Effective date: October 19, 2026

This policy explains how Freedom Flowers LLC ("Freedom Flowers," "we," "us," or "our") collects, uses, and shares Consumer Health Data, and how you can exercise your rights under Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (NRS 603A.400 to 603A.550), Connecticut's Data Privacy Act (Conn. Gen. Stat. § 42-515 and following), and similar laws in other states.

It's separate from our general Privacy Policy and Cookie Policy. It covers Consumer Health Data connected with www.freedom-flowers.com, our online store, and your dealings with Freedom Flowers. Our blog at blog.freedom-flowers.com has its own privacy notices.

If you live somewhere else

We offer the requests described in this policy to everyone, wherever you live. The consent rules that apply before we collect or share Consumer Health Data vary by state. If another state's consumer health data law applies to you and gives you rights this policy doesn't describe, we'll honor those too. Contact us using the process below and tell us which state you live in.

What "Consumer Health Data" means

Consumer Health Data is personal information that is linked or reasonably linkable to you and identifies your past, present, or future physical or mental health status, as the law that applies to you defines it. It can include information that identifies you as seeking health-related services, and health-related inferences or associations drawn from browsing, shopping, or other information. Information can be linkable to you through a persistent identifier such as a cookie, not only a name or email address.

A page visit or a purchase doesn't establish that you have a particular condition, and we don't treat it that way. Depending on what it contains, how it's connected to you, and how it's processed, browsing or shopping information can still count as Consumer Health Data.

What we may collect

Depending on how you interact with us:

Health and wellness information you choose to give us

  • Symptoms, conditions, emotional states, mental-health concerns, treatment or medication details, or other health-related information you include in a message, a product question, a review, or a form you submit. (Our product-finder quiz runs entirely in your browser; your answers aren't sent to us or anyone else.)
  • Messages sent through our chat assistant, contact forms, email, or customer service.

Health-related browsing and shopping activity

  • Product pages, categories, reviews, or articles you view.
  • Search terms you enter on our site.
  • Cart, checkout, purchase, return, and subscription activity involving products associated with a condition, symptom, emotional state, or wellness goal.
  • Responses to on-site messages, offers, forms, or product recommendations.

Account, contact, and order information

  • Name, email address, phone number, mailing and shipping address, account details, order history, payment status, fulfillment information, and customer-service history, when connected with health-related products or communications.

Online identifiers and technical information

  • IP address, cookie or session identifiers, device and browser information, page URL, referrer, timestamps, and approximate location (country, state, or city), when connected with health-related activity.

Inferences and associations

  • Associations between you and product interests, health concerns, or wellness goals that can arise when the information above is connected with your profile.

We don't collect genetic data, biometric identifiers, or precise location for the purpose of identifying your health status. Please don't send us information that isn't needed for your interaction with us.

Why we collect and use it

  • To provide what you ask for: running our store, filling and shipping orders, handling returns, supporting your account, preventing fraud, and answering customer-service requests.
  • To answer your questions and give you product information or recommendations you ask for.
  • To run product reviews, on-site search, forms, and our chat assistant.
  • To maintain and improve our product information, customer support, site function, security, and accessibility.
  • To understand how our site and communications perform and which products people are interested in.
  • To send marketing email you've signed up for, including reminders about products you looked at, and to measure advertising, build advertising audiences, and show you ads elsewhere, in each case subject to the consent rules that apply where you live.
  • To comply with law, verify and respond to privacy requests, protect legal rights, and keep our systems secure.

We won't collect, use, or share new categories of Consumer Health Data, or use it for new purposes, without first updating this policy and getting your consent where the law requires it.

Where it comes from

  • You, through what you enter, submit, buy, request, or write to us.
  • Your browser or device, when you use our website, open our emails, or use our online tools.
  • Our BigCommerce storefront, customer-account, order, payment-status, fulfillment, and customer-service records.
  • Service providers that run our ecommerce, email, marketing, analytics, security, reviews, forms, search, chat, affiliate-tracking, and related systems for us.

What we may share

Subject to any consent the law requires, we may share:

  • Health-related browsing, search, product-interaction, and shopping activity.
  • Health and wellness information you submit through a tool run by another company (for example, our chat assistant or review service).
  • Account, contact, and order information connected with health-related products or communications.
  • Online identifiers and technical information connected with health-related activity.
  • Associations between you and product interests, health concerns, or wellness goals.

Who we share it with

We disclose Consumer Health Data to companies that help us run the store and serve you. Depending on their role, they may act as our processors or fall into another category under the law that applies to you. The categories are:

  • Ecommerce hosting, storefront, payment, fraud-prevention, tax, shipping, fulfillment, subscription, and account services.
  • Email, customer-support, and communications services.
  • Review, product-question, form, on-site search, and chat services.
  • Analytics, session-recording, advertising-measurement, social-media, audience, and retargeting platforms.
  • On-site pop-up, personalization, and product-recommendation services, and an identity-matching partner one of them uses (see "Third-party tracking" below).
  • Affiliate-attribution and referral-tracking services.
  • Security, legal, compliance, and professional services.

To the extent a disclosure counts as "sharing" under Washington's law, the categories of third parties are: advertising, social-media, audience, and retargeting platforms; analytics and advertising-measurement platforms; marketing, pop-up, and personalization platforms, including the identity-matching partner noted above; and affiliate-attribution platforms.

