Privacy Policy

We only collect information you provide directly to us, or that is necessary to complete and deliver your order:

• Order details: your name, email address, phone number, delivery address, and any special instructions or notes you include with the arrangement.
• Payment data: card and billing information is handled by Authorize.net. We do not store full card numbers on our servers.
• Optional account data: if you create an account to view your order history, we store your email and a secure account identifier through our backend provider.
• Technical data: our hosting platform may log standard browser and request information needed to keep the site secure and available.

• To fulfill, deliver, and confirm your flower order.
• To contact you about delivery details, substitutions, or order issues.
• To send the shop owner a copy of the order receipt so it can be prepared.
• To email you a payment receipt through Authorize.net (when a valid email is provided).
• To keep records for taxes, accounting, and customer service.

We do not sell, rent, or share your information for advertising or marketing purposes. We do not use tracking pixels, retargeting tags, or advertising cookies.

Your information is shared only with the service providers needed to run the shop:

• Authorize.net — processes payments and sends payment receipts. Authorize.net's privacy policy applies to payment data you enter in their secure checkout form.
• FormSubmit — relays a copy of the order details to our shop email so we can prepare your arrangement.
• Lovable Cloud / Supabase — provides the hosting, database, and authentication infrastructure for the site.
• Cloudflare — provides security and performance services. Cloudflare may set a short-lived bot-management cookie (__cf_bm) to protect the site from abuse.

We do not install analytics, advertising, or social-media tracking scripts. The only third-party requests made by the site are:

• Google Fonts CSS (no tracking cookies).
• Authorize.net scripts and APIs for payment processing.
• Cloudflare security services.

Because we do not use non-essential tracking cookies, we do not display a cookie consent banner. If we add analytics or marketing tools in the future, we will update this policy and add a consent mechanism before those scripts load.

Order records are kept for as long as necessary to fulfill your order, provide customer support, and meet legal and tax record-keeping requirements. If you have an account, you can contact us to request deletion of your account data.

California residents and visitors may have rights to know what personal information we collect, to request correction or deletion, and to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, or to ask about the information we hold about you, please contact us using the details below. We will respond within a reasonable time.

We use HTTPS for all site traffic. Payment information is handled by Authorize.net's PCI-compliant checkout. Order data is stored in a backend database protected by row-level access controls. Access to order records is limited to what is necessary to run the shop.

While we take reasonable steps to protect your information, no online service can guarantee complete security. Please contact us immediately if you suspect a problem.