1) What we collect

1. We collect the following categories of information, depending on whether you interact with us as B2C or B2B:
   
1. Contact & identifiers: basic account and contact details.
   
2. Account, orders & transactions: purchase history and order records (payments handled by gateways; we don’t store full card numbers).
   
3. Communications: messages you send us and related attachments.
   
4. Marketing preferences: your newsletter subscription status.
   
5. Device & usage information: limited technical data and cookie-based activity for site operation, analytics, and (subject to your choices) advertising.
   
6. Sensitive information (B2B only): data needed for tax-exempt verification and compliance (e.g., government/tax identifiers) and account login credentials (stored securely). We do not use sensitive information for advertising or profiling.
   
2. We may also collect optional info you choose to provide (e.g., product preferences or survey responses).
   

2) Sources

1. We obtain information from:
   
1. You: when you create an account, place an order, contact us, or hand us a business card in person.
   
2. Your device: via cookies and similar technologies for site operation, analytics, and (if not opted out) advertising.
   
3. Your organization (B2B): to confirm trade eligibility and tax-exempt status.
   
4. Our service providers: who process data on our instructions (e.g., payments, fulfillment, marketing, analytics).

3) Why we use your information

1. Fulfill orders & manage accounts (payments, shipping, support)
   
2. Verify trade eligibility & tax-exemption (B2B)
   
3. Communicate & market (newsletter if you opt in)
   
4. Improve our site & services (analytics/performance)
   
5. Protect security & prevent fraud
   
6. Meet legal obligations (tax, accounting, lawful requests)
   
7. Show and measure ads (interest-based/cross-context). You can opt out—see Your Privacy Choices & Rights.

4) Disclosures to service providers/processors

1. We share personal information with service providers operating under contract (they may use it only to deliver their services to us and must protect it), including:
   
1. E-commerce & hosting
   
2. Payments & fraud prevention (we don’t store full card numbers)
   
3. Fulfillment, warehouses & delivery carriers
   
4. Customer support & communications (email/SMS/phone)
   
5. Marketing & analytics/advertising (subject to your opt-out choices)
   
6. Security, IT, and site operations
   
2. We may also disclose information to comply with law, protect our rights or users, or as part of a business transfer (e.g., merger or acquisition). If you shop or interact via third-party marketplaces or platforms, their privacy practices apply to those activities.

5) “Sell” and “Share” (CPRA)

1. We do not sell personal information for money.
   
2. We may “share” limited personal information (e.g., identifiers, device/usage, basic commercial data) with advertising partners for cross-context advertising.
   
3. Opt out: email hello@partners.orchidsluxhome.com with the subject “Opt-Out of Sale/Share.” We’ll process your request as soon as possible and no later than 15 business days, and honor it for at least 12 months (verification may be required).
4. Important: This email method does not automatically control browser-based ad tags on your device. Until our online control is live, ads may still appear but should not be treated as your browser-level opt-out.
   
5. DNT/GPC: We do not currently respond to Do Not Track or Global Privacy Control signals. We plan to add browser-based options and will update this Policy when available.

6) Cookies & similar technologies

1. We use cookies and similar technologies to:
   
1. Operate the site (e.g., login, cart, checkout, security)
   
2. Improve performance (usage statistics and site features)
   
3. Show and measure ads (interest-based advertising)
   
2. Managing cookies: You can block or delete cookies in your browser settings. Ad experiences can also be adjusted in settings offered by platforms you use.
   
3. Opting out of sale/share for ads (temporary method): Until our online controls are available, you may email hello@partners.orchidsluxhome.com with the subject “Opt-Out of Sale/Share.” This request does not automatically disable cookies in your browser; please also use your browser and platform controls.
4. DNT/GPC: We do not currently respond to Do Not Track or Global Privacy Control signals. We plan to introduce browser-based options and will update this Policy when they are available.

7) Data retention

1. We keep personal information only as long as necessary to provide services, manage accounts, fulfill orders, meet tax/accounting and other legal obligations, maintain security/fraud prevention, and resolve disputes. When it’s no longer needed, we delete or de-identify it.
   
1. Orders & transactions: kept for legal, tax, warranty, and fraud-prevention needs.
   
2. Accounts & preferences: kept while your account is active; removed or de-identified after inactivity under our internal schedules.
   
3. Marketing records: kept until you unsubscribe or become inactive.
   
4. Support records: kept until the matter is resolved and as required for compliance/claims.
   
5. B2B sensitive info (resale certificates/IDs): kept as required by tax law, then securely deleted.
   
2. Retention may be extended if required by a legal hold, audit, or dispute.

8) How we protect your information

1. We use administrative, technical, and physical safeguards including encryption in transit (HTTPS/SSL), role-based access controls, least-privilege access, employee training, periodic reviews, secure deletion, and incident response processes. Payment card data is handled by our PCI-compliant payment processors.

9) Your privacy choices & rights

1. Marketing messages: Unsubscribe anytime via the link in our emails; for SMS/phone, reply STOP or follow the provided instructions.
   
2. State privacy rights (e.g., CA/CO/VA/CT): You may have the right to access/know, delete, and correct your personal information, and to opt out of “sale”/“share” for advertising. We do not offer a separate SPI “limit” control because we use sensitive info only for permitted purposes (e.g., tax/legal verification, security). We will not discriminate against you for exercising your rights.
   
3. How to submit a request: Email hello@partners.orchidsluxhome.com. We may need to verify your identity (e.g., via a confirmation link or basic order/account details). You may use an authorized agent with signed permission (we may still verify you directly).
4. Opt out of sale/share for ads (temporary method): Email hello@partners.orchidsluxhome.com with the subject “Opt-Out of Sale/Share.” (See Section 5.)
5. Appeals (where applicable): If we deny your request, you can appeal within 45 days by replying with “Appeal” in the subject line.
   
6. Response timing: We respond within the timeframes required by law.

10) Children

1. Our services are not directed to children. We do not knowingly collect personal information from children under 13 (and we do not sell/share data of consumers under 16 without appropriate consent). If you believe a child provided us personal information, contact us and we will delete it.

11) International transfers

1. We primarily process and store personal information in the United States. If data is accessed from or transferred to other jurisdictions to provide services and support, we apply appropriate safeguards and require our service providers to do the same.

12) Changes to this Policy

1. We may update this Policy from time to time. We will post the updated version, and you can always see the current date at the bottom of this page.

13) Contact us

1. Orchids America LLC
   
2. 2050 North Stemmons Freeway, Unit 307, Dallas, Texas 75207
   
3. Email: hello@partners.orchidsluxhome.com