Fine print
Privacy Policy
Last updated: October 2025
1. What we collect
We collect only what we need to run the flower business:
- Your name, delivery address, email, and phone number when you place an order or fill out the contact form.
- Your message content when you write to us.
- Basic server logs (IP address, browser user-agent, request timestamp) for security and diagnostics.
- Anonymous, aggregate site analytics via Cloudflare Web Analytics (no cookies, no cross-site tracking, no personal data).
2. How we use it
We use this information to arrange and deliver your flowers, reply to your messages, send order confirmations, prevent fraud and spam, and, in aggregate, understand which pages of the site are useful. That's all.
3. Cookies
The site uses one small piece of browser storage (localStorage) to remember your cookie-banner choice. We do not use tracking cookies. Third-party embeds (Cloudflare Turnstile on the contact form) may set their own cookies for bot protection; see Cloudflare's privacy policy for details.
4. Third-party services
A handful of services touch your data on our behalf:
- Schematic contact forwarder, delivers form submissions to us by email.
- Cloudflare Turnstile, blocks bot submissions on the contact form.
- Cloudflare Web Analytics, privacy-respecting page analytics with no personal identifiers.
- Google Fonts, serves the site's typefaces.
5. How long we keep it
Order records: seven years, to meet tax and business record requirements. Contact-form messages: two years, then deleted. Server logs: 30 days.
6. Your rights
If you're in the EU, UK, or California, you have the right to access, correct, delete, or export the personal information we hold about you, and to object to certain uses. Email [email protected] and we'll respond within 30 days. We do not sell personal information.
7. Children
The site is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has submitted information, email us and we'll delete it.
8. Security
The site is served over HTTPS. Form submissions are transmitted over TLS. We keep the smallest amount of data that lets the business run.
9. Changes
We update this policy occasionally. The current version lives at this URL with an updated date at the top. Substantive changes will be flagged in a delivery week's order confirmation email.
10. Contact
Privacy questions: [email protected].