basket, account, sign-in and register pages are never recorded. A recording stops after ten minutes.

With each recording we keep the pages it covers, without anything after the question mark, how long it ran, the country your connection resolves to and whether you were on a phone, tablet or computer. We do not keep your IP address or your name. Only Zomia staff can watch the recordings, and they are deleted 30 days after they end.

Your choice is kept under zomia-replay and expires after 24 months, then we ask again. While a visit is being recorded, a random code for it is kept under zomia-replay-session until you close the tab. You can change your mind from Privacy choices in the footer.

Server logs

Our web server writes an access log: the time of each request, the IP address it came from, the page or file asked for, the response code, the referring page and the browser's user agent string. The IP address makes these entries personal data and we treat them that way. The log is a file on our own server, nothing in it is sent to anyone else, and the server rotates the files and deletes anything older than 90 days. We read them for security and troubleshooting: abuse, broken links, errors.

How long we keep things

• Accounts: until you ask us to delete yours.
• Orders: six years, because company accounting records have to be kept that long.
• Orders that expired unpaid: twelve months.
• Baskets left at checkout: 30 days after you last touched them, unless they became an order.
• Messages sent through the contact form: twelve months.
• Research requests for seed: six years.
• Chat conversations: kept indefinitely. We keep them because people come back to us a season or several years later, and what you asked us last time is usually the context for what you are asking now. Ask us and we will delete yours.
• Visit statistics: 90 days for individual visits, daily totals kept after that.
• Session recordings: 30 days.
• Server logs: 90 days.

Deleting something takes it off the site at once. Our backups rotate on their own, so a snapshot can hold a copy for about two months after that.

We do not sell or share any of it, and we do not send marketing email unless you have asked for it.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it or object to how we use it. Use the contact form and we will deal with it. Deleting an order record is subject to the accounting period above, and we will tell you if that applies.

An account you can delete yourself, from your account page, without asking anyone. That takes the login, the saved address and the put-aside list. Orders stay for the accounting period, keeping the email and name they were placed with.

You can also complain to your national data protection authority if you are not happy with how we handle it.

Who is responsible

Zomia Collective is responsible for the information described here. The Spanish company we are setting up will take that over once it is registered, and its details will appear on the legal page then.

The Spanish company is not registered yet. Until it is, no page here carries a company name, a registered address or a registration number.