Privacy Policy

Last updated: November 9, 2026

Blue Eyed Blooms ("Blue Eyed Blooms," "we," "us," or "our") is a small, owner-operated florist in San Clemente, California. This policy explains what personal information we collect when you visit our website, place an order, start a subscription, or send us an inquiry, how we use it, who we share it with, and the choices and rights you have.

If you have questions at any point, contact Ethnie Unger at Ethnie@BlueEyedBlooms.com or 714-316-4338.

Information We Collect

Information you give us

• Order and checkout details: your name, email, phone number, billing details, and the recipient's name, delivery address, phone number, and any delivery instructions.
• Gift messages: the card message you write and any notes for the recipient.
• Account details: the email and login information you use to create a customer account, plus your subscription preferences (frequency, delivery day, pauses, skips).
• Event and business inquiries: your name, contact details, event date and venue, business name, budget range, design ideas, and any photos you choose to upload (for example, inspiration images, venue photos, or color swatches).
• Communications: anything you send us by email, phone, text, or through our contact forms.

Payment information

Payments are processed by Stripe. Your full card number is entered into Stripe's secure fields and is not stored on our servers. We receive limited information from Stripe, such as the card brand, last four digits, expiration date, billing ZIP code, and payment status, so we can manage your orders and subscriptions.

Information collected automatically

When you use the site, we and our service providers may automatically collect:

• Device and browser type, operating system, and screen size
• IP address and approximate location (city or region)
• Pages viewed, links clicked, referring website, and time spent on pages
• Cookie and similar identifiers (see "Cookies and Similar Technologies")

Information from others

• If someone sends you flowers, we receive your name, address, and possibly your phone number from the sender so we can deliver.
• If someone buys you a gift subscription, we receive your details from the purchaser.

How We Use Your Information

We use personal information to:

• Process, prepare, deliver, and support your orders and pickups
• Set up, bill, renew, pause, skip, and cancel subscriptions, and send the notices California law requires for automatic renewals
• Send order confirmations, delivery updates, receipts, and subscription reminders by email
• Respond to wedding, event, and business inquiries and prepare custom quotes
• Contact you or the recipient about delivery problems, substitutions, or questions about an order
• Provide customer service and manage your account
• Prevent fraud, secure the site, and enforce our Terms of Service
• Understand how the site is used so we can improve it
• Send marketing emails, but only if you opt in; every marketing email includes an unsubscribe link [Confirm: whether a newsletter or marketing list will be offered]
• Comply with tax, accounting, and other legal obligations

We do not use your personal information to make automated decisions that have legal or similarly significant effects on you.

How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

We share information only as needed to run the business, with:

• Stripe – payment processing, subscription billing, fraud prevention, and the billing portal.
• Google Firebase (Google LLC) – hosting our database, customer accounts and sign-in, and storage for uploaded inquiry photos.
• Vercel – website hosting and delivery; Vercel processes technical data such as IP addresses and request logs.
• Our email provider – sending order confirmations, receipts, and subscription notices. [Confirm: name of email service, e.g., Resend, SendGrid, Postmark, or Google Workspace]
• Instagram (Meta Platforms, Inc.) – our site shows an embedded Instagram feed. When that feed loads, Instagram may receive your IP address and browser information and may set its own cookies, under Meta's privacy policy.
• Delivery help – if we use a courier or delivery helper, we share only the recipient's name, address, phone, and delivery notes. [Confirm: whether any third-party courier is used]
• Analytics provider, if used – [Confirm: whether Vercel Analytics, Google Analytics, or another tool is enabled; remove if none]
• Professional advisors – accountants, attorneys, or insurers, under confidentiality obligations.
• Legal and safety – when required by law, subpoena, or court order, or to protect the rights, property, or safety of Blue Eyed Blooms, our customers, or others.
• Business transfer – if the business is sold or reorganized, customer information may transfer to the new owner, who will be bound by this policy for information collected under it.

Our service providers are permitted to use your information only to perform services for us, not for their own marketing.

