Privacy Policy

At First Year Flowers, privacy is a structural premise of the service, not an afterthought. We build our systems to protect the financial privacy of the giver and the locational privacy of the couple receiving the gift.

What we collect

To facilitate the recurring delivery of flowers, we collect and store only the data necessary to operate the program:

• From the giver: Account details, verified contact methods, and program configuration limits.
• From the couple: Contact details (name, email, and E.164 formatted phone number), delivery addresses, access instructions, flower restrictions, and optional short card notes.
• System data: SMS message logs, delivery event histories, and strict audit records detailing who performed what action in the system.

What we deliberately do not store

We enforce strict financial boundaries. We do not see, process, or store raw card numbers, CVC codes, bank details, or raw payment tokens. We retain only an opaque billing reference provided by our secure payment partners, alongside permitted non-sensitive display metadata (such as the last four digits of a card) so you can identify your chosen payment method.

Address privacy and handling

The physical address of the couple is treated with the highest degree of care. Full delivery addresses are masked by default in the giver's dashboard. Furthermore, full addresses are never included in SMS messages to anyone, including the giver.

Routine data deletion

We do not retain raw personal data indefinitely. Raw delivery addresses and raw SMS message texts are permanently deleted 30 days after a confirmed delivery. We retain only redacted historical records to maintain a coherent audit trail without compromising long-term privacy.

SMS consent and opt-out

We require explicit consent to send SMS delivery reminders to the couple, as well as to send order approval requests to givers. Consent is always collected directly from the person receiving the messages—a giver providing a phone number for a recipient does not constitute consent for that recipient.

When consent is provided (either via a web checkbox or by texting START), we store a permanent consent record as proof. This record includes the exact timestamp, the collection method, the specific disclosure version shown, and a hashed version of the source IP address (we do not store the raw IP). These consent records are retained as evidence of compliance even after the raw message contents are deleted at 30 days.

You may immediately revoke consent and opt out of all future messages at any time by replying STOP to any message. For full details on the messaging program, please see our SMS Terms.

Third parties

Operating a physical fulfillment network requires coordinating with specialized partners. We share data only where technically required to deliver the service. Crucially, mobile opt-in data and SMS consent status are never sold or shared with any third party for their own marketing or promotional purposes.

Our service delivery partners include:

• Florist One: Our fulfillment partner. They receive the delivery address and printed card text necessary to fulfill the order.
• Hebcal: We query their data source to determine accurate candle-lighting and holiday times for a given location.
• Telnyx: Our telecommunications provider, used to securely route and deliver SMS messages.
• Transactional Email: Our email provider, used for account verification and critical system notices.

Role-based access

Our infrastructure enforces strict boundaries between participants. Givers are restricted to viewing and managing only their own programs. Recipient managers are restricted to their assigned program's delivery preferences and never have access to payment details, pricing, budget limits, or approval policies.

Data requests and contact

If you have questions regarding our data practices or wish to submit a data access or deletion request, please direct your inquiry to: