Privacy Policy

PlantCo ("PlantCo," "we," "us," or "our") operates dfwplantco.com, a plant delivery website serving Arlington, TX and the surrounding Dallas–Fort Worth area. This Privacy Policy explains what information we collect through our website, why we collect it, how we use it, and the choices you have. It applies to visitors, customers, and anyone who submits information through our site.

Information you give us directly:

• Name, email address, phone number, and delivery/billing address — when you check out, schedule a delivery, or join a group delivery
• Order details — the plants, quantities, and delivery preferences you select
• Messages you send us — through our Contact form or homepage feedback form (name, email, phone, category, message, and an optional 1–5 star rating)
• Product reviews — a rating, written review, and an optional name and up to 3 photos
• Back-in-stock requests — your email address (required), and optionally your name and phone number

Information collected automatically:

• Standard web traffic data such as IP address, browser type, device type, and the pages you visit, collected through Google Analytics (GA4)
• Order-related analytics events (items added to cart, checkout started, purchase completed) — these events include product names, prices, and an order/transaction reference, but do not include your name, email, phone number, or address

Information collected through address lookup:

If you use the address field at checkout, the text you type is sent to OpenStreetMap's free Nominatim geocoding service to suggest matching addresses as you type. If you choose "Use my location," your device's GPS location (shared only with your browser's permission) is sent to that same service to find your address. We do not maintain an account with, or receive any profile data back from, this service — it is used only to help you fill in your address faster.

• To process and fulfill your order, including group deliveries and scheduled deliveries
• To determine whether your address falls within our current delivery area
• To send order confirmations, delivery updates, delivery-photo notifications, and review-request emails
• To respond to questions, feedback, and back-in-stock requests
• To understand how visitors use our site, in aggregate, so we can improve it
• To detect and prevent fraud, abuse, and security issues
• To comply with applicable law

All payments are processed by Stripe, a third-party payment processor. PlantCo does not collect, see, or store your full card number, expiration date, or CVV — that information is entered directly into Stripe's secure checkout and never passes through our servers. Our own order records contain a Stripe session reference, not your card details.

When your order is delivered, our driver may photograph the plants at your door to confirm delivery. We may display that photo publicly on our Recent Deliveries page together with the plant type(s), the delivery city, and the delivery date.

We do not currently display your name or street address alongside a delivery photo on that page. Our systems are capable of storing a customer's first name in connection with a delivery photo, but our website does not currently show that name publicly anywhere.

If you would prefer that your delivery photo not be used this way, email us at info@dfwplantco.com before or after your delivery and we will exclude or remove it.

If you submit a product review, the rating, written review, and any photos you attach are displayed publicly on the relevant plant page, along with your name if you chose to include one. By submitting a photo with a review, you grant the license described in our Terms & Conditions. You can request removal of a review you submitted by emailing us.

We do not sell your personal information. We share information only with the service providers that help us run PlantCo, and only as needed for them to perform that service:

• Stripe — to process payments
• Google (Gmail) — to send order, delivery, and review-related emails from our business email address
• Google Analytics — to measure aggregate website traffic and usage
• OpenStreetMap / Nominatim — to look up and suggest delivery addresses as you type
• Base44 — our website hosting and application platform, which stores and processes the information described in this policy on our behalf
• Government authorities — only where required by law, such as in response to a valid legal request

Our plant suppliers help us source and fulfill inventory, but they do not receive your name, address, phone number, or email address as part of that process.

Our website currently uses only one analytics technology — Google Analytics (GA4) — which sets cookies in your browser to measure site traffic. We do not use advertising pixels, ad-retargeting cookies, or cross-site tracking technologies. See our Cookie Policy for the complete, current list of cookies our site sets and your choices regarding them.

We keep order, feedback, and review records for as long as reasonably necessary to fulfill your order, respond to your inquiries, maintain accurate business and accounting records, and meet our legal obligations. We have not yet adopted a fixed deletion schedule beyond that standard, and we will update this policy if that changes. You may ask us to delete information we hold about you at any time, as described below.

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you and request a copy
• Ask us to correct inaccurate information
• Ask us to delete your personal information, subject to our legitimate business and legal needs (such as completing an order already in progress, or keeping required financial records)
• Opt out of promotional emails at any time, using the unsubscribe link in those emails or by contacting us

To exercise any of these rights, email us at info@dfwplantco.com. We will not discriminate against you for exercising these rights. We respond to requests on a case-by-case basis and may need to verify your identity before fulfilling certain requests.

PlantCo's website is not directed at children, and we do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use reasonable administrative and technical safeguards appropriate to the information we collect, including processing payments exclusively through Stripe's secure systems rather than handling card data ourselves. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will update the "Effective Date" above when we do, and for material changes we will take reasonable steps to make the update noticeable, such as a notice on this page. Continued use of our website after an update constitutes acceptance of the revised policy.