Privacy Policy

This policy describes how FLOW Flowers Co. LLC handles personal information collected through flowflowers.co, our customer portal, and the messages we send you. It applies to customers, gift recipients, and people who submit an inquiry without buying anything.

You give us: your name, email address, phone number, delivery and billing addresses, the recipient names and addresses you send flowers to, gift-card messages, delivery notes such as gate codes, messages you send your florist, and the details in a wedding, funeral or business inquiry.

Created as you use the service: your order and delivery history, subscription settings and pause or cancellation records, the reason you give when you end a plan, delivery confirmations including a photo of the delivered arrangement and the location where it was recorded, and support correspondence.

Payment information: handled by Stripe. Card numbers are entered directly into Stripe's hosted fields and never reach our servers. We receive and store only the card brand, the last four digits, and Stripe's identifiers for the customer and the payment.

Automatically: IP address, browser and device type, pages viewed and referring site, through analytics and standard server logs.

About gift recipients:when you send flowers to someone else, we hold that person's name, address and, if you provide it, their phone number, solely to make the delivery. We do not market to recipients on the basis of a delivery alone.

• To arrange, route and deliver your orders.
• To bill you, calculate sales tax, and handle refunds and disputes.
• To send transactional messages about an order you placed, such as receipts, delivery notices and payment problems.
• To provide customer support and respond to reported issues.
• To send marketing email or seasonal text reminders, only where you have opted in.
• To understand which products and pages get attention, in aggregate, so we can improve the shop.
• To detect and prevent fraud and abuse, and to meet our legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it to train machine learning models.

Only with the service providers that let us operate, each under agreements limiting their use of the information to providing their service to us:

• Stripe for payment processing, card storage and tax calculation.
• Supabase for our database and authentication, and Vercel for hosting.
• Twilio for text messages and Google (Gmail) for email delivery.
• Google Maps Platform for address geocoding and delivery route optimization.
• Google Analytics for website traffic measurement.

Our own florists and drivers see the delivery details they need to complete your order. We may also disclose information where required by law, to enforce our Terms, or in connection with a merger or sale of the business, in which case we will say so before your information becomes subject to a different policy.

Text messaging consent is collected separately, through an unchecked box shown when you enter a phone number at signup or checkout, and is never required to purchase. You can withdraw it by replying STOP to any message or by changing your notification preferences in the portal, and reply HELP at any time for help.

Message frequency varies with your plan and delivery schedule. Message and data rates may apply. We text you about orders you placed, deliveries on their way, changes to your plan, and occasional seasonal reminders. We collect only your phone number and the fact that you consented, and we use them only to send those messages.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text-message originator opt-in data and consent are never shared with anyone. Phone numbers are disclosed only to the service providers listed in section 4, solely to deliver the messages you asked for.

We set the cookies needed to keep you signed in and to hold your cart between pages. Those are required for the site to work.

We also use Google Analytics, which sets cookies and collects your IP address, device type and the pages you visit. It tells us which bouquets get looked at, not who you are. You can opt out with Google's browser add-on or by blocking cookies in your browser, and nothing on the site stops working if you do. We do not use advertising or cross-site tracking cookies.

Account and order records are kept for as long as your account is open, and afterward for as long as we need them for tax, accounting and dispute purposes, generally seven years for transaction records.

Deleting your account hides your data from our staff immediately and ends active subscriptions at the close of the paid period. After the restore window shown at deletion, the data is removed except for those records we are required to keep. Delivery confirmation photos are kept while they may be needed to resolve a delivery dispute, and deleted on request. Analytics data is retained on Google's default schedule.

You can view and edit your contact details, addresses, payment methods and notification preferences at any time in your portal, and delete your account from the same place.

You may also ask us to give you a copy of the information we hold about you, correct it, or delete it, subject to records we are required to keep. Email admin@flowflowers.co and we will respond within forty-five (45) days. We will not deny service or charge you a different price for making a request.

If you are a gift recipient rather than a customer and want your details removed, email us and we will remove them once any pending delivery is complete.

Our service is intended for adults. We do not knowingly collect personal information from anyone under 13. The Essential for Kids plan is a plan bought by an adult for a child in their life; the account and all information on it belong to the adult. If you believe a child has given us information, email us and we will delete it.

Access to customer data is restricted by role, so staff see only what their job requires, and administrative actions are logged. Data is encrypted in transit. Card data is held by Stripe, a PCI Level 1 service provider, rather than by us.

No system is perfectly secure. If a breach affects your personal information we will notify you and any required authority as the law requires.

We may update this policy. The effective date at the top changes when we do, and material changes will be communicated to active customers by email where practicable.

Privacy questions, requests, or complaints:

FLOW Flowers Co. LLC
Provo, Utah
Email: admin@flowflowers.co
Phone: (801) 762-6752