Privacy Policy for A New Bloom Flowers By Donna Riddle

Depending on how you use the website, we collect:

• Contact information, such as the name, email address, phone number, and physical address of the person placing an order, an account holder, a recipient, or a person making an inquiry.
• Order and payment information, such as products, prices, taxes, tips, delivery or pickup details, delivery instructions, card messages and signatures, refunds, payment status, card type, and the last four digits of a card. For a flower subscription, this also includes the schedule and a record of the subscription terms you accepted. You enter your complete card details directly into a form provided by our payment processing company rather than giving the complete number to us through the website.
• Customer account and email information, such as the customer profile created or updated from contact information entered during checkout, sign-in activity, profile details, whether you chose to save a payment method, the limited card details described above, marketing email choices, and reminders you ask us to send about future occasions.
• Content and communications, such as general or event inquiries, event details, inspiration links or images, reviews, photographs, customer support messages, and communications about an order.
• Device, website use, and security information, such as your IP address, browser and device information, the page, search result, advertisement, or link that brought you to the website, pages and features you use, dates and times, errors, performance information, and recordings of some website visits. These recordings mask text and form entries, block images and other media, and may show page layout and actions such as clicks and scrolling. They help diagnose website problems.
• Information from other sources, such as payment results from our payment processing company, address or route results from map providers, automated fraud or security check results, and information provided by the person placing the order, the recipient, florist staff, or another order or product system the shop chooses to connect.

Please do not include unnecessary sensitive information—such as financial, medical, account login, or government identification details—in card messages, delivery instructions, reviews, inquiries, or uploads.

• Operate the website, shopping cart, checkout, customer accounts, and customer support.
• Create or update a customer profile during checkout so that the person placing an order can later use it as a customer account.
• Prepare, deliver or make available for pickup, change, cancel, refund, and keep records of orders.
• Create and manage recurring flower subscription orders and payments when you enroll in a subscription.
• Communicate with people placing orders and recipients about orders, delivery, accounts, questions, reminders, or reviews.
• Process payments and help detect fraud, abuse by automated programs, and security problems.
• Keep the shopping cart and sign-in working and remember choices you make on the website.
• Understand how visitors reach and use the website, including which marketing links bring visitors to us, and find performance problems and errors.
• Send marketing emails as permitted by law and reminders requested by customers, and honor unsubscribe choices.
• Meet tax, accounting, and other legal obligations, keep required records, and resolve disputes.
• Handle legal claims and protect customers, recipients, our business, and others.

We give personal information to other companies or people only when reasonably needed for the purposes described in this Policy, including to:

• Companies that host, secure, monitor, support, and operate this website and the information stored through it for us.
• Stripe, which processes card payments and helps prevent payment fraud.
• Companies that deliver order, account, delivery, inquiry, reminder, marketing email, or text messages.
• Google services used for address suggestions, maps, delivery route planning, security checks, and website analytics. This can include Google Analytics used as part of the website service and additional Google Analytics that we choose to configure.
• Sentry, which helps find website errors, measure performance, and review privacy-masked recordings of some website visits. Recordings are not collected on checkout, customer account, order confirmation, contact, review, delivery tracking, pay-online, or similar pages where customers provide or view order and account information.
• Other order or product systems the shop chooses to connect when needed to complete an order, exchange product or order information, or provide a requested feature.
• Lawyers, accountants, government authorities, a buyer if the shop is sold or reorganized, or other parties when reasonably necessary to follow the law, protect rights or safety, or investigate misuse.
• The person who placed an order, the recipient, a delivery person, or another person when reasonably necessary to complete and support an order.

We do not use this website to sell personal information for money. Some privacy laws use broader definitions of “sell” or “share” that can include giving information that identifies a browser or device, or information about website use, to an analytics service even when no money is exchanged.

Cookies are small files that a website stores in your browser. This website also uses similar browser storage. Necessary cookies and storage keep your cart and checkout working between pages, support customer sign-in, and help prevent fraud and abuse by automated programs. Blocking them may prevent the cart, checkout, account, or other features from working.

The website also uses analytics and diagnostic tools to understand how visitors reach and use it and to find errors and performance problems. These tools may collect page visits, clicks, browser and device information, information in the page or marketing link that brought you here, and recordings of some website visits. These providers can include Google Analytics configured for the website platform, additional Google Analytics configured by the shop, and Sentry for website diagnostics. Your browser can block or delete cookies, but browser settings may not control every similar technology and blocking them may affect how the website works.

Some browsers can send a “Do Not Track” (DNT) signal. There is no commonly accepted way for websites to interpret that older signal. This website does not currently change its behavior in response to DNT, so the analytics and diagnostic tools described above may still receive information when DNT is enabled.

Google Analytics and Sentry may receive device and website-use information over time when you use this website. Those companies also provide services to other websites and may separately receive information from those websites under their own privacy policies. We use the information they provide to us for the website analytics and diagnostic purposes described in this Policy. You can use browser controls to block or delete cookies, though doing so may affect website features.

We may send service messages needed to complete or support an order, delivery, customer account, question, or other requested service. We may also send marketing emails as permitted by law and reminders you ask us to send about future occasions. Marketing and reminder emails include links labeled “Manage email preferences” and “Unsubscribe.” If you ask us to send a reminder after placing an order, you can also manage it from the “Manage email preferences” link on the order confirmation page. Changing those email choices does not stop service messages that are necessary for an order or another service you requested.

We keep different types of personal information for different periods based on why we collected it and what the law requires. One-time sign-in codes and customer sign-in sessions expire under their configured time limits. Order, customer account, payment, tax, communication, security, and dispute records may be kept longer so that we can operate the business, provide customer service, maintain accurate records, prevent fraud, and meet legal obligations. We may also keep a record that you opted out so that we can continue honoring your choice. Records can remain in backups or be preserved longer when needed for a dispute, investigation, security issue, or legal requirement.

Depending on the features you use and the law that applies, you may:

• If you have a customer account, update your profile by using the account icon near the top of the website to sign in, then opening “Profile.” You can also use the Contact section at the bottom of this page to ask us to update contact information.
• Change or stop marketing and reminder emails using the “Manage email preferences” or “Unsubscribe” link in one of those emails. If you asked us to send a reminder after placing an order, you can also manage it from the “Manage email preferences” link on the order confirmation page.
• Use the Contact section at the bottom of this page to request access to, correction or deletion of, or a copy of personal information. You may also ask to appeal a privacy decision or stop certain uses when the law gives you that right.

We may need information to verify your identity and understand your request. We may not be able to delete or provide some information when the law permits or requires us to keep it for order or payment records, security, fraud prevention, legal obligations, or claims. We will respond as the law requires and will not treat you unfairly for exercising a privacy right provided by law.

This website uses safeguards intended to protect personal information, including encrypted connections, protected customer sign-in, and payment forms supplied by the payment processing company so that complete card numbers are not sent through our website systems. No website or storage method can be guaranteed completely secure. Use care when sending messages or uploads, and use the Contact section at the bottom of this page if you believe your account or information has been misused.

The website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you are a parent or guardian and believe a child provided personal information through the website, use the Contact section at the bottom of this page so that we can review the situation.

The website may link to another company’s website or show a feature supplied by another company, such as a map or payment form. That company has its own privacy practices. Review them before providing information directly to that company.

We may update this Policy as our services, providers, or legal obligations change. The effective date near the top identifies the current version. We will provide another form of notice when the law requires it.