Privacy policy.

Last updated: November 21, 2025

Three B Gardens (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and share information when you visit our website at threebgardens.com (the “Site”), contact us, or purchase our products and services.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy.

Note: Privacy laws vary by state and country. Even though we are a small business based in Florida, we aim to follow high standards, including key transparency and rights concepts from laws such as the California Consumer Privacy Act (as amended by the CPRA) and, where relevant, the EU/UK General Data Protection Regulation (GDPR).

1. Who we are and how to contact us

Three B Gardens is a small, family-run business based in Cape Coral, Florida, United States.

If you have any questions about this Privacy Policy or how we handle your information, you can contact us at:

If you are exercising privacy rights described in Section 9, please indicate that in your message (for example, “California privacy request” or “data access request”).

2. Information we collect

We collect information in three main ways: information you provide to us, information collected automatically, and information from third parties.

2.1 Information you provide to us

When you interact with us, you may provide information including:

  • Contact information – name, email address, phone number, shipping and billing addresses.

  • Account and order information – items you purchase, order history, plant preferences, and any notes you include in your order.

  • Payment-related information – payment method type and status (full card details are processed by third-party payment providers, not stored by us).

  • Communications – messages sent through contact forms, email, or social media, including questions about plants, care, orders, or live shows.

  • Email and marketing preferences – such as whether you choose to receive marketing emails or newsletters (if we offer them).

2.2 Information collected automatically

When you visit the Site, certain information may be collected automatically, such as:

  • Device and usage information – IP address, browser type, operating system, pages you visit, time and date of your visit, and how you interact with the Site.

  • Cookies and similar technologies – small data files stored on your device that help the Site function, remember your preferences, and understand how visitors use the Site.

  • We may also use analytics tools such as Google Analytics to help us understand how visitors use the Site. These tools collect information such as the pages you visit, how long you spend on them, the browser and device you use, and other usage details. This information is aggregated and does not include your name or direct contact information, but it may use identifiers like cookies and IP addresses.

You can control or disable cookies through your browser settings. Some parts of the Site may not work properly if you do so.

2.3 Information from third parties

We may receive information about you from:

  • Payment processors integrated with our Site or other platforms (for example, providers used by Squarespace Commerce, Stripe, PayPal, or similar services) when you make a purchase.

  • Sales platforms (such as Whatnot or similar marketplaces) when you place orders there and we need your details to fulfill them.

  • Email and marketing tools (if used) that help us manage contact lists and communications.

  • Analytics and site tools that help us understand performance and usage of our Site in an aggregated way.

We use this information only as needed to run our business and provide our services to you.

2.4 Analytics and cookies

We use cookies and similar technologies to help the Site function properly and to understand how visitors use it.

One of the tools we may use is Google Analytics, which uses cookies and other identifiers to collect information about your use of the Site, including:

  • The pages you visit and how long you spend on them

  • The links you click and actions you take

  • Your approximate location (based on IP address)

  • Your browser, device type, and operating system

Google Analytics provides us with aggregated reports that help us understand overall patterns of use so we can improve the Site and our business. We do not use Google Analytics to collect your name, email address, or other directly identifying information.

Google’s use of data collected through Google Analytics is described in Google’s own policies. You can learn more about how Google uses data here and, if available in your region, manage your preferences through Google’s tools.

In some regions, you may also be able to limit how Google Analytics uses information about you by using browser add-ons or tools provided by Google.

You can control or disable cookies through your browser settings. If you disable some or all cookies, certain features of the Site may not function correctly.

3. How we use your information

We use the information we collect for purposes such as:

  • Processing and fulfilling orders, including packing, shipping, and handling customer service.

  • Communicating with you, including responding to questions, sending order confirmations, and providing updates.

  • Operating, maintaining, and improving the Site, including troubleshooting, analytics, and testing new features.

  • Sending marketing communications (if you choose to receive them), such as updates about new plants, live shows, or special offers. You can opt out at any time.

  • Protecting our business and users, including detecting and preventing fraud, abuse, or other harmful activity.

  • Complying with legal obligations, such as tax, accounting, and record-keeping requirements.

4. Legal bases for processing (where required)

If you are located in a region that requires a legal basis for processing personal data (such as the European Economic Area or United Kingdom), we process your information based on:

  • Contract – to perform a contract with you, such as when you place an order or contact us about an order.

  • Legitimate interests – to run, improve, and protect our business (for example, understanding how our Site is used), provided those interests are not overridden by your rights and interests.

  • Consent – when you have given us permission, such as for certain forms of marketing. You can withdraw consent at any time.

  • Legal obligations – to comply with applicable laws and regulations.

5. How we share information

We do not sell your personal information, and we do not share it with third parties for their own independent marketing or advertising purposes.

We may share your information with:

  • Service providers and vendors – such as website hosting providers, payment processors, email service providers, analytics tools, and shipping carriers, who process information on our behalf to help us run the Site and fulfill orders.

  • Sales platforms – such as Whatnot and similar platforms we use to host live sales or list products, when needed to process and fulfill your orders placed through those platforms.

