Privacy policy

Laris Florist ("we", "us") of 5 Headwater Crescent, Richmond Hill, Ontario, runs larisflorist.com. We respect your privacy and handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what we collect, why, and the choices you have.

What we collect

• When you order: your name, email address and phone number; the recipient's name, phone number, delivery address and any delivery instructions; your card message; what you ordered and what you paid. The delivery postal code is also used to measure the driving distance from our studio so we can show the right delivery fee.
• When you pay: depending on what checkout shows, you either pay by card at checkout through our payment processor, or we call you to take payment securely before we start on your order. Either way, we never store your full card number. We keep only the confirmation we need to match the payment to your order.
• When you create an account: your name, email address and a securely hashed password, plus your order history, rewards points, store credit and referral code. If you choose Sign in with Google, Google shares your name, your verified email address and an account ID with us. We never see your Google password, and we don't receive your contacts or anything else from your Google account.
• When you start a Petal Post subscription: the size, schedule and delivery address you choose, and for a gift subscription the recipient's name, phone number and the card message for the first delivery. Payment for a subscription is arranged with you by phone.
• When you contact us or send an event enquiry: your name, contact details and whatever you choose to tell us about the occasion.
• When you chat with our assistant: the conversation, and your name and email if you give them, so our team can follow up when you ask for a person.
• When you leave a review: your name, city, rating and review. Your email address is used to verify the review and is never shown publicly.
• When you sign up for our emails: your email address and the date you agreed.
• Automatically: privacy-friendly, aggregated analytics about which pages are visited, and your IP address in our server logs and security limits to protect the site from abuse.

Why we use it

• To prepare, deliver and confirm your order, and to send you order updates by email.
• To contact you or the recipient if there is a problem with a delivery.
• To answer your questions and enquiries.
• To run your account, rewards points, store credit and referrals, and to send account emails such as password reset links.
• To deliver and manage Petal Post subscriptions.
• After a delivery, to send one email asking how it went and inviting a review.
• To prevent fraud and abuse, and to improve the website and our service.
• To meet our legal and tax obligations.

Recipients' information

When you send flowers to someone else, including a Petal Post gift subscription, you give us their name, address and phone number. We use these details only to deliver the flowers and to contact them about those deliveries. We do not add recipients to any mailing list, and prices are never included with a delivery.

Marketing emails

We send newsletters and offers when you tick the box to agree. If you order from us, we may also email you about new collections and offers for up to two years after your latest order, as Canada's anti-spam law (CASL) allows for customers. Every marketing email includes an unsubscribe link, and you can also reply or email us to stop them at any time. Once you unsubscribe, we stop, whichever way you joined. Order confirmations, delivery updates, subscription confirmations and account emails (such as password reset links, which come from a no-reply address) are not marketing and are sent whenever they apply.

Cookies and your browser

We use a small number of essential cookies: one to keep you signed in to your account, one for staff signing in to the admin area, and a short-lived one that protects the Sign in with Google step and is deleted as soon as it finishes. We do not use advertising cookies or sell your data to advertisers. Your cart, delivery plan, chat history, referral code and light or dark theme preference are stored in your own browser so they are still there when you come back. Our analytics are aggregated and do not identify you.

Who processes data for us

We use trusted providers to run the shop. They only process information to provide their service to us and are not allowed to use it for anything else:

• Vercel, which hosts the website and provides its aggregated analytics;
• Neon, which hosts our secure database;
• Resend, which delivers our emails;
• Helcim, our card payment processor, which handles your card details directly;
• Google, only if you choose Sign in with Google, to confirm who you are;
• Anthropic, whose Claude models power our chat assistant;
• OpenRouteService, which calculates the driving distance to a delivery postal code (only the postal code is sent, never a name or full address).

Some of these providers store data outside Canada, including in the United States, where it may be subject to the laws of that country.

How long we keep it

Order records are kept for as long as Canadian tax and accounting rules require, generally seven years. Account information is kept while your account is open. Enquiries, chat conversations and contact messages are kept while we need them to help you and are then removed. You can ask us to delete your account and the information we are not required to keep at any time.

Keeping it safe

The website is served over an encrypted connection, passwords are stored only as secure hashes, card details never pass through our systems, and access to customer information is limited to the staff who need it to serve you.

Your choices and rights

You can ask to see, correct or delete the personal information we hold about you, or withdraw your consent to marketing, by emailing support@larisflorist.com. We will respond within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Children

Our website is intended for adults. We do not knowingly collect personal information from anyone under 13.

Changes to this policy

If we change this policy, we will post the new version here with a new date at the top.

Contact

Privacy questions: support@larisflorist.com or (437) 291-5605.