Privacy Policy

Plants and Things LLC

Effective Date: October 19, 2026

At Plants and Things LLC, we respect your privacy and value the trust you place in us. This Privacy Policy ("Policy") applies to www.plantsandthingsllc.com and governs the collection, use, disclosure, and protection of personal information.

This Policy explains how information may be collected and handled when you visit our website, contact us, make a purchase, or register for a workshop or event.

By using our website, you acknowledge the data practices described in this Policy.

I. Collection of Your Personal Information

To provide our products and services, Plants and Things LLC may collect or receive personally identifiable information, including:

• First and last name
• Mailing or billing address, when necessary
• Email address
• Telephone number
• Order details, purchase history, and transaction information
• Workshop or event registration information, when provided to us

We collect information you voluntarily provide when contacting us, purchasing products, requesting services, or communicating with our business.

Payment information may be collected and processed through independent third-party payment providers. Plants and Things LLC does not collect or store complete payment card numbers through its website.

Our website may also process certain technical information through its hosting and security providers, as described below.

Plant Quiz: Our website's plant quiz processes answers within the visitor's browser. Quiz responses are not transmitted to or stored on our website's server.

II. Use of Your Personal Information

Plants and Things LLC collects and uses personal information for purposes including:

• Operating our business and providing requested products and services.
• Processing purchases, issuing receipts, and fulfilling orders.
• Coordinating shipping, local pickup, or other available fulfillment arrangements.
• Responding to customer inquiries and providing assistance.
• Managing workshop and event registrations.
• Communicating important information concerning purchases, registrations, or services.
• Maintaining business, financial, and tax records.
• Protecting the security of our website and preventing fraud or misuse.
• Complying with applicable laws, regulations, and legal obligations.
• Carrying out obligations arising from transactions or agreements with customers.

We do not currently operate a newsletter, promotional mailing list, or customer rewards program.

If we introduce these services, we will update this Policy as appropriate and provide any notices, choices, or consent required by applicable law.

III. Sharing Information with Third Parties

Plants and Things LLC does not sell, rent, or lease customer contact lists to third parties.

We do not currently sell personal information or share it for cross-context behavioral advertising.

We may share information with trusted third-party service providers when reasonably necessary to:

• Process payments and manage transactions.
• Provide website hosting, security, and technical support.
• Maintain business communications.
• Coordinate order fulfillment.
• Manage workshop or event registrations.
• Provide customer assistance.
• Maintain legally required business records.

Service providers may process or store information in connection with the services they provide.

We may also disclose information when required by law, legal process, or a lawful governmental request, or when reasonably necessary to protect our rights, property, customers, or the public.

IV. California and Other State Privacy Rights

Depending on applicable law, residents of California and certain other states may have additional rights concerning their personal information.

These rights may include:

• Requesting access to personal information collected or maintained about them.
• Requesting correction of inaccurate personal information.
• Requesting deletion of personal information, subject to applicable exceptions.
• Requesting information about certain disclosures or uses of personal information.
• Opting out of the sale or sharing of personal information where applicable.

Plants and Things LLC does not currently sell personal information or share it for cross-context behavioral advertising.

Privacy Requests

To submit a request concerning your personal information, email:

info@plantsandthingsllc.com

Please include Privacy Request in the subject line.

We may request reasonable information to verify your identity before processing a request.

We will respond in accordance with applicable privacy laws. We will not unlawfully discriminate against individuals for exercising applicable privacy rights.

California residents may learn more about their privacy rights through the California Attorney General's website:

https://oag.ca.gov/privacy/ccpa

If our information practices change in a way that requires a separate opt-out mechanism, we will implement the appropriate process as required by law.

V. Automatically Collected Information and Cookies

Our website's hosting and security services may automatically process certain technical information, including:

• IP address
• Browser type and device information
• Access times
• Referring website addresses
• Technical request and security information

This information may be used to operate, maintain, secure, and support the website.

Our current website infrastructure uses a Cloudflare security cookie identified as __cf_bm, which helps protect against automated traffic and malicious activity.