Cookies and Similar Technologies

We use a small number of cookies and similar tools:

• Essential cookies keep you signed in, remember your cart, and secure checkout. Stripe and Firebase set some of these. The site will not work properly without them.
• Analytics (if enabled) help us understand which pages are popular. [Confirm: list analytics tool or delete this bullet]
• Third-party embeds such as the Instagram feed may set their own cookies when they load.

You can block or delete cookies through your browser settings. Blocking essential cookies may prevent checkout or account sign-in from working.

Do Not Track and Global Privacy Control: Browsers handle "Do Not Track" signals inconsistently, and our site does not respond to them in a special way. We do honor the Global Privacy Control (GPC) signal as a request to opt out of any sale or sharing of personal information, although we do not sell or share it in the first place.

Photos You Upload

Photos submitted with event or business inquiries are used only to understand your request and prepare a quote. We store them in Firebase and delete them when they are no longer needed (see "Data Retention"). We will not post your uploaded photos publicly without your permission. Please do not upload photos of other people unless you have their permission.

Data Retention

We keep personal information only as long as we reasonably need it:

• Orders and payment records: up to 7 years, for tax and accounting purposes.
• Subscription and auto-renewal records (including your consent and cancellation records): for the life of the subscription and at least 3 years afterward, as California automatic renewal rules may require.
• Customer accounts: until you ask us to close the account, or after 3 years of inactivity.
• Inquiries and uploaded photos that do not become a booking: about 12 months, then deleted. Booked events and contracts are kept with business records.
• Server and security logs: generally 90 days or less, depending on our hosting provider's settings.

[Confirm: retention periods with your accountant and attorney]

Your California Privacy Rights

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"). As a small business, we may not be legally required to comply with every CCPA obligation, but we choose to honor these requests for all customers. Subject to legal exceptions, you may:

• Know and access the categories and specific pieces of personal information we have collected about you, where it came from, why we use it, and who we share it with.
• Delete personal information we collected from you.
• Correct inaccurate personal information.
• Opt out of sale or sharing — we do not sell or share personal information, but you may still submit this request.
• Limit use of sensitive personal information — we do not use sensitive personal information beyond what is needed to provide our services (for example, account login credentials).
• Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised these rights.

Categories collected in the past 12 months

Shine the Light

California Civil Code § 1798.83 lets residents ask whether a business shared personal information with third parties for their own direct marketing. We do not do this.

How to make a request

Email Ethnie@BlueEyedBlooms.com with the subject line "Privacy Request," or call 714-316-4338. Tell us what you are asking for. To protect your information, we will verify your identity, usually by confirming the email address and order details on file. You may use an authorized agent; we may ask for proof of the agent's authority and may still need to verify your identity directly.

We will confirm receipt within 10 business days and respond within 45 days. If we need more time (up to another 45 days), we will tell you why.

Children's Privacy

Our website is meant for adults. We do not knowingly collect personal information from children under 13, and customer accounts and purchases are limited to people 18 or older (or minors using the site with a parent or guardian's involvement). If you believe a child has given us personal information, contact us and we will delete it.

Security

We rely on established providers (Stripe, Google Firebase, and Vercel) that use encryption in transit, access controls, and industry-standard safeguards. We limit access to customer data to people who need it to fulfill orders. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by California law.

Links and Third-Party Services

Our site links to and embeds content from other services, such as Instagram. Their privacy practices are governed by their own policies, not this one. We encourage you to read them.

Marketing Choices

You can unsubscribe from marketing emails at any time using the link in the email or by contacting us. Even if you unsubscribe, we will still send transactional messages such as order confirmations, delivery updates, and required subscription renewal notices.

Changes to This Policy

We may update this policy as our business or the law changes. When we do, we will change the "Last updated" date above. If changes are significant, we will post a notice on the site or email account holders.

Contact Us

Blue Eyed Blooms San Clemente, California Email: Ethnie@BlueEyedBlooms.com Phone: 714-316-4338