Privacy policy
At Lupita's Flower Shop, your privacy is a fundamental priority. This Privacy Policy describes the types of personal data we collect, how we use it, the circumstances under which we share it, and the rights you have regarding your information. This policy applies to all interactions with our website, online store, and any related services.
By browsing our site, creating an account, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
1. Information We Collect
We collect personal data through two primary channels: information you voluntarily provide and data gathered automatically as you interact with our website.
1.1 Information You Provide to Us
When you create an account, make a purchase, contact our support team, or sign up for marketing communications, we may collect the following:
| Category | Examples |
|---|---|
| Contact Information | Full name, email address, phone number, billing address, and shipping address |
| Payment Details | Credit card, debit card, or other payment method information — processed through secure third-party payment gateways and never stored on our servers |
| Account Information | Username, password, and saved preferences when you register for an account |
| Purchase Activity | Products viewed, items added to cart, completed purchases, returns, exchanges, and full transaction records |
| Communications | Any information you share through customer service inquiries, feedback forms, review submissions, or other direct correspondence |
1.2 Information Collected Automatically
As you browse and interact with our website, we may automatically collect:
- Device Information — IP address, browser type and version, operating system, and device identifiers
- Usage Data — Pages visited, links clicked, time spent on each page, scroll behavior, and referral sources
- Location Data — Approximate geographic location derived from your IP address
- Cookie Data — Information stored through cookies, pixel tags, web beacons, and similar technologies (see Section 5 for details)
2. How We Collect Your Data
Your personal information may be gathered through:
- Direct interactions — Account registration, order placement, form submissions, email or phone communications, and participation in surveys or promotions
- Automated technologies — Cookies, session tracking, analytics tools, and pixels embedded throughout our website
- Third-party sources — Payment processors verifying transaction legitimacy, shipping carriers providing delivery updates, advertising platforms optimizing campaign performance, and analytics services helping us understand site usage
3. How We Use Your Information
We use the personal data we collect for the following purposes:
3.1 Order Processing and Delivery
- Verifying, processing, and fulfilling your purchases
- Sending order confirmations, shipment tracking numbers, and delivery status updates
- Managing returns, refunds, and product exchanges in a timely manner
3.2 Customer Service and Support
- Responding to your questions, concerns, complaints, and service requests
- Resolving disputes and troubleshooting issues with orders or products
3.3 Account Management
- Creating and maintaining your personal shopping account
- Storing your preferences, wish lists, and browsing history to personalize your experience
3.4 Marketing and Promotional Communications
- Sending newsletters, product recommendations, exclusive offers, and seasonal promotions via email (opt-out available at any time)
- Delivering personalized advertisements tailored to your interests and purchase history across our website and partner platforms
3.5 Security and Fraud Prevention
- Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other suspicious activities
- Verifying user identity to protect both your account and our platform integrity
3.6 Legal Compliance
- Fulfilling obligations under applicable federal, state, and local laws and regulations
- Enforcing our Terms of Service and protecting our legal rights and interests
- Responding to lawful requests from governmental authorities, courts, or law enforcement agencies
4. When and How We Share Your Information
We may disclose your personal data to the following categories of recipients for the purposes outlined below:
| Recipient Category | Purpose |
|---|---|
| Service Providers | Payment gateways, shipping and logistics partners, email marketing platforms, cloud hosting providers, and IT support vendors that enable our day-to-day operations |
| Advertising and Analytics Partners | Platforms that help us deliver targeted advertisements, measure campaign effectiveness, and analyze website traffic patterns |
| Legal and Governmental Authorities | Courts, law enforcement agencies, or regulatory bodies when required by law, subpoena, court order, or to protect our rights, safety, or property |
| Business Successors | In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy proceeding |
We do not sell your personal information to third parties for their independent marketing purposes without your explicit consent. Under the California Consumer Privacy Act (CCPA), "sale" has a broad definition that may include certain data transfers to advertising partners — you have the right to opt out of such sharing at any time (see Section 6).
5. Cookies and Tracking Technologies
Our website uses cookies and related technologies to:
- Improve functionality — Remember your login credentials, items in your cart, and browsing preferences
- Analyze performance — Understand how visitors navigate our site, which pages are most popular, and where technical issues may occur
- Personalize content — Recommend products based on your browsing history and shopping behavior
- Deliver targeted advertising — Serve ads relevant to your interests across our site and third-party platforms
Types of cookies we use:
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for core website functionality (e.g., shopping cart, checkout, login) |
| Analytics Cookies | Help us understand visitor behavior and measure site performance |
| Marketing Cookies | Enable personalized advertising and track campaign effectiveness |
| Preference Cookies | Store your settings and choices for a customized experience |
You have full control over your cookie preferences. You can manage or disable cookies through your browser settings at any time. Please be aware that disabling certain cookies may limit your ability to use some features of our website, such as the shopping cart or account login.
For additional details on our cookie practices, please refer to our dedicated Cookie Policy page.
6. California Consumer Privacy Act (CCPA / CPRA) Disclosures
If you are a resident of California, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you specific rights regarding your personal information.
