About this policy
The Flower Boutique by Beverly Hills Florist ("we," "us," or "our") is a floral design studio based in Beverly Hills, California. This Privacy Policy explains how we collect, use, and protect information received from visitors to this website and its subdomains (the "Site").
This Policy also describes your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, "CCPA/CPRA"), and the California Online Privacy Protection Act ("CalOPPA").
Information we collect
Information you provide directly
- Inquiry form — name, email address, telephone number, event type, event date, venue, estimated guest count, budget range, and any message you include.
- Newsletter subscription — email address only.
- Google sign-in — if you choose to authenticate with Google, we receive your name, email address, and profile picture as permitted by your Google account settings.
Information collected automatically
- Usage data — pages visited, referral URL, browser type, device type, and approximate geographic location (country/region level) derived from IP address.
- Cloudflare Turnstile — anti-spam signals from your browser and device to distinguish human visitors from automated bots. This data is processed by Cloudflare, Inc. under their own privacy terms and is not retained by us.
We do not collect
Payment card information, government identification numbers, or precise real-time geolocation data.
How we use your information
| Purpose | Basis |
|---|---|
| Respond to inquiry submissions | Legitimate interest |
| Send transactional confirmation emails | Legitimate interest |
| Send newsletter communications | Consent |
| Prevent spam and abuse | Legitimate interest |
| Improve Site performance and content | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
Third-party service providers
We share limited personal information with the following processors solely to operate the Site. Each is contractually bound to handle data in accordance with applicable law.
| Service | Purpose |
|---|---|
| Resend, Inc. | Transactional email delivery |
| Google LLC | OAuth sign-in authentication |
| Vercel, Inc. | Hosting and aggregate edge analytics |
| Plausible Analytics | Cookie-free aggregate traffic analytics |
| Cloudflare, Inc. | Security, CDN, and Turnstile anti-spam |
| Sanity AS | Content management system |
We do not sell or share personal information with third parties for cross-context behavioral advertising.
Cookies and tracking
We use a minimal set of cookies and similar technologies strictly necessary for Site operation and aggregate analytics.
| Cookie / mechanism | Type | Purpose |
|---|---|---|
| Vercel Analytics | First-party, session | Aggregate page performance |
| Cloudflare | Third-party, security | Bot mitigation and DDoS protection |
| Next.js / Vercel | First-party | Core Site functionality |
We do not use advertising cookies, tracking pixels, or cross-site behavioral tracking. Plausible Analytics operates without cookies and does not collect personal identifiers. You can manage or block cookies through your browser settings without losing core Site functionality.
Data retention
| Category | Retention period |
|---|---|
| Inquiry submissions | 36 months from receipt |
| Newsletter subscriptions | Until unsubscribed, or 24 months of inactivity |
| Google sign-in tokens | Session duration only |
| Analytics data | 12 months, rolling |
Your California privacy rights
If you are a California resident, you have the following rights under the CCPA/CPRA. We honor all requests within 45 days of verified receipt.
- Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes of collection, and the categories of third parties with whom it was shared.
- Right to Delete — Request deletion of personal information we hold about you, subject to certain legal exceptions.
- Right to Correct — Request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing — We do not sell or share personal information as defined under the CCPA/CPRA. No action is required on your part.
- Right of No Retaliation — We will not deny services, charge different prices, or otherwise discriminate against you for exercising any of these rights.
To submit a request, email studio@mybhfteam.com with the subject line "California Privacy Request." We will verify your identity before processing your request. Authorized agents may submit requests on your behalf with written permission.
Do Not Track
California law requires us to disclose how we respond to Do Not Track (DNT) browser signals. We do not alter our data practices in response to DNT signals, as there is no industry-wide standard for honoring them. The analytics tools we use do not create cross-site tracking profiles regardless of DNT settings.
Children's privacy
This Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, contact us immediately and we will delete it without delay.
Security
We implement reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or loss. No system is completely secure. We cannot guarantee absolute security, and we are not responsible for the security practices of third-party services linked from this Site.
Changes to this policy
We may update this Privacy Policy periodically. Material changes will be reflected with a new effective date at the top of this page. Continued use of the Site after changes are posted constitutes your acceptance of the updated Policy.
Contact
The Flower Boutique by Beverly Hills Florist Beverly Hills, California studio@mybhfteam.com