Privacy Policy

1What Information Do We Collect?

In Short: We collect personal information you provide to us, information collected automatically when you visit our site, and order/payment data processed through our WooCommerce store.

Information You Give Us

We collect personal information that you voluntarily provide to us when you:

• Register on our website or create an account
• Place an order for flowers, plants, or gifts through our WooCommerce store
• Subscribe to our newsletter or marketing emails
• Contact us or request customer support
• Enter a promotion, contest, or survey

The personal information we collect may include: name, billing and shipping address, phone number, email address, payment card details (processed securely via our payment processor), delivery recipient information, and order notes.

Information Automatically Collected

When you visit our website, we automatically collect certain information, including your IP address, browser type, operating system, language preferences, referring URLs, pages viewed, and other technical data. This information is used to maintain the security and operation of our website and for internal analytics.

Like many businesses, we also collect information through cookies and similar technologies. See Section 4 for details.

Log and Usage Data

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Website and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings and information about your activity in the Website (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps') and hardware settings).

2How Do We Use Your Information?

In Short: We process your information to fulfill orders, manage your account, communicate with you, and comply with the law.

We use the information we collect or receive:

• Fulfill and manage orders. To process your flower, plant, or gift orders, arrange delivery, send order confirmations, and handle returns or exchanges.
• Account creation and management. To create and manage your customer account on our WooCommerce store.
• Payment processing. To securely process payments through our authorized payment processors.
• Customer communications. To send order confirmations, delivery updates, receipts, and support responses.
• Marketing. To send promotional emails and offers (with your consent — you may opt out at any time).
• Testimonials. With your prior consent, we may post testimonials on our website that include your name.
• Request feedback. We may use your information to request feedback and to contact you about your use of our Website.
• Feedback and surveys. To request feedback about your experience and improve our services.
• Security and fraud prevention. To monitor for fraudulent orders and protect our website and customers.
• Legal compliance. To fulfill our legal obligations and respond to lawful requests.
• Prize draws and competitions. When you choose to participate.

3Will Your Information Be Shared With Anyone?

In Short: We only share information with your consent, to comply with laws, to provide services, or to fulfill business obligations.

We may process or share your data based on the following legal bases:

• Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
• Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

• Payment Processors. We use secure, PCI-compliant payment processors to handle credit and debit card transactions. We do not store full card numbers on our servers.
• Delivery Partners. We may share your name, address, and order details with couriers or delivery services to fulfill your order.
• Email Marketing Providers. To send newsletters and promotional emails (only if you have opted in).
• Analytics Providers. Such as Google Analytics to help us understand site usage.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g., Google Maps API, Place API). To find out more about Google's Privacy Policy, please refer to this link.

We do not sell your personal information to third parties.

4Do We Use Cookies and Other Tracking Technologies?

In Short: Yes, we use cookies and similar tracking technologies to collect and store information.

We use cookies and similar tracking technologies (such as web beacons and pixels) to enhance your experience on our website. Cookies we use include:

• Essential cookies. Required for the website and shopping cart to function properly.
• WooCommerce session cookies. Used to maintain your shopping cart contents between pages.
• Analytics cookies. Such as Google Analytics, to understand how visitors interact with our site.
• Marketing cookies. Used to deliver relevant advertisements and track campaign performance (e.g., Facebook Pixel, Google Ads).

You can set your browser to refuse cookies or to alert you when cookies are being sent. Note that some parts of our website may not function properly if you disable cookies. To opt out of interest-based advertising, visit aboutads.info/choices.

5WooCommerce & Order Data

In Short: Our online store is powered by WooCommerce. Placing an order requires us to collect billing, shipping, and payment information to fulfill your purchase.

What We Collect When You Place an Order

• Billing name, address, phone number, and email address
• Shipping name and address (including recipient name if different)
• Order contents, quantities, and pricing
• Payment method and transaction reference (we do not store full card numbers)
• Delivery date preferences and special delivery instructions
• Gift message or card contents you provide

How We Use Order Data

Order data is used exclusively to process and fulfill your purchase, communicate with you about your order status, and comply with legal and tax obligations. Order records are retained for a minimum of 7 years to comply with applicable tax and accounting laws.

Guest Checkout

You may place an order as a guest without creating an account. Guest order data is used solely to fulfill your order and is subject to the same protections described in this policy.

Account Holders

If you create an account, your order history is saved so you can view past purchases and reorder easily. You can manage or delete your account at any time by contacting us at info@rafaelflorist.com.

6How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes in this notice unless otherwise required by law.

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law (e.g., tax, accounting). Order records are retained for a minimum of 7 years. Marketing preferences and account data are retained until you request deletion. When we no longer have a legitimate need to retain your data, we will securely delete or anonymize it.

7How Do We Keep Your Information Safe?

In Short: We use technical and organizational security measures to protect your information.

We have implemented appropriate technical and organizational security measures, including SSL/TLS encryption on all pages, secure payment processing through PCI-compliant providers, and restricted access to personal data. However, no electronic transmission over the Internet or storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our website is at your own risk. You should only access our website within a secure environment.

8Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18. By using our website, you represent that you are at least 18 years of age, or that you are the parent or guardian of a minor and consent to such minor's use. If we learn that personal information from a user under 18 has been collected, we will promptly deactivate the account and delete such data. If you become aware of any such data, please contact us at info@rafaelflorist.com.

9What Are Your Privacy Rights?

In Short: In some regions, you have rights that allow you greater access to and control over your personal information.

Depending on your location, you may have the following rights under applicable data protection laws:

• The right to access the personal information we hold about you
• The right to correct inaccurate data
• The right to delete your personal information
• The right to restrict or object to processing
• The right to data portability (where applicable)
• The right to withdraw consent at any time (this does not affect prior lawful processing)

To exercise these rights, email us at info@rafaelflorist.com.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are a resident in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Account Information

You may review or update your account information by logging into your account settings. To request account termination, contact us at info@rafaelflorist.com. We may retain certain information as required by law or for legitimate business purposes.

Email Marketing Opt-Out

You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. You will still receive transactional emails (order confirmations, shipping notices) as these are necessary for order fulfillment.

10Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting. No uniform technology standard for recognizing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow, we will inform you in a revised version of this notice.

11Do California Residents Have Specific Privacy Rights?

In Short: Yes, California residents are granted specific rights regarding access to their personal information.

"Shine the Light" Law (Cal. Civil Code § 1798.83)

California residents may request, once per year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes. To make such a request, contact us using the details in Section 13.

CCPA Privacy Notice

The California Consumer Privacy Act (CCPA) grants California residents additional rights. The following table shows the categories of personal information we have collected in the past 12 months:

Your CCPA Rights

• Right to Know. You may request details about the categories and specific pieces of personal information we have collected about you, as well as how it has been used and disclosed.
• Right to Delete. You may request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale. We do not sell personal information. Rafael Florist Inc. has not sold any personal information to third parties in the preceding 12 months and will not do so in the future.
• Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at info@rafaelflorist.com. We will verify your identity before responding and will respond within 45 days as required by law.

12Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this page. If we make material changes, we may notify you by prominently posting a notice on our website or by sending you an email notification. We encourage you to review this notice periodically to stay informed of how we protect your information.

13How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer, Sam Baygi, using the details below:

14How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, change that information, or delete it.

To request to review, update, or delete your personal information, please submit a request by:

• Emailing us at info@rafaelflorist.com
• Logging into your account at rafaelflorist.com/my-account/ and updating your information directly
• Calling us at 415.457.4711

We will respond to your request within 30 days. For certain requests, we may need to verify your identity before proceeding.