6.1 Categories of Personal Information Collected (Past 12 Months)
| CCPA Category | Examples of Data Collected | Collected? |
|---|---|---|
| A. Identifiers | Name, email address, mailing address, IP address, account username | Yes |
| B. Personal Information (Cal. Civ. Code §1798.80(e)) | Name, address, telephone number | Yes |
| C. Protected Classification Characteristics | Not intentionally collected | No |
| D. Commercial Information | Purchase history, products viewed, items in cart | Yes |
| E. Biometric Information | Not collected | No |
| F. Internet / Electronic Network Activity | Browsing history, search queries, interaction data on our website | Yes |
| G. Geolocation Data | Approximate location derived from IP address | Yes |
| H. Sensory Data | Not collected | No |
| I. Professional or Employment Information | Not collected | No |
| J. Education Information | Not collected | No |
| K. Inferences | Shopping preferences, behavioral patterns, product interests | Yes |
| L. Sensitive Personal Information | Not collected (we do not process Social Security numbers, financial account numbers, or precise geolocation) | No |
6.2 Sources of Personal Information
- Directly from you — When you create an account, place an order, contact support, or subscribe to our mailing list
- Automatically — Through your interactions with our website via cookies, pixels, and analytics tools
- From third parties — Payment processors, advertising platforms, and analytics services
6.3 Business Purposes for Collection
- Fulfilling orders and delivering products
- Fraud detection and security enhancement
- Marketing optimization and personalized advertising
- Website improvement and performance analytics
- Compliance with legal and regulatory requirements
6.4 Sale and Sharing of Personal Information
- In the preceding 12 months, we may have shared certain identifiers and internet activity data with advertising partners for cross-context behavioral advertising
- We have not sold personal information for monetary consideration
- You have the right to opt out of any sale or sharing of your personal information
- We do not have actual knowledge that we sell personal information of consumers under 16 years of age
6.5 Your CCPA Rights
As a California resident, you have the following rights:
Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you, including the sources of collection, purposes of use, and third parties with whom we share data.
Right to Delete — Request deletion of your personal information, subject to certain legal exceptions (e.g., completing a transaction, detecting security incidents, exercising free speech, or complying with legal obligations).
Right to Correct — Request correction of inaccurate or incomplete personal information in our records.
Right to Opt-Out of Sale/Sharing — Direct us to stop selling or sharing your personal information for cross-context behavioral advertising purposes.
Right to Limit Use of Sensitive Personal Information — While we do not currently collect sensitive personal information, you retain the right to limit its use should our practices change.
Right to Non-Discrimination — We will never discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, inferior service, or denial of services for making a privacy-related request.
6.6 How to Exercise Your Rights
Submit a verifiable consumer request through any of the following channels:
- Email: info@lupitasflowershop.net
- Phone: 773-434-3570
- Mail: Lupita's Flower Shop, 3432 W 59th St, Chicago, IL 60629, United States
We may require identity verification before processing your request. We aim to respond within 45 days and will notify you if an extension of up to 45 additional days is needed.
6.7 Authorized Agents
You may designate an authorized agent to submit a CCPA request on your behalf. We may require written authorization and identity verification from both you and the agent.
6.8 Financial Incentive Programs
We do not currently operate any loyalty programs, discount clubs, or financial incentive programs involving the collection of personal information. Should this change, we will provide clear disclosures and obtain opt-in consent as required by CCPA.
7. Data Security
We implement a layered combination of administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- PCI-DSS compliant payment processing through vetted third-party providers
- Access controls and authentication protocols for all internal systems and databases
- Regular security assessments and vulnerability testing
While we employ commercially reasonable safeguards to protect your data, no method of internet transmission or digital storage is completely secure. We cannot guarantee absolute data security, but we are committed to promptly addressing any security incidents that may occur.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:
- Active accounts and transactions — Data is retained for the duration of the customer relationship and as needed to process orders, handle returns, and provide support
- Legal and regulatory compliance — Certain records may be retained for a period required or permitted by applicable law
- Business records — Transaction logs, financial records, and other business data may be maintained for audit, tax, and operational purposes
- Dispute resolution — Relevant data may be retained while any disputes or legal proceedings are pending
When personal information is no longer needed, it is securely deleted or de-identified.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right to Access | Obtain a copy of the personal data we hold about you |
| Right to Rectification | Request correction of inaccurate or incomplete information |
| Right to Erasure | Request deletion of your data, subject to legal exceptions |
| Right to Restrict Processing | Limit how we use your data in certain circumstances |
| Right to Data Portability | Receive your data in a structured, machine-readable format |
| Right to Object | Opt out of certain processing activities, including direct marketing |
| Right to Withdraw Consent | Revoke previously granted consent at any time |
To exercise any of these rights, contact us using the information provided in Section 14.
10. Marketing Communications
We may send you promotional emails featuring new products, seasonal collections, special offers, and other marketing content.
- You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email
- You may also contact us directly at info@lupitasflowershop.net to opt out of marketing communications
- Opting out of marketing emails will not affect transactional communications such as order confirmations, shipping notifications, or customer service responses
11. Children's Privacy
Our website and services are designed for users 16 years of age and older. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. We will take prompt action to delete such information from our records.
12. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or other external services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the content, privacy practices, or security measures of external websites. We encourage you to review the privacy policies of any third-party site before providing your personal information.
13. International Data Transfers
If you access our website from outside the United States, please be aware that your personal data may be transferred to, stored in, and processed in the United States, where our servers and service providers are located. The United States may have different data protection laws than your country of residence. By using our services, you consent to the transfer of your information to the U.S. as described in this Privacy Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. When we make significant changes, we will update the "Effective Date" at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.
Material changes will be communicated through prominent notice on our website or via email when appropriate.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us through any of the following channels:
Store Name: Lupita's Flower Shop
Phone Number: 773-434-3570
Email: info@lupitasflowershop.net
Physical Address: 3432 W 59th St, Chicago, IL 60629, USA
Business Hours:
| Day | Hours |
|---|---|
| Monday | 10:00 AM – 7:00 PM |
| Tuesday – Friday | 10:00 AM – 8:00 PM |
| Saturday | 10:00 AM – 7:00 PM |
| Sunday | 10:00 AM – 2:00 PM |
(Central Time)
This Privacy Policy is effective as of the date stated above and applies to all users of Lupita's Flower Shop's website and services.