Privacy Policy
Heirloom Roses Privacy Policy
Privacy Policy (Last updated: October 2, 2025)
This Privacy Policy (the “Policy”) describes how Heirloom Roses, Inc. (“Heirloom Roses”, “we, or “us”) collects, stores, uses, and discloses personal information, including when you: (1) use our website located at https://heirloomroses.com/, (2) engage with us on social media, (3) attend events with us, or (4) communicate with us. This Policy addresses specific disclosure requirements from various privacy laws and also serves as our ‘notice at collection.’
Personal Information We Collect and Process
Heirloom Roses collects information about you in a number of ways. We collect information directly from you, such as when you: (1) subscribe to our mailing list, (2) make a purchase from us, (3) use our chatbot, or (4) create an account. We collect information automatically from you through the use of Cookies and Similar Technologies when you: (a) visit our website or (b) engage with our emails. Heirloom Roses may also collect information about you from others, such as: (i) other users, (ii) public sources, (iii) data brokers, or (iv) people in our network. We may also make inferences about you, such as inferences about products that may interest you or about security/policy matters. This information includes:
-
Identifiers such as your real name, account name, username, unique personal identifier, unique online identifier, IP address, or other similar identifiers.
-
Contact Information, postal address, email address, or phone number.
-
Demographic information, such as your market area (e.g., Portland Metropolitan Area).
-
Commercial information, including information about your prior purchases from us.
-
Geolocation information, such as your device’s precise location when you use the Shop app to make purchases from Heirloom Roses. Geolocation information may qualify as “sensitive” personal information under applicable privacy laws.
-
Content, such as reviews you’ve provided.
-
Financial account information, such as the credit card information you provide for billing purposes. Financial account information may qualify as “sensitive” personal information under applicable privacy laws
-
Your preferences, interests, and affiliations, such as the color roses you enjoy. We may also infer your preferences based on your interactions on the website.
-
Communications, such as when you send us email or engage with us on social media platforms.
-
Audio, electronic, visual, thermal, olfactory, or similar information, including voicemail recordings you provide or photographs taken at our events.
-
Chatbot Recordings, such as your search queries or questions you submit through our chatbot.
-
Internet and electronic network activity, and your interactions, such as the information we automatically collect about your browser, device, or connection when you visit our websites or engage with our emails through the use of Cookies and Similar Technologies which often assign a unique identifiers. Such information may include:
-
Date and time of your visit to our websites and duration of your visit,
-
Your traffic patterns, use patterns, and clickstreams,
-
Type of device, web browser, and/or operating system used,
-
Your IP address,
-
The website from which you linked to our website, and
-
Other similar information about your use of our websites, applications or other services.
Heirloom Roses may process de-identified personal information. Data is in this state cannot be used to infer information about, or otherwise be linked to, a particular individual. In those instances, and unless allowed under applicable law, we will maintain such information in a de-identified state, and will not try to re-identify the individual.
Cookies and Similar Technologies
Our website, emails, and other services use cookies and similar technologies to automatically collect personal information about your use and interactions.
-
Cookies are small files placed on your device to store information, often consisting of a unique personal identifier, for a variety of purposes. We use session cookies to observe your navigation throughout the website for the purposes described above. We may also hire others, such as a company providing analytics software, to place cookies on our digital properties to gather information on our behalf. You may set your Web browser to notify you when you receive a cookie and you may also erase cookies from your browser after shopping. If you delete our cookies, you limit our ability to personalize HeirloomRoses.com for your next shopping visit; however, deleting a cookie will not prevent you from shopping and purchasing at our site in the future.
-
Web beacons are small tags placed in digital content, for example on a website or email, to track how the user interacts with the content. Such interaction will trigger a transfer of information that can be used to gain insight, such as how many people have viewed the content.
-
Pixels and web tags are encoded in digital content to enable functionality and/or to track engagement with digital content across contexts. We may use web beacons or pixel tags on our website and/or in our communications with you to enable us to know whether you have visited a web page or received a message. Pixels and web tags may enable us to relate your viewing or receipt of a web page or message to other information about you, including your Personal Information.
-
SDKs. A software development kit (SDK) is a developer tool embedded in an application often used to collect information about use of the application, as well as the device running the application.
-
Fingerprinting. Device fingerprinting is used to identify unique devices by collecting information about various aspects of the device’s hardware, software, and connection.
Heirloom Roses may collect your email address via cookies and pixels on the website through the use of trusted third party partners. These partners may combine your email information with other information they have access to such as mailing address so that Heirloom Roses may serve relevant marketing offers to you via direct mail. If you do not want Heirloom Roses to collect information about you, please contact us to opt out.
