Privacy Policy

Effective date: September 7, 2026 Last updated: September 7, 2026 Version: 1.0

Floral Kingdom Inc. ("Floral Kingdom," "we," "us") runs shopfloralkingdom.com. This policy explains what personal information we collect, why we collect it, who we give it to, and what choices you have. It covers our website and the email we send you.

We sell and ship within the United States only. We do not send marketing text messages. If we ever start, we will ask you separately and this policy will say so first.

This policy is part of our Terms of Use. Both apply when you buy from us.

---

At a glance

We do not sell your personal information for money. We do share it with Google and Meta for advertising, and that includes uploading your email address and name to them in hashed form. Section 4 tells you exactly what we send and how to stop it.

You must be 18 to buy from us. We do not send marketing text messages.

---

1. What we collect

What you give us

• Your name, shipping address, and email address when you place an order
• Your email address when you sign up for our marketing email
• Whatever you write to us when you contact support
• Any photo or review you send us, and your first name if you let us publish it with the review

Your phone number, if you choose to give it. There is an optional phone field at checkout, and it exists for one reason. If something goes wrong with your order and your email address does not work — a typo, a full mailbox, an over-eager spam filter — a phone number is the only way left for us to reach you. Leaving it blank costs you nothing and does not affect your order in any way.

What we will never do with it. We will never send you a marketing text message. We will never put it on an advertising list or upload it to Google or Meta. We will never sell it or rent it. If we ever wanted to text you about anything other than an order you had actually placed, we would have to come back and ask you for that separately, in writing.

Payment information. You type your card details straight into Stripe's payment form and they go straight to Stripe. We never receive or store your full card number. We get a confirmation that the payment worked, and the last four digits.

What we collect automatically

• Cookies we need to run the site. These keep your cart, keep your session, remember your cookie choice, and let Stripe check for fraud at checkout.
• Analytics cookies from Google Analytics, but only if you allow them. These count visits and record which pages people look at, so we can see what is working on the site. Google Analytics does not store your full IP address.
• Advertising cookies and pixels from Google and Meta, but only if you allow them. These record the pages you view, the items you add to your cart, and the orders you place, and tie that to a cookie or device ID. Section 4 explains this in full. If you choose "Only Essential Cookies," none of these load.
• Basic technical information such as your browser type, your device type, and your IP address, which gives a rough idea of what city or region you are in.

What we do not collect. We do not collect biometric information, precise location, government ID numbers, financial account numbers, health information, or your race, religion, sexual orientation, or union membership. California law calls these "sensitive personal information" and gives you the right to limit how a company uses them. We do not collect any of it, so there is nothing to limit.

One thing worth being precise about. Our email tool records your IP address and works out an approximate city and region from it, which it stores as a rough set of coordinates. That is the centre of a city, not your street, and it is not what California means by "precise location" — that term means pinning you to within about 1,850 feet. We are telling you anyway, because a number that looks like a map coordinate deserves an explanation rather than a footnote.

2. Why we use it

• To take, process, and ship your order
• To send you an order confirmation and a shipping notification
• To answer you when you contact support
• To send you marketing email, only if you asked for it
• To show you Floral Kingdom ads on Google, YouTube, Facebook, and Instagram, and to measure whether those ads worked. Section 4 explains exactly what this involves and how to stop it.
• To publish a photo or a review you send us, on our site, in our email, and in our ads. Section 13 of our Terms of Use covers this. You can ask us to stop at any time by emailing support@shopfloralkingdom.com, and we will stop using it going forward.
• To spot and stop fraud
• To meet our tax, accounting, and legal obligations

We do not use your information to make automated decisions about you that have a legal or similarly significant effect. We do not set a different price for different people, and nothing you do or do not allow on this site changes what you pay.

3. Who else sees it

Two different things happen here and we are going to keep them apart, because they are not the same and it matters to you which is which.

Companies that work for us. These companies handle your information on our instructions, to do a job we hired them for. They are not allowed to use it for their own purposes.

One more. Our site loads fonts from Google Fonts, which means Google sees your IP address when a page loads. That is not a company working for us under our instructions, it is a service our site calls, and it happens before you make any cookie choice. If you would rather it did not, blocking third party requests in your browser stops it.

