House Plant Shop Privacy Policy
Effective Date: 8.10.26
Last Updated: 8.10.2026
Replaces: “Mobile App Privacy Policy” (undated, previously at /pages/mobile-app-privacy-policy-1)
This Privacy Policy describes how PPC International LLC, doing business as House Plant Shop (“PPC,” “House Plant Shop,” “we,” “us,” “our”), collects, uses, discloses, sells, and shares personal information when you visit or make a purchase from houseplantshop.com, use our mobile application (if available), subscribe to our email or SMS programs, contact our customer care team, or otherwise interact with us (collectively, the “Services”).
This Policy is issued in part to satisfy the notice-at-collection and privacy policy requirements of the California Consumer Privacy Act as amended by the California Privacy Rights Act (the “CCPA”). California residents should read Sections 10 through 13 carefully.
Summary of the Most Important Points
- We use cookies and similar technologies from third parties, including Google, Klaviyo, and Attentive, for analytics, marketing, advertising, and related services. Details are in Section 5.
- We use Consentmo to support cookie consent and privacy preference controls.
- Under California law, certain disclosures of personal information may constitute “selling” or “sharing.” You can opt out where applicable. See Section 11 and our “Do Not Sell or Share My Personal Information” page.
- We honor the Global Privacy Control browser signal.
- We never sell your name, email, or order history to data brokers in the colloquial sense, and we do not knowingly sell or share the personal information of anyone under sixteen.
1. Who We Are and How to Reach Us
PPC International LLC (d/b/a House Plant Shop)
20743 Future Farm Dr
Mount Dora, FL 32757, USA
Greenhouse and fulfillment locations: San Marcos, California and Mount Dora, Florida
Privacy contact: info@houseplantshop.com
PPC is the “business” (as defined by the CCPA) and the “data controller” responsible for personal information processed under this Policy.
Our Services are hosted on Shopify Inc.’s ecommerce platform, which processes personal information on our behalf as a service provider.
2. Scope
This Policy applies to:
- houseplantshop.com and all pages on that domain, including checkout pages hosted by Shopify
- Our email and SMS marketing programs
- Our customer care channels, including email and our help center
- Personal information we receive from marketplaces and retail partners where you buy our products on Amazon, Walmart Marketplace, Temu, and Groupon voucher redemptions
3. Personal Information We Collect Directly From You
Account and order information. When you create an account, place an order, or redeem a voucher, we collect your name, email address, shipping and billing address, telephone number, and account credentials. If you sign in through a social login or one-time code, we may receive your email address and basic profile information from that provider.
Payment information. Payments are processed by our payment processors, including Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, and Amazon Pay, depending on the method you choose. We receive confirmation of payment, the payment method type, and limited payment information. We do not receive or store full card numbers.
Communications. When you contact customer care by email or through our help center, we collect the contents of your communications, your contact details, and your order history as needed to respond. Our help center is operated on the Odoo platform.
Photos and user content. If you submit a product review, upload a photo, for example of a plant that arrived damaged to process a replacement or refund, or post user-generated content, we collect that content. Reviews and review photos may be collected and displayed through our reviews provider, Loox.
Marketing sign-ups. If you join our email list, we collect your email address and related information, processed through Klaviyo. If you join our SMS program, we collect your mobile number and consent records, processed through Attentive. Message frequency varies; message and data rates may apply; reply STOP to cancel where applicable.
Gift registry. If you create or purchase from a gift registry, our registry provider MyRegistry may collect registry details, recipient information, and gift selections.
Surveys, promotions, and contests. If you participate, we collect the information you choose to provide.
4. Personal Information We Collect Automatically
When you visit the site, we and our third-party providers may automatically collect:
Device and connection data. IP address, browser type and version, operating system, device type, screen resolution, language settings, and internet service provider.
Usage data. Pages viewed, products viewed, searches performed on the site, links clicked, referring and exit pages, date and time stamps, and other information about interactions with the Services.
Approximate location. Approximate location may be inferred from your IP address and used, for example, to display shipping eligibility, weather-based shipping recommendations, and region-appropriate inventory.
Identifiers stored on your device. Cookies and similar identifiers described in Section 5.
Privacy and accessibility preferences. Technologies used on the site may process technical information and preference selections necessary to provide cookie consent, privacy, and accessibility functionality.
5. Cookies, Pixels, and Tracking Technologies
We use first-party and third-party cookies, tags, scripts, pixels, and similar technologies. Some are strictly necessary to operate the store. Others support analytics, marketing, advertising, privacy preferences, and store functionality.
5.1 Technologies Currently in Use
Strictly necessary Shopify technologies. Our store runs on Shopify, which uses technologies required to operate the site, including maintaining your cart, processing checkout, preventing fraud, remembering applicable preferences, and recording privacy choices.
These may include cookies such as _shopify_y, _shopify_s, shopify_client_id, cart_currency, localization, and _tracking_consent. Strictly necessary technologies operate where required to provide the Services.
