PRIVACY POLICY

Effective Date: 21/06/2025

1. INFORMATION WE COLLECT

Personal Information

When you visit our website or make a purchase, we may collect:

• Name and contact information (email, phone, address)
• Payment information (processed securely through our payment providers)
• Shipping and billing addresses for both sender and recipient
• Order history and preferences
• Communication preferences
• Special delivery instructions and personalized messages

Automatically Collected Information

• IP address and general location data
• Browser type and version
• Device information
• Website usage patterns and analytics
• Cookies and similar tracking technologies

2. HOW WE USE YOUR INFORMATION

We use collected information to:

• Process and fulfill anonymous delivery orders worldwide
• Facilitate anonymous gifting while maintaining sender privacy
• Communicate about orders, shipping, and customer service
• Send marketing communications (with your consent where required by law)
• Improve our website and services
• Prevent fraud and ensure security
• Comply with applicable legal obligations in various jurisdictions

3. INFORMATION SHARING

We do not sell your personal information. We may share information with:

• Service Providers: International payment processors, shipping companies (including courier services for global delivery), email service providers, and handwriting services
• Legal Requirements: When required by applicable law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of business
• Anonymous Delivery: We share recipient information with shipping providers while maintaining sender anonymity where requested

4. DATA SECURITY

We implement appropriate security measures to protect your information, including:

• Secure Socket Layer (SSL) encryption for data transmission
• PCI DSS compliance for payment processing
• Regular security assessments
• Limited access to personal information on a need-to-know basis
• Secure handling of handwritten messages and anonymous delivery instructions

5. YOUR RIGHTS

Depending on your location, you may have rights under applicable privacy laws including:

European Union (GDPR)

• Access, rectify, erase, restrict, or port your personal data
• Object to processing or withdraw consent
• Lodge complaints with supervisory authorities

United States (State Laws)

• Access, correct, or delete personal information (where applicable under state laws)
• Opt-out of sale of personal information

Australia (Privacy Act)

• Access and correct your personal information
• Make complaints to the Office of the Australian Information Commissioner (OAIC)

Canada (PIPEDA)

• Access and correct your personal information
• Withdraw consent for certain processing

Other Jurisdictions

• Rights as provided under applicable local privacy laws

To exercise these rights, contact us at sendgrass@gmail.com.

6. COOKIES AND TRACKING

We use cookies to:

• Remember your preferences and cart contents
• Analyze website traffic and usage
• Provide personalized experiences
• Enable social media features
• Facilitate anonymous ordering processes

You can control cookies through your browser settings. Some functionality may be limited if cookies are disabled.

7. THIRD-PARTY SERVICES

Our website may integrate with:

• Shopify: E-commerce platform (see Shopify Privacy Policy)
• Google Analytics: Website analytics
• Social Media Platforms: For sharing and marketing
• Email Marketing Services: For newsletters and promotions
• International Shipping Partners: For global delivery services
• Payment Processors: For secure international transactions

8. INTERNATIONAL TRANSFERS

As a global service, your information may be transferred to and processed in various countries including the United States, Canada, and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Other appropriate transfer mechanisms as required by law

9. LEGAL BASIS FOR PROCESSING (EU/UK)

We process your personal data based on:

• Contract: To fulfill delivery services
• Legitimate Interests: To improve services and prevent fraud
• Consent: For marketing communications
• Legal Obligation: To comply with applicable laws

10. RETENTION

We retain your information for as long as necessary to:

• Provide services and maintain delivery records
• Comply with legal obligations in various jurisdictions
• Resolve disputes
• Facilitate repeat anonymous deliveries

11. CHILDREN'S PRIVACY

Our services are not directed to children under the applicable age of consent in their jurisdiction (typically 13-16 years). We do not knowingly collect personal information from children below the applicable age. If you believe we have collected information from a child, please contact us immediately.

12. JURISDICTION-SPECIFIC NOTICES

California Residents (CCPA/CPRA)

You have additional rights including the right to know about personal information collection, sale, and disclosure, and the right to delete personal information.

Australian Residents

For complaints about privacy matters, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

EU/UK Residents

You may lodge complaints with your local supervisory authority regarding data protection matters.

13. UPDATES TO THIS POLICY

We may update this privacy policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes via email or prominent website notice, as required by applicable law.

14. CONTACT US

For privacy-related questions or concerns:

• Email: sendgrass@gmail.com
• Data Protection Officer: sendgrass@gmail.com (for EU/UK inquiries)

For jurisdiction-specific complaints:

• Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
• EU: Your local supervisory authority
• UK: Information Commissioner's Office (ICO) - ico.org.uk
• Canada: Office of the Privacy Commissioner of Canada - priv.gc.ca