We do not currently use Google Analytics, Meta Pixel, advertising trackers, or similar technologies for personalized advertising.

We do not currently use cookies to personalize product recommendations or track visitors across unrelated websites for targeted advertising.

Visitors may be able to manage cookies through their browser settings. Restricting certain cookies may affect website functionality or security features.

VI. Links to Other Websites

Our website may contain links to independently operated websites, including social media platforms, payment services, plant care resources, and workshop registration providers.

Plants and Things LLC is not responsible for the content or privacy practices of independently operated websites.

We encourage visitors to review the privacy policies of external services before providing personal information.

VII. Security of Your Personal Information

Plants and Things LLC takes reasonable administrative, technical, and physical measures to protect personal information from unauthorized access, use, alteration, or disclosure.

Our website uses HTTPS encryption through Transport Layer Security (TLS), commonly referred to as SSL, to help protect information transmitted between visitors and the website.

Third-party payment providers maintain their own security measures for processing payment information.

Although we take reasonable precautions, no electronic transmission, network, or data storage system can be guaranteed completely secure.

VIII. Right to Deletion

Subject to applicable law and certain exceptions, individuals may request deletion of personal information maintained by Plants and Things LLC.

Upon receiving a verifiable request, we will review the information involved and determine the appropriate action under applicable law.

Where legally required and reasonably applicable, we will also communicate deletion requests to service providers processing information on our behalf.

We may retain information when reasonably necessary to:

• Complete a transaction or provide a requested product or service.
• Maintain legally required financial, tax, or business records.
• Detect or prevent fraud, security incidents, or unlawful activity.
• Investigate or resolve disputes.
• Comply with legal obligations.
• Protect legal rights or fulfill contractual responsibilities.
• Carry out other purposes permitted by applicable law.

Information maintained independently by third-party payment processors or registration providers may also be subject to those providers' privacy procedures.

Deletion requests may be submitted using the contact information in Section IV.

IX. Data Security and Breach Notification

Plants and Things LLC maintains reasonable safeguards and internal procedures intended to protect personal information and respond to suspected security incidents.

If a security incident involving personal information occurs, we will take reasonable steps to investigate, assess, contain, and document the incident.

When notification is required by applicable law, we will notify affected individuals and appropriate authorities in the manner and within the timeframes prescribed by law.

We may coordinate with relevant service providers or professional advisers when necessary to investigate or respond to an incident.

X. Children Under 13

Our website is intended for a general audience and is not directed toward children under the age of 13.

We do not knowingly solicit or collect personal information directly from children under 13.

If you believe a child has provided personal information to us, please contact us so that we may review the matter and take appropriate action.

XI. Email Communications

Plants and Things LLC may contact customers by email to:

• Respond to inquiries.
• Provide receipts and purchase confirmations.
• Communicate order updates or pickup arrangements.
• Provide information about workshop or event registrations.
• Address customer service matters.

We do not currently operate a promotional email subscription list or newsletter.

If promotional email communications are introduced in the future, we will provide an appropriate unsubscribe mechanism and comply with applicable email marketing requirements.

XII. External Data Storage and Retention

Personal information may be processed or stored on servers operated by third-party service providers, including website hosting, business communications, payment processing, and order-management services.

We retain information for as long as reasonably necessary to:

• Complete transactions and provide services.
• Maintain business and tax records.
• Respond to customer inquiries.
• Resolve disputes.
• Meet applicable legal obligations.

Retention periods may vary depending on the type of information and the requirements applicable to the business or service provider.

XIII. Changes to This Privacy Policy

Plants and Things LLC reserves the right to update this Privacy Policy to reflect changes in our business operations, website services, data practices, or applicable laws.

Revisions will be posted on this website with an updated effective date.

If material changes are made to how personal information is handled, we will provide appropriate notice through our website or other legally required methods.

We encourage visitors to review this Policy periodically.

XIV. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or the handling of personal information, please contact:

Plants and Things LLC

Email: info@plantsandthingsllc.com

Website: www.plantsandthingsllc.com

Effective Date: October 19, 2026