Google services. We use Google technologies, including a Google Analytics tag and the Google & YouTube Shopify integration, to understand website traffic, measure site interactions and conversions, and support advertising and related Google services.
Depending on the services enabled and your privacy choices, Google may process information about your browser or device, interactions with our website, products viewed, and purchases.
Klaviyo. We use Klaviyo for email marketing and related onsite functionality. Klaviyo may process information about your interactions with our website and marketing communications so that we can measure and personalize communications where permitted.
Attentive. We use Attentive to support our SMS marketing program, including sign-up, consent management, attribution, and related website events.
Consentmo. We use Consentmo to support cookie consent, privacy preference controls, and related privacy functionality. Consentmo may process technical information and privacy choices necessary to provide these controls.
Loox. We use Loox to provide product reviews and related functionality. Loox may process review content, information associated with reviews, and related interactions.
UserWay. We use UserWay to provide an accessibility widget on our site. UserWay may process technical information, the pages you visit, and your accessibility preference selections necessary to provide this functionality.
Bunny Fonts. We use Bunny Fonts to deliver website fonts. When fonts load, Bunny Fonts receives technical information such as your IP address and browser type necessary to serve the font files.
ModeMagic. We use ModeMagic to support certain merchandising, promotional, and store-conversion functionality.
MyRegistry. We use MyRegistry to support gift registry functionality.
Free Shipping Bear. We use Free Shipping Bear to provide shipping-related promotional functionality on our store.
Other store functionality. House Plant Shop also uses Shopify applications and integrations to support forms, promotions, search and discovery, inventory, wishlists, fraud prevention, order fulfillment, shipping, customer communications, and other store operations. These services may process information necessary to provide their respective functionality.
This list reflects our most recent review of the store's applications and integrations. We review the technologies used by the store when we add, remove, or materially change them.
5.2 Consent and Control
Analytics, advertising, marketing, and other non-essential technologies operate in accordance with your consent choices and applicable law. Strictly necessary technologies continue to operate where required to provide the Services.
We use privacy and cookie controls provided through our site to allow visitors to manage applicable preferences.
You can revisit your choices through the Cookie Preferences control available on our site. You may also control cookies through your browser settings.
We honor the Global Privacy Control (GPC) signal as an opt-out of sale and sharing where applicable. See Section 11.
5.3 Google Services
We use Google technologies, including a Google Analytics tag and the Google & YouTube integration available through Shopify.
These technologies help us understand how visitors interact with House Plant Shop, measure site and conversion performance, and support advertising and related Google services.
Depending on the services enabled and your privacy choices, Google may receive information concerning your browser or device, website interactions, products viewed, and transactions.
You can manage applicable preferences through our cookie privacy controls, Global Privacy Control where applicable, and privacy controls made available by Google.
6. How We Use Personal Information
We use personal information to:
- Process, fulfill, and ship orders, including selecting fulfillment locations, adding weather-appropriate packaging, and providing tracking
- Process payments, refunds, partial refunds, and replacements under applicable policies
- Create and administer your account
- Operate applicable subscriptions, including House Plant Box billing and renewals
- Provide customer care and honor our policies
- Send transactional messages, including order confirmations, shipping notices, and replacement status
- Send marketing email and SMS where you have signed up
- Personalize communications based on browsing and purchase history where permitted
- Measure and improve site performance, product assortment, search, and navigation
- Deliver and measure advertising and marketing activities, subject to applicable consent and opt-out rights
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations, including tax, consumer protection, and agricultural shipping regulations
- Display product reviews and testimonials you submit
- Establish, exercise, or defend legal claims
We do not use personal information for automated decision-making that produces legal or similarly significant effects.
7. How We Disclose Personal Information
Service providers and contractors. We disclose personal information to companies that process information on our behalf or provide services used to operate House Plant Shop, including Shopify, payment processors, shipping carriers, Odoo, Klaviyo, Attentive, Loox, Consentmo, MyRegistry, Google, and other providers supporting store operations, marketing, analytics, privacy controls, customer communications, fulfillment, and professional services.
Advertising, analytics, and technology providers. When applicable technologies are active, identifiers, commercial information, and internet activity information may be transmitted to providers such as Google as described in Section 5. Depending on the technology and applicable law, certain disclosures may constitute “selling” or “sharing.”
Sections 10 and 11 provide additional information about applicable California privacy rights and opt-out options.
Marketplaces. If you purchase our products through a third-party marketplace or voucher provider, including Amazon, Walmart, or Groupon, we receive and process the order information they provide under their terms.
Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be disclosed or transferred as part of that transaction, subject to this Policy or successor terms.
Legal. We may disclose information where required by law, subpoena, court order, or lawful requests by public authorities; to enforce our terms; protect the rights, property, or safety of PPC, our customers, or others; or investigate fraud or wrongdoing.
