Privacy Policy

Who we are

Mia’s Flower Shop & Gifts, 614 N Duke St, Lancaster, PA 17602, runs miasflowershop.com. This policy explains what personal information we collect, why, and the choices you have.

Information we collect

• When you order: your name, email, phone and billing address; the recipient’s name, address and phone; the delivery date and time preference, card message and delivery instructions; and the products you buy.
• When you contact us or request a quote: your name, phone, email, event details and anything you include in your message.
• Payment: processed by Square, our payment processor. We receive confirmation of the payment and limited details such as the card type and last four digits — never the full card number.
• Automatically: like most websites, our server records technical information such as your IP address, browser and pages visited, for security and to keep the site working. Our store uses cookies to remember your cart and checkout. We use Google Analytics to count visits and see which pages and products people look at, and Microsoft Clarity, which records how visitors use our pages — clicks, scrolling and the pages viewed, including session replays — with the text typed into forms hidden. Card details are entered in Square’s secure fields and are never recorded.

How we use it

• To prepare, deliver and support your order, including calling or texting you or the recipient about the delivery.
• To answer your questions and quote requests.
• To keep records required for accounting and taxes.
• To protect the site and our customers from fraud and abuse.
• To send news or special offers only if you ask us to. You can unsubscribe at any time.

Information about gift recipients

When you send a gift you give us the recipient’s details. We use them only to deliver that order and to contact the recipient about it. Card messages are read only by the staff who prepare your order.

Who we share it with

We do not sell or rent personal information. We share it only with service providers that help us run the shop, and only what each one needs:

• Delivery partners such as DoorDash: the recipient’s name, address, phone and delivery instructions.
• Square, our payment processor: to process your payment securely and prevent fraud.
• Microsoft Clarity: usage and interaction data, so we can see where our pages are confusing and improve them. The Microsoft Privacy Statement applies.
• Website hosting and email providers: to run this site and send order emails.
• Google: Google Analytics (through Google Site Kit) measures visits and orders; Google Maps and Google Fonts receive your IP address when they load. Google’s Privacy Policy applies to that information.
• Security and backups: our security service (Wordfence) screens visits for attacks using information such as your IP address and browser, and copies of the website — which include order records — are kept by our backup service so we can restore the store if something goes wrong.
• Elementor, the company behind our website builder, runs our cookie banner, our accessibility widget and the service that delivers our store emails (Site Mailer). It processes your cookie choice, how the accessibility tools are used, and — for the emails we send you — your email address and the message.
• Authorities: when the law requires it, or to protect our rights or someone’s safety.

Cookies

We use cookies that the store needs to work — to keep items in your cart, remember checkout details and keep you signed in. We also use Google Analytics and Microsoft Clarity cookies to understand how the site is used: for visitors in the United States they’re on unless you turn them off, and visitors from the European Union, the UK, Switzerland and other countries are asked first. We honor the Global Privacy Control signal from your browser. We don’t use advertising cookies. The full list is in our Cookie Policy, and you can change your choice any time with Cookie settings at the bottom of every page.

How long we keep it

We keep order records for as long as needed for accounting and tax purposes, usually several years. Messages and quote requests are kept while they’re useful to serve you and then deleted.

Your choices and rights

We don’t sell your personal information or share it for advertising. If your browser sends a Global Privacy Control signal, we treat it as a request to turn off analytics. You can ask us to show you, correct or delete the personal information we hold about you, and to stop any marketing messages. We’ll respond within a reasonable time; we may keep records the law requires us to keep. Depending on where you live, you may have additional rights under your state’s privacy laws — contact us and we’ll help.

Children

Our website is not directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, contact us and we’ll delete it.

Security

Our site uses an encrypted (HTTPS) connection, and access to order information is limited to the people who need it to serve you. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes to this policy

We’ll post any changes on this page with a new “last updated” date.

Contact

For privacy questions or requests, reach us through email at support@miasflowershop.com, our contact page, by phone at (717) 341-4678, or in person at 614 N Duke St, Lancaster, PA 17602.