The table below provides additional information about the cookies we may use:
Cookie(s) Provider |
Heirloom Roses’ Use / Purpose of cookie information |
To learn about Cookie Provider’s Use of cookie information |
How to Opt-Out |
|
Analytics, marketing, audience measurement |
How Google uses information from sites that use its services |
|
Shopify |
Analytics, audience measurement |
||
Meta |
Analytics, marketing, security |
You can find information on how to opt-out in the “How can you control your Information” section of the cookie policy. |
|
Hotjar |
Functionality, website user experience |
||
Microsoft |
Analytics, marketing |
||
|
Analytics, marketing |
||
Klaviyo |
Analytics, marketing |
You can manage your cookie preferences by going to Section 6: Your Choices About Cookies in the Cookie Notice and clicking “Your Privacy Settings.” |
|
LS Direct |
Analytics, marketing |
||
Optimizely |
Analytics, marketing |
Please see the Exercising Your Rights section for more information on controlling cookies and similar technologies.
Use of Your Information
We use your information for a variety of purposes, including to:
-
Schedule deliveries of merchandise that you purchase online,
-
Create an online account for you at HeirloomRoses.com,
-
Bill your credit card for your purchases,
-
Confirm and track your orders,
-
Respond to your customer service inquiries,
-
Provide promotional communication and other information to you, if you choose to receive them,
-
Offer the products you want,
-
Customize your shopping experience,
-
Improve our website design, and
-
To conduct business generally.
Additional information about what we do with the information collected can be found in the following table:
Use |
Personal Information Types Used |
Provide and improve our services |
Identifiers Internet and electronic network activity, and your interactions |
Personalize user experience and content |
Identifiers Demographic Information Commercial Information Your preferences, interests, and affiliations Internet and electronic network activity, and your interactions |
Communicate with you, including responding to inquiries and providing updates |
Identifiers Communications |
Analyze usage trends, conduct research, and enhance security measures |
All Personal Information Categories, as necessary |
Comply with legal obligations and prevent fraudulent activities. |
All Personal Information Categories, as necessary |
In carrying out these purposes, we combine information we collect from different contexts and/or sources to provide you a more seamless and personalized experience, to make informed business decisions, and for other legitimate business purposes.
Sensitive Data
As described above, depending on our interactions, some of the information we collect may qualify as “sensitive” under certain applicable privacy laws. We only collect such sensitive information as necessary to conduct business or for other legitimate purposes. For example, we only collect financial account information to facilitate payments for our services or as necessary to provide services and we only collect precise data location when you’re making a purchase on the Shop app.
When We Share Your Personal Information
We share or provide others with access to your information: (1) with your consent, (2) at your direction, (3) to complete any transaction or request you have authorized, or (4) for other legitimate business purposes. For example, we use companies to verify and process credit card transactions and to deliver packages. We share information with our e-commerce platform provider. We may share your information with others who help us analyze sales data, maintain our records, and provide other services for Heirloom Roses such as collecting site navigation information. We might transfer your information to a third party in the event of a merger, acquisition, sale, transfer of assets or any part of our business. We also may be required to disclose your personal information to third parties if necessary to comply with applicable laws, subpoenas or court orders. We may share your information with attorneys, accountants, or other professionals as necessary for legitimate business purposes. In any case, these third parties are not authorized to use your information for any reason other than to perform their contractually assigned functions.
