Effective Date: June 21, 2026. Artistic Bonsai Nursery operates artisticbonsai.com. This privacy policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, register an account, place orders, or subscribe to our newsletter. It complies with the California Consumer Privacy Act (CCPA/CPRA) and the United States CAN-SPAM Act, and applies to users located within the United States.
Information We Collect
We collect personal information you voluntarily provide, such as your full name, email address, username, and password during account registration. During checkout, we collect your shipping address, phone number, and billing details. Please note that we do not store full credit card numbers on our servers. Payments are securely processed by PCI DSS certified gateways including PayPal and Stripe. We also collect your email when you opt into our newsletter, and any content you share when contacting customer service.
We automatically gather non-personal browsing data through cookies, server logs, and Google reCAPTCHA security tools. This includes your IP address, browser type, device information, page access time, and navigation behavior. We use this data to prevent fraud and improve site performance.
How We Use Your Information
We only use your data for legitimate purposes. We create and manage your customer account, verify your identity, and provide login support. We process and fulfill your plant orders, arrange shipping, and send order confirmations, delivery tracking, and after-sales notifications. We complete secure payment transactions through authorized processors and protect against fraudulent orders.
We may share necessary shipping information with agricultural authorities when required for live plant import inspection regulations for cross-state shipments. With your consent, we send optional marketing content including first-order discounts, plant care guides, and new product launches. You can unsubscribe from marketing emails at any time. We also use data to maintain website security, block bot attacks, and comply with US tax and commercial record-keeping requirements.
Information Sharing and Third Parties
We never sell, rent, or trade your personal information to third parties for commercial purposes. We only share necessary data with trusted service providers who help us run our business. Payment processors such as PayPal and Stripe receive billing data solely to complete transactions. Mailchimp receives your subscribed email address only for newsletter delivery. Shipping carriers such as USPS, UPS, and DHL receive your name and address to deliver your orders. We may also share limited information with regulatory authorities to comply with live plant quarantine requirements, or disclose data as required by US federal or state law.
Email Marketing and Unsubscribe Rights
By checking our newsletter subscription box, you explicitly opt in to receive our marketing emails. Every promotional email we send includes a permanent unsubscribe link at the bottom. You may opt out of marketing emails anytime at no cost. We strictly follow the CAN-SPAM Act and never send unsolicited spam emails.
Data Retention
We retain your personal data according to industry timelines. Completed order records are stored for 36 months for tax accounting, warranty support, and dispute resolution. Refunded, cancelled, or failed orders are retained for 90 to 120 days for fraud investigation. We reserve the right to archive inactive account data after 12 months of inactivity. You may request deletion of your account and associated personal data by contacting our support email. After deletion, we retain only anonymized, non-identifiable records to meet federal tax requirements.
Cookie Usage
Our site uses essential functional cookies to keep your shopping cart and account session active, plus optional analytics cookies to analyze website traffic. You can disable cookies in your browser settings at any time, although some site functions may be limited afterward.
Google reCAPTCHA
We use Google reCAPTCHA for anti-fraud protection on our forms. Its use is subject to the Google Privacy Policy.
Security and Your Rights Under CCPA
We implement industry-standard encryption, firewalls, and access restrictions to protect your personal data. However, no online transmission is completely secure. If a data breach occurs that poses a significant risk to your rights under CCPA, we will notify you and relevant US authorities within 72 hours of discovery as required by law.
Under CCPA/CPRA regulations, all US residents hold the following rights with no discriminatory service penalty. You have the right to access a free copy of all personal data we store about you. You may request permanent deletion of your account and associated data. You may opt out of marketing communications at any time. And you will not receive discriminatory pricing, service downgrades, or penalties for exercising these rights. Submit privacy-related requests to artisticbonsai.sz@gmail.com. We respond within 30 calendar days at no charge for your first request each year.
Minor Protection
Our website and services are not directed to users under the age of 16. We do not knowingly collect personal information from minors. If you believe we have unintentionally collected data from someone under 16, please contact us immediately and we will delete the information within 7 business days.
Policy Updates
We may revise this privacy policy occasionally. All updates will be posted on this page with the revised effective date. For material changes that affect your data rights, we will send a notification email to all subscribed users. Continued use of our website after changes take effect represents your acceptance of the updated policy.
Contact Us
If you have questions about this privacy policy or your personal data, please reach us at artisticbonsai.sz@gmail.com. You can also visit our live plants shop or read our terms of service.