Advertising companies. These are different. They use information about your visit for their own advertising business as well as ours. Section 4 explains what they get, what they do with it, and how to stop it.

We may also give out personal information when the law requires it, when we need to enforce our Terms of Use, or if we sell or reorganize the business. If we sell or reorganize, we will tell you by email. Section 22 of our Terms of Use says the same thing.

4. Advertising, and what we share

We do not sell your personal information for money. Nobody pays us for it.

We do share it for advertising, and that includes your name and your address. This is the part people are usually surprised by, so we are going to be specific about it.

Two separate things happen.

1. Tags on this website. An advertising tag from Google and a pixel from Meta. If you allow advertising cookies, they place a cookie or read a device ID in your browser and record the pages you view, the items you add to your cart, and the orders you place.

2. Customer lists we upload. We upload our customer and subscriber lists to Google (Customer Match) and to Meta (Custom Audiences), and we send order events to Meta through the Conversions API. What goes into those uploads is your email address and your name, and nothing else. We deliberately leave out your mailing address, and we leave out your phone number even in the cases where you have given us one. Both platforms accept those extra details and both would match slightly more people if we sent them. We would rather send less.

Those uploads are hashed, and hashing does not make them anonymous. Hashing scrambles each value before it leaves us, so Google and Meta cannot simply read it. But they hash their own users' details the same way and match the two together — that is the whole purpose of it. Hashed or not, this is still your personal information, and we are not going to describe it as if it were not.

What we never send. Your card number, your security code, or anything else about how you paid. Those go straight to Stripe and never pass through us.

What we use it for. Showing you our ads on Google, YouTube, Facebook and Instagram; showing ads to people whose details resemble our customers'; avoiding ads for something you have already bought; and measuring whether our advertising worked.

What California law calls this. California calls it "sharing" personal information for cross context behavioral advertising. Uploading a customer list may also count as a "sale" under California and several other state laws, even though no money changes hands. We are telling you either way, and you can stop it either way.

We do not share the personal information of anyone we know to be under 16. You have to be 18 to buy from us, and we set our advertising audiences to adults only.

How to stop it

There are two things to stop, because there are two things happening.

To stop the tags on this site, choose "Only Essential Cookies" in our cookie banner, or change your choice at any time with Cookie Settings in our footer. This is a per browser setting, because a cookie choice can only cover the browser it was made in. Set it on every browser and device you use.

To stop us uploading you to advertising lists, the cookie banner is not enough. That setting lives in your browser, and a list upload happens on our servers. Click Your Privacy Choices in our footer, or email support@shopfloralkingdom.com with "Privacy Request" in the subject line. We will mark your record so that it is left out of every future upload, and we will confirm when that is done.

If you have already been uploaded, opting out stops all future uploads, and we will ask Google and Meta to remove you from the audiences you are already in. We cannot promise how quickly they act on that request, because that part is theirs and not ours.

If your browser sends a Global Privacy Control signal, we read it and treat it as an opt out for that browser. Where we can tell who you are — because you have ordered from us or subscribed to our email — we also apply it to your record, so it covers list uploads as well. You do not have to do anything else, and our cookie banner cannot override it.

Opting out never changes the price you pay, what you can buy, or how we treat you.

5. Your choices and your rights

We give these rights to every customer in the United States, wherever you live. We are not going to tell you which privacy laws apply to a company our size. We are telling you what we will do.

You can ask us to:

• Tell you what personal information we hold about you
• Send you a copy of it
• Correct anything that is wrong
• Delete it, within the limits in the next section
• Stop sharing it for advertising (Section 4)
• Stop sending you marketing email (below)

We will never punish you for asking. We will not refuse to sell to you, charge you more, give you worse service, or treat you differently because you used one of these rights.

What we can and cannot delete

We would rather tell you this up front than tell you after you ask.

If you have never ordered from us, we delete everything except one thing. Your marketing profile, your email address and any support emails all go. If you had asked us to stop emailing you, we keep your email address on a do not contact list so we never email you again by accident. Section 7 explains that record and why it exists.

If you have ordered from us, we have to keep the order record for 7 years. Tax and accounting law requires it and we cannot delete it on request. That record is your name, your shipping address, your email address, what you bought, and what you paid.