Additional information about when we share your information is shown below:
Category of Recipient |
Use |
Data Types |
Payment Processors |
When you make a purchase from Heirloom Roses, your information will be shared with payment processors or others who help to complete the transaction. |
Identifiers Contact Information Financial account information Internet and electronic activity and your interactions |
Service Providers |
We share your information with third parties, such as our vendors, suppliers or other professional services firms that provide us with services or work on our behalf for the purposes described herein. This may include our cloud service providers, shipping partners, data analytics providers, and security vendors. In such cases, these companies must abide by our requirements and are not allowed to use personal information they receive from us for any other purpose beyond providing us with their respective services. |
Identifiers Contact Information Demographic information Geolocation information (which may include sensitive information) Commercial information Financial account information Your preferences, interests, and affiliations Communications Audio and visual information Internet and Electronic Network Activity, and Interactions Other unique identifiers |
Affiliated entities or subsidiaries |
We share personal information among Company affiliates and subsidiaries. |
All Personal Information Categories, as necessary |
Other Business in the event of a Merger, Acquisition, or Sale |
We might transfer your information to a third party in the event of a merger, acquisition, sale, transfer of assets or any part of our business. |
All Personal Information Categories, as necessary |
Law enforcement, authorities, or others as necessary |
We might disclose your information to a third party, without your consent and without notice to you, if we are required to do so by law. We may also disclose your information to a third party if we have a reasonable belief (1) we are legally or ethically obligated to do so, (2) such disclosure is necessary to protect, establish, or exercise our legal rights or defend against legal claims, or (3) disclosure is necessary to protect our / your / others’ rights, property, and/or safety. |
All Personal Information Categories, as necessary |
Business and Marketing Partners |
Subject to your cookie preferences, device settings, and privacy preferences, we may share information with analytics, marketing, and digital advertising vendors who process your information to provide analytics and marketing services to us. They may also use such information in accordance with their own privacy policies. Please see our Cookies and Similar Technology section for more information. |
Identifiers Contact Information Demographic information Commercial information Your preferences, interests, and affiliations Internet and Electronic Network Activity, and Interactions Other unique identifiers |
Other professionals |
We may share your information with attorneys, accountants, or other professionals as necessary for legitimate business purposes. |
All Personal Information Categories, as necessary |
Shopify
We use the Shopify platform to power our online store. Shopify collects and processes personal information for functional, analytical, and marketing purposes which allows us to sell our products, create subscription plans, share relevant ads, and provide you with a localized shopping experience. To deliver these services, information submitted by customers will be shared with Shopify as well as third parties that may be located in other countries. You can find more information on how Shopify processes your information here and control how Shopify uses your data here.
AI Chatbot
We may use the information you submit to our AI Chatbot to respond to your search queries or questions. If you submit your personal information to the AI Chatbot we will also use the information shared with us to develop and train our tool to provide a better and more personalized experience to you and other users of our services. If you do not want your personal information used to train our AI tool, please do not use the AI Chatbot.
Children's Data
We do not knowingly collect information from children under the age of 13. If you are under the age of 13, you must ask your parent or guardian to assist you in using our website. If you're a parent or guardian of a child and become aware that your child has provided personal data to us, contact info@HeirloomRoses.com. If we learn that we've collected the personal data of a child in violation of applicable law, we'll take reasonable steps to delete the personal data.
Privacy Protection
We protect our databases with various physical, technical and procedural measures to assist in protecting against the loss, misuse, and unauthorized alteration of your information that is under our control. Unfortunately, no data storage system, or system of transmitting data over the Internet, can be guaranteed to be 100% secure. As a result, we cannot guarantee the security of our network, the means by which personal information is transmitted between your computer and our network, or any personal information provided to us or to any third party through or in connection with the website.
Retention and Storage
We consider the following factors when determining how long we retain and store your information:
-
Our legal and contractual obligations,
-
Our professional and ethical responsibilities,
-
The purpose for which your information was collected or processed,
-
Your requests to delete the information,
-
Retention periods in applicable laws and regulation, and
-
Our legitimate business purposes. We may retain your data to the extent it is necessary to prevent fraudulent activity, to protect ourselves against liability, and to allow us to enforce our contractual or other rights and to pursue available remedies and limit any damages we might sustain.
Heirloom Roses stores personal information in the United States and other jurisdictions where we do business. We take steps to process the data that we collect in accordance with this Policy’s provisions and the requirements of applicable law, including those related to the cross-border data transfers.
Linking To and From Outside Websites, Products, and Services
This Privacy Policy applies only to the information Heirloom Roses collects and processes. The HeirloomRoses.com website, our content, or our communications could contain links to other websites and services that are not owned or controlled by us. We are not responsible for and have not reviewed the privacy practices of such sites or services, or the owners or operators of such sites or services. We shall not be responsible or liable in any way as a result of your use of any other sites or services. We encourage you to read the privacy policy associated with a given site or service before submitting any information if you have concerns about how information may be collected or used.
You may make a purchase from HeirloomRoses.com through a link from another website or search engine. In such an event, please be aware that both HeirloomRoses.com and that website or search engine may have access to certain portions of your information. Our Privacy Policy does not apply to those other websites or search engines.
SMS Terms & Conditions
We may send you promotional emails or SMS (Short Message Service) notifications about Heirloom Roses products that we hope will be of interest to you. You may select how often you would like to receive promotional messages. You may also opt-out at any time, and we will stop sending you promotional emails or SMS notifications. Consent to receive promotional emails or SMS notifications is not a condition of using the Heirloom Roses services.
By opting in to receive SMS messages from Heirloom Roses, you agree to the following Terms & Conditions:
-
Subscription: By providing your mobile number and opting in to receive SMS messages, you consent to receive recurring automated marketing messages from Heirloom Roses at the number provided. Message frequency may vary. Message and data rates may apply.
-
Opting Out: You can opt out of receiving SMS messages from Heirloom Roses at any time by replying STOP to any message you receive. You will receive a confirmation message upon successful opt-out. If you wish to opt back in, simply text START to the same number.
-
Customer Support: For help or support regarding SMS messages, text HELP to the number from which you are receiving messages. You can also contact Heirloom Roses customer support at 1-800-820-0465 or info@heirloomroses.com.
-
Changes to Terms: Heirloom Roses reserves the right to update or modify these SMS Terms & Conditions at any time without prior notice. Any changes will be effective immediately upon posting the updated Terms & Conditions on the Heirloom Roses website.
Consent: By providing your mobile number and opting in to receive SMS messages, you consent to these SMS Terms & Conditions and to receiving marketing messages from Heirloom Roses.
Your Rights and Control of Personal Information
Privacy laws provide individuals with specific rights regarding their personal information. Depending on the jurisdiction in which you reside you may have some or all of the following rights and choices regarding your information.
-
The right to be informed or to know. You may have the right to be informed of how we process your information. For example, you may have the right to be informed or to know:
-
The categories of personal information we collect and process about you.
-
The categories of sources for the personal information we collect and process about you.
-
The purposes for collecting or processing that personal information.
-
The categories of personal information shared or disclosed to third parties, the categories of those third parties, as well as the purposes of such sharing or disclosure.
-
The right to access. You may have the right to access or view the personal information we process about you.
-
The right of data portability. You may have the right to request a copy of your personal information in electronic format and the right to transmit that personal data for use in another service.
-
The right to correct. You have the right to request that Heirloom Roses correct any of your personal information.
-
The right to delete. You have the right to request that Heirloom Roses delete any of your personal information that we collect from you or process, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and notify any relevant third parties to delete) your personal information, unless an exception applies.
-
The right to not be subject to automated decision making.
-
The right to opt-out. You may have the right to limit our use of your personal information or to opt-out of certain processing of personal information. For example, in some jurisdictions, you may have the right to limit our use of your sensitive personal information and to opt-out of targeted advertising.
-
Right to not be discriminated against for exercising your rights. If you exercise your rights, we will not discriminate against you.
Exercising Your Rights
You can exercise your rights, as well as make choices regarding Heirloom Roses’ collection and processing of your information through various methods and tools. For example, you can:
-
Contact us. You can request that we delete your personal information by contacting us at info@HeirloomRoses.com.
-
Update your personal information. You may update your account information at any time on the website.
-
Use browser controls. Most browsers provide settings to control your interactions with cookies, which will impact the information processed by cookies on our digital properties. Please refer to your browser for information on how to access these settings. Your settings may impact your experience with our digital properties and the functionality available to you.
-
Unsubscribe. With each marketing communication, you will be given the opportunity to opt-out of receiving future marketing notices. You may also opt-out of receiving future marketing notices by contacting Heirloom Roses’ customer support at 1-800-820-0465 or info@HeirloomRoses.com. If you request that we not contact you for marketing purposes (either by using the unsubscribe mechanism or by sending us an email), we reserve the right to contact you for non-marketing purposes.
You, or someone legally authorized to act on your behalf, may make a request to exercise your rights related to your personal information. We may ask that you:
-
Provide sufficient information that allows us to reasonably verify you or your authorized representative’s authority to act on your behalf. Where possible, we will attempt to verify your identity by only using we have previously collected from you, such as an e-mail address. DO NOT SEND US SENSITIVE PERSONAL INFORMATION, such as a social security number or picture of photo ID, in your initial request to exercise any rights.
-
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and/or confirm the personal information relates to you. We will confirm receipt of any request to exercise your rights within ten (10) days of receipt, and will endeavor to respond to a verifiable consumer request within thirty (30) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.
The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Questions?
If you have any questions or comments about this Privacy Policy or the use of your information, please email us at info@HeirloomRoses.com.
Privacy Policy Changes
We may revise this Policy at any time to enhance transparency. We may also update the Policy, as necessary or as useful, in response to (1) changes in applicable laws, regulations, or standards, (2) changes to our processing of personal information, or (3) changes to our business operations. For example, we may modify the Policy if a new applicable law requires additional notices or if we intend to collect new categories of personal information. We will post any revised Policy here and provide a “Last Updated” date at the top of this Policy. In some cases, we might provide you with additional notice (such as by adding a statement to the homepage our website). We encourage you to review this Policy regularly to stay informed about our processing of personal information, your rights, and your choices.