Corporate affiliates we share Consumer Health Data with: none. "Affiliate" here means a related company under common control, as the Washington law defines it. It doesn't mean the independent affiliate marketers in our referral program.

We may also disclose information when the law requires it, to protect rights or safety, or as part of a merger, sale, or similar transaction, subject to the law that applies.

Third-party tracking

Some companies that provide services on our site can collect information about your online activity over time and across other websites. Here's how that works on www.freedom-flowers.com today:

  • Advertising and analytics tools. We use services including Meta, Google, Pinterest, Microsoft Clarity, and analytics tools to understand website activity and measure advertising. Certain scripts and tracking functions are activated only after you accept the relevant cookie categories. Some analytics technology may operate with limited functionality before consent. Depending on the service and your privacy choices, these companies may receive page addresses, product information, and online identifiers.
  • Some tools load before you make a cookie choice: our email service (Klaviyo), which receives a session identifier and the page address, and records the visit on your profile if it already knows you from a sign-up or an email link; our pop-up service (Justuno) and an identity-matching partner it loads (LiveIntent), which receive the address of the page you're on along with a browser identifier; our affiliate-tracking service (Affiliatly); and our reviews display (Fera). We're working with our pop-up provider on the identity-matching piece and will update this section when it changes.

You can change your cookie choice at any time through the cookie settings link on our site. Our Cookie Policy lists the cookies in use.

Information that moves without the browser. Your cookie choice controls scripts in your browser and the server-side advertising events described below. It doesn't stop the order and account transfers needed to fulfill your purchase and send you transactional messages. When you place an order, your order and account details (including the products bought) go from our store to our email service, which uses them for order and shipping messages and, if you've signed up for marketing, for marketing email. Our store platform also sends purchase and shopping events with product identifiers to Meta's measurement service from its servers, matched using hashed contact details. The platform sends those events only when you've accepted the advertising cookie category, the same choice that controls the Meta pixel in your browser. Customer lists we keep in our email service can be matched to advertising platforms as hashed lists to build advertising audiences. We don't keep any advertising audience defined by a health-related product or page.

Your rights

Subject to the law that applies to you, you can:

  • Confirm whether we're collecting, sharing, or selling Consumer Health Data about you.
  • Get access to the Consumer Health Data we hold about you.
  • Get a list of the third parties and affiliates we've shared or sold your Consumer Health Data with, with an email address or other online contact for each.
  • Withdraw consent to our future collection or sharing of your Consumer Health Data.
  • Have your Consumer Health Data deleted.
  • Appeal if we decline a request.

You don't have to create a new account to make a request, and we won't treat you differently for making one.

Two advertising controls, because they cover different things. To opt out of browser-based advertising tracking, open the cookie settings link on our site and turn off the advertising category; that also stops the server-side advertising events tied to those tags. You can also ask us to stop using your information for customer-list advertising or other targeted advertising by emailing service@freedom-flowers.com with the subject line Advertising Opt-Out; no identity verification is required. Changing your cookie settings doesn't automatically remove you from customer-list advertising audiences.

Correcting your information. You can ask us to correct inaccurate personal data we hold about you using the same process.

How to make a request

Email service@freedom-flowers.com with the subject line Consumer Health Data Request.

Tell us which right you're exercising and give us enough to find your records and confirm it's you (the email address on your orders is usually enough). Don't send medical records, ID numbers, card numbers, or passwords.

If you have a Freedom Flowers account, we may use that account's information to verify your request. If we can't reasonably verify a request, we may ask for a little more information before acting on it.

We'll respond without undue delay and within 45 days of receiving your request. If a request is unusually complex, or we get many at once, we may take up to 45 more days; if so, we'll tell you within the first 45 days and explain why. Requests are free, except where the law allows a reasonable fee for requests that are clearly unfounded, excessive, or repetitive.

When we delete your Consumer Health Data, we'll do it within 30 days of verifying your request and tell the service providers and third parties that hold it to do the same, as the law requires. Copies in backups may take longer to clear: up to six months after we verify your request under Washington law, and up to the period Nevada law allows where it applies.

Appeals

If we decline your request, you can appeal by emailing service@freedom-flowers.com with the subject line Consumer Health Data Appeal. Include your original request, our response, and why you think we should reconsider.

We'll answer an appeal in writing within 45 days. If we deny it, we'll explain why and give you a way to contact your state Attorney General:

Security and retention

We use administrative, technical, and physical safeguards suited to the amount and kind of information we hold.

We keep Consumer Health Data only as long as we need it for the purposes above, to provide what you've asked for, to meet legal, accounting, fraud-prevention, security, or recordkeeping obligations, or as the law otherwise allows. Retention varies by system and type of information.

Changes to this policy

We may update this policy when our practices or the law change. We'll post the updated version with a new effective date, and for material changes we'll show a notice on our homepage for 30 days. Where a change would apply to information we already hold, we'll take reasonable steps to notify you electronically and give you a chance to withdraw consent. Where the law requires it, we'll describe new categories or purposes and get your consent before using Consumer Health Data for them.

Contact

Freedom Flowers LLC
PO Box 147
Kooskia, ID 83539
United States

Email: service@freedom-flowers.com