Everything else we will delete: your marketing profile in Klaviyo, your support emails, and your record in our shipping tool. Stripe keeps its own record of the payment under its own rules and its own legal obligations, and we cannot delete that one for you.

When you ask us to delete, we will tell you exactly what we deleted and exactly what we kept and why. No vague answers.

How to ask

Email support@shopfloralkingdom.com with "Privacy Request" in the subject line. Tell us what you want, and include the email address or the order number you used, so we can find you.

We will reply to say we got it within 10 business days. We will finish and give you an answer within 45 days. If we need longer, we will email you before the 45 days are up, tell you why, and tell you how much longer.

How we check it is you. We may ask you to confirm something that matches what we already hold, like your order number or the email address you used. We do this so nobody can get your information by pretending to be you. We will not ask you for a government ID or a photo of yourself.

Someone else can ask for you. If you want a friend, family member, or agent to make a request on your behalf, have them email us with your written permission. We may still contact you directly to confirm.

Marketing email

Email tracking. Our email tools, Klaviyo and SendGrid, record whether you opened an email and whether you clicked a link in it. We use that to see which emails are worth sending. Turning off images in your email app stops the open tracking.

Click unsubscribe at the bottom of any marketing email, or email support@shopfloralkingdom.com. We act on it right away. Unsubscribing from marketing does not stop the order confirmation and shipping emails for an order you have placed. Those are part of your purchase.

How you get on the list in the first place. When you sign up, we send you one email asking you to confirm. You are only on our marketing list once you click the link in that email. If you never click it, we do not email you again.

Leaving an optional box unticked is not an opt out. If you have already subscribed to our marketing emails and you later place an order without ticking the optional marketing box at checkout, you stay subscribed. We read an unticked box as no new opt in, not as a request to leave. We stop sending marketing when you click unsubscribe or when you ask us directly.

6. Cookies

We use two kinds, and our banner asks you about the second kind.

Cookies we need. These keep your cart, keep your session, remember your cookie choice, and let Stripe check for fraud at checkout. The site does not work without them, so we do not ask permission for them and there is no way to turn them off and still shop here.

Analytics and advertising cookies. These come from Google Analytics, Google Ads, and the Meta pixel. We only load them if you click "Allow All Cookies." If you click "Only Essential Cookies," we do not load any of them, and Google and Meta get nothing from your browser. Section 4 explains what the advertising ones do when they are on.

You can change your mind whenever you like. Click Cookie Settings in our footer. The banner comes back and you can make a new choice, including changing an "Allow All" to "Only Essential."

If your browser sends a Global Privacy Control signal, we read it and treat it as "Only Essential Cookies" for that browser. You do not have to click anything, and our banner cannot override it.

If you turn advertising cookies off, nothing about the store changes. You can browse, add to your cart, and buy exactly as before, at the same prices.

We keep a record of your choice. That record is which option you picked and the date you picked it, stored in your browser and on our side. We keep it for 12 months so we can honor your choice and so we can show that we honored it. After 12 months the banner asks you again.

7. How long we keep things

The do not contact record. When you unsubscribe, we keep one thing: your email address and the fact that you asked us to stop. We keep it so that we do not email you again by accident, for example if you appear in a later import. It is the smallest amount of information that will do the job, and it exists to protect your choice, not to work around it.

How honest we are being about these dates. We are two people. We do not have an automated job that deletes records the day a clock runs out. These are the periods we work to, and we clear old records by hand. If a record sitting a few weeks past one of these dates matters to you, email us and we will handle it straight away.

8. How we protect your information

We are not going to tell you we use "industry standard safeguards," because that phrase does not mean anything. Here is what we actually do.

• The whole site runs over an encrypted connection. Your browser shows a padlock on every page, including checkout.
• Your card number never reaches us. It goes straight from your browser to Stripe, which is a PCI DSS Level 1 provider. All we ever see is the last four digits and whether the payment worked. We could not leak your card number because we do not have it.
• Only the two people who run Floral Kingdom and our agency can open our order records. We do not give access to anyone who does not need it to do their job. The providers in Section 3 hold data on our behalf under their own contracts and their own security controls.
• We use established providers for our store, payments, shipping, and email, each of which publishes its own security practices.

