Privacy Policy

1. Introduction

Central PA Rose Co. ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at centralparoseco.com (the "Site") and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site. By accessing and using our Site, you signify that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, and mailing address when you place an order or subscribe to our mailing list
• Payment Information: Credit card details and billing information (processed securely through Stripe; we do not store full card numbers)
• Order Information: Details about your bouquet orders, delivery preferences, and personalized message content
• Communications: Messages you send us through contact forms, email, or customer support channels
• Lead Magnet Opt-ins: Email address and preferences when you download our free Valentine's Message Guide

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and usage, including:

• Device Information: Browser type, operating system, device type, and unique device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, and actions taken on the Site
• Location Data: General geographic location based on IP address (not precise GPS location)
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience and analyze Site usage

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations, delivery updates, and customer support communications
• Sending promotional emails and marketing materials (with your consent)
• Improving our Site, products, and services
• Personalizing your experience on our Site
• Detecting and preventing fraud and unauthorized transactions
• Complying with legal obligations and resolving disputes
• Analyzing Site usage patterns and trends
• Conducting customer satisfaction surveys and feedback

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Site and conducting our business, including:

• Payment Processors: Stripe (for payment processing)
• Email Service Providers: SendGrid (for email communications)
• Analytics Providers: For analyzing Site usage and performance
• Delivery Partners: As necessary to fulfill your flower delivery orders

4.2 Legal Requirements

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal processes
• Enforce our Terms of Service and other agreements
• Protect the rights, privacy, safety, or property of our Company, you, or others
• Respond to claims of illegal activity

4.3 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for all data transmitted over the internet
• Secure payment processing through PCI-DSS compliant payment gateways
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal information
• Secure data storage with appropriate safeguards

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You use our Site at your own risk.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

6.2 Correction and Deletion

You have the right to request that we correct inaccurate personal information or delete your personal information, subject to certain exceptions.

6.3 Opt-Out of Marketing

You can opt out of receiving promotional emails from us at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

6.4 Cookie Preferences

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

To exercise any of these rights, please contact us at [email protected] with your request and verification of your identity.

7. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device that help us remember your preferences and analyze Site usage.

We use cookies for:

• Remembering your login information and preferences
• Analyzing Site traffic and user behavior
• Personalizing content and recommendations
• Preventing fraud and enhancing security

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Site.

8. Third-Party Links

Our Site may contain links to third-party websites and services that are not operated by us. This Privacy Policy applies only to information collected through our Site. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites before providing your personal information.

9. Children's Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information and terminate the child's account. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using our Site, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our Site and updating the "Last Updated" date. Your continued use of our Site following the posting of revised Privacy Policy means that you accept and agree to the changes.

12. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us at: