# Privacy Policy — DRAFT for publication *Status: ready to paste · Status target: published at sfinbloom.art/privacy · 2026-05-06* > **Instructions:** Paste the section below the divider into a new Squarespace page at `sfinbloom.art/privacy`. Once live, copy the URL into Stripe → Settings → Public details → Privacy policy URL. Update `060 Privacy Policy.md` to mark gap closed and add a row to `030 Migration Changelog.md`. --- # Privacy Policy **Wild Futures Advancement Group LLC** — operating as SFinBloom and Mr. Bloom's **Effective:** May 6, 2026 We sell native wildflower seed shakers, regional seed mixes, and related goods directly to consumers. This page describes what information we collect, what we do with it, and — just as importantly — what we don't. ## What we collect When you place an order or contact us, we collect: - Your name and shipping address (so we can ship your order to you). - Your email address and, if provided, phone number (so we can send order confirmations and tracking, and answer your questions). - Your payment card information (collected and processed by Stripe — we never see, store, or have access to your full card number). - Any messages you send us through our contact form, email, or social channels. That's the full list. ## Why we collect it To do exactly two things: ship your order, and answer questions you ask us. Nothing else. ## Who we share it with We share only the minimum necessary to fulfill your order, with these service providers: - **Stripe** — processes your payment. - **Squarespace** — hosts our storefront and processes your order data. - **ShipStation** — generates shipping labels and tracks fulfillment. - **USPS or the shipping carrier you select** — delivers your package and provides tracking. We do not sell your personal information. We do not rent it. We do not share it with marketing partners, advertising networks, or data brokers. We don't add third-party advertising trackers to our site beyond what's standard for e-commerce checkout. ## How long we keep it We keep your information for the time needed to fulfill your order plus the period required by tax and accounting law (currently seven years, per IRS record-retention requirements). After that, we delete it. ## How we keep it safe Payments are processed through Stripe, which is PCI-DSS Level 1 compliant. Our storefront runs on Squarespace's secured infrastructure. We limit access to your information to the small number of people who need it to ship your order or respond to your questions. ## Your rights You can ask us at any time to: - Tell you what information we have about you. - Correct anything that's wrong. - Delete your information. We will honor deletion requests within 30 days, except where tax or legal record-keeping rules require we retain a transaction record (we'll tell you exactly what we have to keep, and why). To make any of these requests, email **support@sfinbloom.art** with the words "Privacy Request" in the subject line. ## California residents If you are a resident of California, you have additional rights under California law to know, access, correct, delete, and opt out of the "sale" of your personal information. **We do not sell personal information.** To exercise any rights under California law, email **support@sfinbloom.art**. ## Children We do not knowingly collect information from anyone under 13. If you believe we have, contact us at the address below and we will delete it. ## Changes to this policy If we change this policy, we will update the "Effective" date at the top and publish the updated version at this same URL. We will not retroactively use information for purposes that go beyond what was disclosed when you provided it. ## Contact **Wild Futures Advancement Group LLC** San Francisco, California **support@sfinbloom.art** --- *This policy describes our actual practice. It is informational and is not legal advice.* --- *[Source: Shalaco stated practice 2026-05-06 + Stripe Public Details requirements + CA Civil Code §1798.140 (CCPA reference) · Date: 2026-05-06]*