On this page

Privacy Policy

Last updated: April 30, 2026

This Privacy Policy explains how houseplants (“we,” “us,” “our”) collects, uses, shares, and protects personal information when you visit https://mailhouseplants.com (“Site”) or make a purchase from us. It also describes the choices and rights available to you, including specific rights for California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

1. Information We Collect

Information You Provide

  • Account information – name, email, password, optional phone number
  • Order information – billing and shipping address, items purchased, gift messages
  • Payment information – handled directly by our payment processor; we do not store full card numbers on our servers
  • Communications – messages you send us through the Site, email, or reviews

Information Collected Automatically

  • Device and browser data – IP address, user agent, referring page, time of visit
  • Usage data – pages viewed, products clicked, cart activity
  • Cookies and similar technologies – see Section 5

Information from Third Parties

We may receive information from payment processors (transaction confirmation, fraud signals), shipping carriers (delivery status), and analytics providers (aggregated traffic data).

2. How We Use Your Information

  • Process and fulfill your orders, including shipping and customer service
  • Send transactional emails (order confirmations, shipping updates, refund notices)
  • Maintain your account and order history
  • Respond to your inquiries and reviews
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations (tax records, subpoenas, audits)
  • Improve the Site and our products through aggregated analytics
  • With your consent, send marketing emails – you can unsubscribe at any time

3. How We Share Your Information

We do not sell your personal information for money. We share it only as described below:

  • Service providers – payment processors, shipping carriers, email delivery services, hosting and security providers, and analytics vendors, each contractually bound to handle your data only for the services they provide to us
  • Legal compliance – when required by law, court order, or to protect our legal rights, the safety of users, or the public
  • Business transfers – in the event of a merger, acquisition, or asset sale, with notice to you
  • With your consent – for any purpose disclosed at the time you provide it

For California residents: under the CCPA/CPRA, certain disclosures of personal information to advertising and analytics partners may be considered “sharing” for cross-context behavioral advertising. You have the right to opt out – see Section 7.

4. Categories of Personal Information (CCPA/CPRA Disclosure)

In the past 12 months, we have collected the following categories of personal information from consumers, as defined by the CCPA/CPRA:

  • Identifiers (name, email, IP address)
  • Customer records (billing/shipping address, phone)
  • Commercial information (orders placed, products viewed)
  • Internet or network activity (browsing on the Site)
  • Geolocation data (approximate, derived from IP or shipping address)
  • Inferences drawn from the above (e.g., product preferences)

We do not knowingly collect sensitive personal information beyond what is necessary to process transactions (for example, a payment account identifier returned by our processor).

5. Cookies and Tracking Technologies

We use cookies and similar technologies to keep your cart contents between visits, remember your login state, and understand how the Site is used. You can control cookies through your browser settings; disabling them may affect cart and checkout functionality. Where required by law, we present a cookie consent banner before non-essential cookies are set.

6. Data Retention

We retain personal information only as long as needed to fulfill the purposes described in this Policy or as required by law. Order records are retained for at least the duration required by tax and accounting rules. Inactive accounts are deleted after 24 months. Completed-order personal data is anonymized after 12 months unless retention is required for ongoing claims, warranty, or legal obligations.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we have collected about you and how we use and share it
  • Access a copy of that information in a portable format
  • Correct inaccurate personal information we hold about you
  • Delete personal information we have collected from you, subject to certain exceptions
  • Opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising
  • Limit our use of sensitive personal information to what is necessary to perform the requested service
  • Not be discriminated against for exercising these rights – we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right

To exercise any of these rights, email us at [email protected] with the subject line “Privacy Request.” We will verify your identity (typically by confirming order details or account access) and respond within 45 days. You may also designate an authorized agent to act on your behalf with written permission.

8. Children’s Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

9. Security

We use industry-standard administrative, technical, and physical safeguards to protect your personal information, including HTTPS encryption in transit, restricted access to systems, and regular security review. No system is perfectly secure; we encourage you to use a strong, unique password for your account.

The Site may contain links to third-party websites or services we do not control. This Policy does not apply to those third parties; please review their privacy policies before providing them with information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated through a notice on the Site or by email to registered users.

12. Contact

Email: [email protected]

This Policy is governed by the laws of California and the United States. See our Terms and Conditions for additional terms governing your use of the Site.

Last updated: April 30, 2026