  • Professional advisors – such as accountants or legal counsel, where necessary.

  • Authorities or third parties – when required by law or when necessary to protect our rights, property, or safety or the rights, property, or safety of others.

  • Business transfers – in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

When we share data with third parties, we expect them to protect it and use it only for the purposes we specify.

6. Data retention

We keep your information only for as long as reasonably necessary for the purposes described in this Policy, including:

  • Fulfilling orders and providing customer support;

  • Maintaining business and financial records;

  • Complying with legal, tax, and accounting obligations;

  • Resolving disputes and enforcing our agreements.

When information is no longer needed, we will delete it or anonymize it where appropriate.

7. Security

We use reasonable technical and organizational measures to help protect your information, including using secure (HTTPS) connections and working with reputable service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children’s privacy

Our Site and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it.

9. Your privacy rights

Depending on where you live, you may have certain rights regarding your personal information.

We will make a good-faith effort to honor the rights described below for residents of California and, where feasible, residents of other U.S. states with similar privacy laws, even if those laws may not strictly apply to our small business.

If you are in the European Economic Area or United Kingdom, you may also have GDPR rights as noted below.

9.1 Rights you may have

Subject to applicable law and some exceptions, you may have the right to:

  • Access / know – request confirmation that we process your personal information and access to that information, including details about how we use and share it.

  • Correct – request that we correct inaccurate or incomplete personal information about you.

  • Delete – request that we delete certain personal information we hold about you, subject to legal and business record-keeping requirements.

  • Restrict or object – in some cases, object to or request that we limit how we use your personal information.

  • Opt out of certain processing – such as certain types of targeted advertising or “sale”/“sharing” of personal information under applicable law. We currently do not sell or share personal information for these purposes.

  • Non-discrimination – not be treated differently for exercising privacy rights that you have under applicable law.

If you are in the EEA/UK, you may also have the right to data portability and the right to lodge a complaint with a data protection authority.

9.2 State privacy disclosures (including California)

Some state laws (including California’s CCPA/CPRA and similar laws in other states) require us to describe in more detail the categories of personal information we collect and how we use and disclose them.

Categories of personal information we may collect (in the last 12 months):

  • Identifiers – name, email address, postal address, phone number, IP address, account identifiers on platforms like Whatnot.

  • Customer records / commercial information – purchase history, plant and product preferences, transaction details.

  • Internet or other electronic network activity – browsing information, device and usage data related to your interactions with our Site.

  • Geolocation data (approximate) – such as general location derived from your IP address or shipping address.

  • Inferences – basic preferences inferred from your purchases or interactions (for example, types of plants you tend to buy).

Sources of personal information include you (when you provide information directly), your device (when you use the Site), and third parties such as payment processors, shipping carriers, and sales platforms (like Whatnot) that you choose to use to interact with us.

Purposes of use are described in Section 3 (processing orders, communication, site operation, marketing, security, and legal compliance).

Disclosure to third parties: As described in Section 5, we may share personal information with service providers, sales platforms, and other parties that support our business operations. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined in California law.

9.3 How to exercise your rights

To exercise any rights you may have under applicable law:

  • Email us at info@threebgardens.com with the subject line “Privacy Request” and tell us:

    • What right you would like to exercise (for example, access, deletion, correction);

    • What state or country you live in; and

    • Enough information for us to reasonably verify your identity (for example, the email address and/or order details associated with your request).

Where the law allows it, you may also designate an authorized agent to make a request on your behalf. We may need to verify both your identity and your agent’s authority.

We will respond within the time required by applicable law (for example, typically within 45 days for many U.S. privacy laws, with a possible extension where allowed).

10. Do Not Track and preference signals

Your browser may allow you to send “Do Not Track” (DNT) or similar signals. There is currently no common agreement on how to interpret these signals, and many laws do not require a specific response unless certain types of “sale” or “sharing” are occurring.

Because we do not sell or share personal information for targeted advertising, we do not treat DNT signals as a request to opt out of sale/sharing. If our practices change in the future, we will update this Privacy Policy and comply with any legal requirements to honor certain browser-based opt-out signals.

You can still exercise your rights and opt out of marketing communications using the methods described above.

11. International visitors

Our business is primarily aimed at customers in the United States, and our Site is hosted in the U.S. If you access the Site from outside the U.S., your information may be transferred to and processed in the United States or other countries that may not have the same data protection laws as your home country.

By using the Site and providing information, you consent to the transfer and processing of your information in the United States as described in this Policy, subject to any rights you may have under applicable law.

12. Links to other websites

Our Site may contain links to third-party websites or services that are not controlled by us (such as Whatnot or social media sites). This Privacy Policy does not apply to those sites. We recommend reviewing the privacy policies of any third-party sites you visit.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we may provide additional notice, such as posting a banner on the Site.

Your continued use of the Site after changes are posted means you accept the updated Policy.

14. How to contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, you can contact us at:

Email: info@threebgardens.com