No website is completely secure, and we are not going to promise otherwise. If something goes wrong, Section 11 of this policy tells you what we will do about it.

9. Age

Three different numbers show up in our documents, so here they all are in one place.

• You must be 18 or older to buy from us. That is Section 2 of our Terms of Use.
• We do not share the personal information of anyone we know to be under 16 for advertising. That is Section 4.
• Our site is not for children and we do not knowingly collect personal information from anyone under 13.

We have no way to verify anyone's age and we do not try to. We do not ask for a birthday and we do not want one. Because we cannot tell, we set our advertising audiences to adults only, which is the one control we do have.

If you believe a child under 13 has given us information, email support@shopfloralkingdom.com and we will delete it.

10. Changes to this policy

If we change this policy, we update the "Last updated" date and the version number at the top and post the new version here.

If the change is material, meaning it expands how we use or share your information, or adds a new company that gets your information, we will post it at least 14 days before it takes effect. We will also email everyone who has ordered from us, whether or not they are on our marketing list. This is the same commitment we make about our Terms of Use in Section 19 of that document.

A change never applies backwards. If you gave us information under an older version of this policy, we will not start using it in a new way without telling you first and giving you the chance to opt out or ask us to delete it.

We keep every version we publish. Email support@shopfloralkingdom.com and we will send you the version that was in effect on any date you name.

11. If something goes wrong

This policy would not be honest if it only described the good days.

If we find out that your personal information has been taken, or seen by someone who should not have seen it, we will email you. We will do it as quickly as we can and no later than the law requires. We will tell you:

• what happened, and when
• what information was involved
• what we are doing about it
• what, if anything, you should do

We will also notify the California Attorney General and any other regulator where the law requires it.

If it happens at one of the companies we use, we will pass on what we learn as soon as we learn it. We ask every provider we work with to tell us promptly if their systems are affected.

We will not sit on it. We will not wait to have a complete picture before we tell you something is wrong.

12. If we turn down your request

If we cannot do what you asked, we will tell you in writing and tell you why. Not a form response. An actual reason.

You can appeal. Reply to that email, or write to support@shopfloralkingdom.com with "Privacy Appeal" in the subject line. Floral Kingdom is a two person company, so what that means in practice is that the other one of us reviews it, not the person who said no. We will give you an answer within 45 days and we will explain the decision.

If you are still not happy, you can complain to the attorney general in your state. If you are in California, that is the California Attorney General's office and the California Privacy Protection Agency. We will tell you how to reach them if you ask.

13. Our 10% welcome offer

When you sign up for our marketing email, we give you a code for 10% off your first order. That is an exchange, and we would rather name it than pretend otherwise: you give us your email address, and we give you a discount.

You do not have to take it to buy from us. The price of everything on our site is the same whether you sign up or not.

If we are running a free gift at the time, you have to pick one or the other, and on a smaller order the gift is usually worth more than the code. We will show you both numbers at checkout so you can pick whichever is better for you.

You can leave whenever you want. Click unsubscribe in any email. Any discount you already used is yours. We will not charge it back and we will not cancel an order because you unsubscribed afterward.

Section 11 of our Terms of Use has the rest of the rules for the code, including that it is first order only and one use per customer.

14. How this fits with our Terms of Use

This Privacy Policy is part of our Terms of Use. If you buy from us, both apply to your order, and the version of each that governs your order is the version posted when you placed it.

Our Terms of Use cover things this policy does not: what you are buying, shipping, returns, promotions, and how we handle a dispute. Section 17 of the Terms contains an arbitration agreement and a class action waiver. It applies to disputes about this policy too. You can opt out of arbitration within 30 days of your first order and Section 17.11 tells you how.

You can read the Terms of Use at shopfloralkingdom.com/TermsConditions.

15. How to reach us

Floral Kingdom Inc., a California corporation 900 Balboa Dr Arcadia, CA 91007 support@shopfloralkingdom.com (626) 231-6864

Email is the fastest way to reach us and it is the only address we use for support. If your message is about this policy, put "Privacy Request" in the subject line so it gets to the right place.

If you would like a printed copy of this policy or our Terms of Use, email us and we will mail one to you free.