Privacy Policy

1Information We Collect

We collect information in the following ways:

2How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services.
• To process transactions and send related information, including order confirmations and invoices.
• To communicate with you about your account, orders, or support requests.
• To send promotional communications (you may opt out at any time).
• To monitor and analyze usage trends to improve website experience.
• To detect, investigate, and prevent fraudulent transactions and other illegal activities.
• To comply with applicable laws and legal obligations.

3Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform a contract with you or take steps at your request before entering a contract.
• Legitimate Interests: We process data where it is in our legitimate interests to do so (e.g., improving our services, fraud prevention), provided this does not override your rights.
• Legal Obligation: Processing necessary to comply with applicable law.
• Consent: Where you have given us explicit consent (e.g., marketing communications). You may withdraw consent at any time.

4Sharing of Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party vendors who assist in operating our business (e.g., Stripe for payment processing, Web3Forms for contact form handling, Cal.com for scheduling, Google Analytics for analytics). These parties are contractually obligated to protect your data.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process (e.g., a court order or government subpoena).
• Protection of Rights: To protect the rights, property, or safety of WP Flora, our customers, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5Payment Processing & Security

All payment transactions are processed through Stripe, Inc., a PCI Service Provider Level 1 certified payment processor — the most stringent level of certification available in the payments industry.

• We never store, transmit, or have access to your complete card number or CVV.
• Stripe handles all card data and tokenizes payment information before sharing a secure token with us.
• All data transmission between your browser and our website is encrypted using TLS (HTTPS).

6Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Transaction records and billing information are retained for a minimum of seven (7) years to comply with financial regulations. You may request deletion of your account data at any time by contacting us (subject to legal retention requirements).

7Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten"), subject to certain exceptions.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Opt-out of Marketing: Unsubscribe from marketing emails at any time via the link provided in each email.

To exercise any of these rights, please contact us at hello@wpflora.com. We will respond within 30 days.

8Cookies Policy

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function (e.g., session management, security).
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics).
• Preference Cookies: Remember your settings and preferences.
• Marketing Cookies: May be set by third-party advertising partners.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

9Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information promptly.

10International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect transferred data.

11Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

12Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Policy on this page with an updated "Last updated" date. For significant changes, we may also send an email notification. Your continued use of our services after any changes constitutes your acceptance of the updated Policy.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: