Privacy Policy

Information We Collect

We collect information that you provide directly to us when you:

• Create an account or place an order
• Subscribe to our floral delivery service
• Fill out a custom arrangement request form
• Contact us or submit a review
• Sign up for email communications

The personal information we collect may include:

• Contact information: Name, email address, phone number, delivery address
• Account information: Username, password, order history, preferences
• Payment information: Payment details are processed securely by Stripe and are never stored on our servers
• Order details: Products ordered, delivery instructions, recipient information, custom arrangement specifications

Information Collected Automatically

When you visit our website, our servers automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device type (desktop, tablet, mobile)
• Pages visited and time spent on each page
• Referring URL (the page that linked you to our site)
• Date and time of each visit

This information is collected through standard server logs and is used solely for website security, error monitoring, and basic site operation. We do not use this data for tracking, profiling, or targeted advertising.

Categories of Personal Information (CCPA/CPRA)

The following table describes the categories of personal information we collect, as defined by the California Consumer Privacy Act:

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including delivery
• Manage your account and subscription services
• Communicate with you about orders, deliveries, and account updates
• Send promotional emails (only with your consent; you may opt out at any time)
• Improve our products, services, and website
• Respond to your inquiries and customer service requests
• Prevent fraud and maintain the security of our platform
• Comply with legal obligations

Information Sharing

We do not sell or share your personal information with third parties for their marketing purposes.

We may share your information only with the following service providers who assist us in operating our business:

• Stripe: For secure payment processing. Stripe's privacy policy governs their use of your payment information.
• Email service provider: For transactional and marketing emails (with your consent)

We may also disclose your information if required by law, court order, or governmental regulation, or if disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and Tracking Technologies

We use only essential cookies that are necessary for the operation of our website. These include:

• Session cookies to maintain your login state
• Shopping cart cookies to preserve your cart contents
• Security cookies to prevent fraud and protect your account

We do not use advertising cookies, third-party tracking pixels, or analytics tools that track you across other websites. For information on how we handle delivery-related data, see our Shipping & Delivery Policy.

Do Not Track Disclosure

Our website does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals. We do not engage in cross-site tracking. As required by CalOPPA, we disclose that third parties cannot collect personally identifiable information about your online activities over time and across different websites when you use our service.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to Know: You may request that we disclose what personal information we have collected about you, the categories of sources, the purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out: We do not sell or share your personal information. If this practice ever changes, we will provide a clear opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CPRA, including Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, or biometric data. If we ever begin collecting such information, we will provide a mechanism to limit its use.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your Right to Know, Right to Delete, or Right to Correct, visit your Privacy & Data page in your account dashboard. You may also contact us at [email protected] or call 1-800-555-1234. We will respond to verifiable consumer requests within 45 days.

Authorized Agents: You may designate an authorized agent to submit a privacy request on your behalf. To do so, the agent must provide written authorization signed by you, and we may require you to verify your identity directly with us before we process the request.

Verification Process: To verify your identity when you submit a privacy request, we will match the information you provide against the email address associated with your account. If you do not have an account, we may ask you to provide your order number along with the email address used at checkout.

Financial Incentives Disclosure

Our subscription plans (Curated and Custom) offer convenience pricing that includes delivery at no additional cost. These plans are available to all customers on the same terms. We do not offer different prices, services, or quality of goods based on whether a consumer exercises their privacy rights under the CCPA/CPRA.

Data Retention and Security

We retain your personal information according to the following schedule:

• Account data (profile, preferences, addresses): Retained while your account is active; deleted immediately when you request account deletion through your Privacy & Data dashboard
• Order and transaction records: 7 years, as required for tax and legal compliance. Upon account deletion, order records are anonymized (personal details removed) and retained in anonymized form for this period
• Session data: Expires automatically after 7 days of inactivity; deleted immediately upon logout or account deletion
• Data exports: Delivered as an instant download to your browser; no copy is stored on our servers
• Server logs: 90 days
• Marketing preferences: Retained until you withdraw consent

When your information is no longer needed, we will securely delete or anonymize it. Database backups are retained on a short rolling cycle and may temporarily contain personal data until they are overwritten through standard rotation.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure server infrastructure, and restricted access to personal data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your California privacy rights, please contact us: