Privacy policy
Effective Date: September 2, 2026
At Lucky Plants, protecting your privacy is a core value. This Privacy Policy explains what personal data we collect, how we use it, when and why we share it, and the choices you have over your information. This policy applies to every interaction you have with our website, online store, customer service channels, and any related services.
By browsing our site, creating an account, placing an order, subscribing to our newsletter, or otherwise engaging with our services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.
1. Information We Collect
We collect personal data through two primary channels: information you voluntarily provide to us, and data gathered automatically as you interact with our website and services.
1.1 Information You Provide to Us
When you create an account, make a purchase, contact our support team, or opt in to marketing communications, we may collect the following:
| Category | Examples |
|---|---|
| Contact Information | Full name, email address, phone number, billing address, and shipping address |
| Payment Details | Credit card, debit card, or other payment method information — processed securely through third-party payment gateways and never stored on our servers |
| Account Information | Username, password, and saved preferences when you register for an account |
| Purchase Activity | Products browsed, items added to cart, completed purchases, returns, exchanges, and full transaction history |
| Communications | Any information you share through customer service inquiries, feedback forms, product reviews, or other direct correspondence with us |
1.2 Information Collected Automatically
As you browse and interact with our website, certain data may be collected automatically:
- Device Information — IP address, browser type and version, operating system, and device identifiers
- Usage Data — Pages visited, links clicked, time spent on each page, scroll depth, and referral sources
- Location Data — Approximate geographic location derived from your IP address
- Cookie Data — Information stored through cookies, pixel tags, web beacons, and similar tracking technologies (see Section 5 for full details)
2. How We Collect Your Data
Your personal information may be gathered through the following channels:
- Direct Interactions — Account registration, order placement, form submissions, email or phone communications, and participation in surveys or promotions
- Automated Technologies — Cookies, session tracking, analytics tools, and pixels embedded throughout our website
- Third-Party Sources — Payment processors verifying transaction legitimacy, shipping carriers providing delivery updates, advertising platforms optimizing campaign performance, and analytics services that help us understand how visitors use our site
3. How We Use Your Information
We use the personal data we collect for the following purposes:
3.1 Order Processing and Delivery
- Verifying, processing, and fulfilling your purchases
- Sending order confirmations, shipment tracking numbers, and delivery status updates
- Managing returns, refunds, and product exchanges in a timely manner
3.2 Customer Service and Support
- Responding to your questions, concerns, complaints, and service requests
- Resolving disputes and troubleshooting issues with orders or products
3.3 Account Management
- Creating and maintaining your personal shopping account
- Storing your preferences, wish lists, and browsing history to personalize your experience
3.4 Marketing and Promotional Communications
- Sending newsletters, product recommendations, exclusive offers, and seasonal promotions via email (you may opt out at any time)
- Delivering personalized advertisements tailored to your interests and purchase history across our website and partner platforms
3.5 Security and Fraud Prevention
- Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other suspicious activity
- Verifying user identity to protect both your account and our platform
3.6 Legal Compliance
- Fulfilling obligations under applicable federal, state, and local laws and regulations
- Enforcing our Terms of Service and protecting our legal rights
- Responding to lawful requests from governmental authorities, courts, or law enforcement agencies
4. Sharing Your Information
We do not sell your personal information to third parties for their independent marketing purposes without your explicit consent. We may share data only with the following categories of trusted recipients:
| Recipient Category | Purpose |
|---|---|
| Service Providers | Payment processors, shipping and logistics partners, email marketing platforms, cloud hosting providers, and IT support vendors that enable our day-to-day operations |
| Advertising and Analytics Partners | Platforms that help us deliver targeted advertisements, measure campaign effectiveness, and analyze website traffic patterns |
| Legal and Governmental Authorities | Courts, law enforcement agencies, or regulatory bodies when required by law, subpoena, court order, or to protect our rights, safety, or property |
| Business Successors | In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy proceeding |
All third parties with whom we share data are contractually obligated to protect your information and use it only for the purposes we specify.
Note: Under the California Consumer Privacy Act (CCPA), the term "sale" has a broad definition that may include certain data transfers to advertising partners — you have the right to opt out of such sharing at any time (see Section 6).
5. Cookies and Tracking Technologies
Our website uses cookies and related technologies to:
- Improve functionality — Remember your login credentials, items in your cart, and browsing preferences
- Analyze performance — Understand how visitors navigate our site, which pages are most popular, and where technical issues may occur
- Personalize content — Recommend products based on your browsing history and shopping behavior
- Deliver targeted advertising — Serve ads relevant to your interests across our site and third-party platforms
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for core website functionality (e.g., shopping cart, checkout, login) |
| Analytics Cookies | Help us understand visitor behavior and measure site performance |
| Marketing Cookies | Enable personalized advertising and track campaign effectiveness |
| Preference Cookies | Store your settings and choices for a customized browsing experience |
You have full control over your cookie preferences. You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may limit your ability to use some features of our website, such as the shopping cart or account login.
6. California Consumer Privacy Act (CCPA / CPRA) Disclosures
If you are a resident of California, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you specific rights regarding your personal information.
6.1 Categories of Personal Information Collected (Past 12 Months)
| CCPA Category | Examples of Data Collected | Collected? |
|---|---|---|
| A. Identifiers | Name, email address, mailing address, IP address, account username | Yes |
| B. Personal Information (Cal. Civ. Code §1798.80(e)) | Name, address, telephone number | Yes |
| C. Protected Classification Characteristics | Not intentionally collected | No |
| D. Commercial Information | Purchase history, products viewed, items in cart | Yes |
| E. Biometric Information | Not collected | No |
| F. Internet / Electronic Network Activity | Browsing history, search queries, interaction data on our website | Yes |
| G. Geolocation Data | Approximate location derived from IP address | Yes |
| H. Sensory Data | Not collected | No |
| I. Professional or Employment Information | Not collected | No |
| J. Education Information | Not collected | No |
| K. Inferences | Shopping preferences, behavioral patterns, product interests | Yes |
| L. Sensitive Personal Information | Not collected | No |
6.2 Sources of Personal Information
- Directly from you — When you create an account, place an order, contact support, or subscribe to our mailing list
- Automatically — Through your interactions with our website via cookies, pixels, and analytics tools
- From third parties — Payment processors, advertising platforms, and analytics services
6.3 Business Purposes for Collection
- Fulfilling orders and delivering products
- Fraud detection and security enhancement
- Marketing optimization and personalized advertising
- Website improvement and performance analytics
- Compliance with legal and regulatory requirements
6.4 Sale and Sharing of Personal Information
- In the preceding 12 months, we may have shared certain identifiers and internet activity data with advertising partners for cross-context behavioral advertising
- We have not sold personal information for monetary consideration
- You have the right to opt out of any sale or sharing of your personal information
- We do not have actual knowledge that we sell personal information of consumers under 16 years of age
6.5 Your CCPA Rights
As a California resident, you have the following rights:
- Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete — Request deletion of your personal information, subject to certain legal exceptions
- Right to Correct — Request correction of inaccurate or incomplete personal information
- Right to Opt-Out of Sale/Sharing — Direct us to stop selling or sharing your personal information for cross-context behavioral advertising
- Right to Limit Use of Sensitive Personal Information — You retain the right to limit its use should our practices change
- Right to Non-Discrimination — We will never discriminate against you for exercising any of your CCPA rights
6.6 How to Exercise Your Rights
Submit a verifiable consumer request through any of the following channels:
- Email: info@luckyplants.net
- Phone: (310) 376-2026
- Mail: Lucky Plants, 1062 Aviation Blvd, Hermosa Beach, CA 90254, USA
We may require identity verification before processing your request. We aim to respond within 45 days and will notify you if an extension of up to 45 additional days is needed.
6.7 Authorized Agents
You may designate an authorized agent to submit a CCPA request on your behalf. We may require written authorization and identity verification from both you and the agent.
6.8 Financial Incentive Programs
We do not currently operate any loyalty programs, discount clubs, or financial incentive programs involving the collection of personal information. Should this change, we will provide clear disclosures and obtain opt-in consent as required by the CCPA.
7. Data Security
We implement a layered combination of administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- PCI-DSS compliant payment processing through vetted third-party providers
- Access controls and authentication protocols for all internal systems and databases
- Regular security assessments and vulnerability testing
While we employ commercially reasonable safeguards to protect your data, no method of internet transmission or digital storage is completely secure. We cannot guarantee absolute data security, but we are committed to promptly addressing any security incidents that may occur.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:
- Active accounts and transactions — Data is retained for the duration of the customer relationship and as needed to process orders, handle returns, and provide support
- Legal and regulatory compliance — Certain records may be retained for up to 7 years as required or permitted by applicable law
- Business records — Transaction logs, financial records, and other business data may be maintained for audit, tax, and operational purposes
- Dispute resolution — Relevant data may be retained while any disputes or legal proceedings are pending
When personal information is no longer needed, it is securely deleted or de-identified.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right to Access | Obtain a copy of the personal data we hold about you |
| Right to Rectification | Request correction of inaccurate or incomplete information |
| Right to Erasure | Request deletion of your data, subject to legal exceptions |
| Right to Restrict Processing | Limit how we use your data in certain circumstances |
| Right to Data Portability | Receive your data in a structured, machine-readable format |
| Right to Object | Opt out of certain processing activities, including direct marketing |
| Right to Withdraw Consent | Revoke previously granted consent at any time |
To exercise any of these rights, contact us using the information provided in Section 15.
10. Marketing Communications
We may send you promotional emails featuring new arrivals, seasonal collections, special offers, and other marketing content.
- You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email
- You may also contact us directly at info@luckyplants.net to opt out of marketing communications
- Opting out of marketing emails will not affect transactional communications such as order confirmations, shipping notifications, or customer service responses
11. Children's Privacy
Our website and services are designed for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at info@luckyplants.net. We will take prompt action to delete such information from our records.
12. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or other external services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the content, privacy practices, or security measures of external websites. We encourage you to review the privacy policies of any third-party site before providing your personal information.
13. International Data Transfers
If you access our website from outside the United States, please be aware that your personal data may be transferred to, stored in, and processed in the United States, where our servers and service providers are located. The United States may have different data protection laws than your country of residence. By using our services, you consent to the transfer of your information to the U.S. as described in this Privacy Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. When we make significant changes, we will update the "Effective Date" at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.
Material changes will be communicated through prominent notice on our website or via email when appropriate.
15. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us:
- Store Name: Lucky Plants
- Phone: (310) 376-2026
- Email: info@luckyplants.net
- Address: 1062 Aviation Blvd, Hermosa Beach, CA 90254, USA
- Business Hours: Tuesday–Saturday 9:00 AM–5:00 PM | Sunday 10:00 AM–5:00 PM | Monday Closed (Pacific Time)
This Privacy Policy is effective as of the date stated above and applies to all personal data collected through the services provided by Lucky Plants.