With your direction. We may disclose information where necessary to provide a service or transaction that you request, including applicable gift and registry services.
We do not disclose customer lists to third parties for their own independent marketing by mail or email.
8. Retention
We retain personal information only as long as needed for the purposes above, then delete or de-identify it.
| Category | Retention |
|---|---|
| Order and transaction records | 7 years for tax and accounting obligations |
| Account information | Life of the account plus 1 year, or upon verified deletion request |
| Customer care correspondence and damage photos | 3 years from ticket closure |
| Marketing email and SMS records | Until unsubscribe plus 24 months; suppression lists may be retained to honor the unsubscribe |
| Analytics and advertising identifiers | Per the retention configured with each provider |
9. Security
We use physical, technical, and organizational safeguards appropriate to the nature of the data, including transport-layer encryption, tokenized payment processing, access controls, and monitoring for vulnerabilities.
No internet transmission is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and regulators as required by law.
Please do not email us sensitive information such as government identifiers or full card numbers.
10. Notice at Collection for California Residents
In the preceding twelve months, we have collected categories of personal information including:
- Identifiers: Name, address, email, phone, IP address, cookie and device identifiers
- Customer records: Name, address, phone, payment method information
- Commercial information: Orders, products viewed, and applicable subscription information
- Internet or network activity: Browsing activity, searches, and page interactions
- Approximate geolocation: Region inferred from IP address
- Audio/electronic/visual information: Customer care communications and photos you submit
- Inferences: Product and content preferences
These categories are collected for the purposes described in Section 6 and from the sources described in Sections 3 and 4.
Certain identifiers, commercial information, internet activity information, and related information may be disclosed to analytics, advertising, or technology providers as described in Sections 5 and 7. Depending on the circumstances and applicable law, certain disclosures may constitute a “sale” or “sharing” of personal information.
We do not collect the categories of sensitive personal information enumerated at § 1798.140(ae) except account log-in credentials, which we use only to authenticate you, and we do not use or disclose sensitive personal information for purposes requiring a right to limit under § 1798.121.
We do not knowingly collect, sell, or share personal information of consumers under sixteen years of age.
The criteria for retention are stated in Section 8.
11. Your California Rights and How to Exercise Them
If you are a California resident, you may have the right to:
Know and access. Request the categories and specific pieces of personal information we hold about you, the sources, purposes, and categories of recipients.
Delete. Request deletion of personal information we collected from you, subject to applicable exceptions.
Correct. Request correction of inaccurate personal information.
Opt out of sale and sharing. Direct us to stop selling or sharing your personal information where applicable.
You may exercise applicable opt-out rights by:
- Clicking “Do Not Sell or Share My Personal Information” in the site footer
- Setting your choices through Cookie Preferences
- Enabling Global Privacy Control in your browser
- Emailing info@houseplantshop.com
Limit sensitive personal information. Not applicable to our current practices as described in Section 10.
Non-discrimination. We will not unlawfully discriminate against you because you exercised your privacy rights.
How requests work. Submit requests to info@houseplantshop.com with the subject “California Privacy Request.”
We verify identity by matching the information you provide to our records and confirming control of the associated email address. Deletion and access requests may require additional verification.
We respond within 45 days and may extend once by 45 days with notice. You may use an authorized agent; we may require appropriate proof of authorization and may verify your identity directly.
Shine the Light. California Civil Code § 1798.83 permits requests about certain disclosures to third parties for their direct marketing. We do not disclose personal information to third parties for their own direct marketing.
12. Other US State Privacy Rights
Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Texas, Oregon, and Virginia, may have similar rights of access, correction, deletion, and opt-out of targeted advertising, subject to those laws' applicability requirements.
You may exercise applicable rights through the same channels described in Section 11 and may appeal a refusal by replying to our decision email with “Appeal” in the subject line.
13. Do Not Track and Preference Signals
We honor the Global Privacy Control signal as described in Section 11.
Because there is no settled standard for legacy “Do Not Track” browser signals, we do not respond to DNT. GPC is handled as described above.
14. Children
The Services are general-audience and not directed to children under thirteen.
We do not knowingly collect personal information from children under thirteen. If you believe a child has provided personal information, contact info@houseplantshop.com, and we will address the request as appropriate.
15. Mobile Application
House Plant Shop may provide a mobile application supported through Superfans (previously Vajro).
Information processed through the mobile application may include account, order, device, and interaction information necessary to provide application functionality and related services.
Additional disclosures or privacy choices may be presented within the mobile application. Push notifications can be managed through your device settings.
16. Changes to This Policy
We may update this Policy from time to time.
We will post the revised Policy with a new “Last Updated” date, and for material changes we may provide additional notice, such as a site banner or email.
The prior “Mobile App Privacy Policy” page has been retired and is superseded by this Policy.
17. Contact
PPC International LLC
Attn: Privacy
20743 Future Farm Dr
Mount Dora, FL 32757, USA
Email: info@houseplantshop.com