Privacy Policy

About This Policy

KimThai Garden ("KimThai," "we," "us," or "our") is committed to protecting the privacy of every person who visits our website, creates an account, or makes a purchase. This Privacy Policy describes what information we collect, how we use it, and the steps we take to safeguard it.

Business Information:

KimThai Garden 901 N Broadway Los Angeles, CA 90012

Phone: +1 (323) 388-3871 Email: info@kimthaigarden.com

Section 1 — Information We Collect

1A. Information You Provide Directly

When you browse our website, create an account, complete a purchase, or contact our support team, we may collect:

• Your full name
• Email address
• Telephone number
• Billing address and shipping address
• Payment card information (processed in transit — we never store full card numbers)
• Plant-care preferences you share with us (e.g., your climate zone, light conditions, growing-space size, pet-safety concerns) to help us recommend the right trees and plants for your home or garden
• Communication records, support tickets, and review content

1B. Information Collected Automatically

Each visit to our website generates certain technical data through cookies, server logs, and analytics tools:

• Your IP address and approximate city-level geolocation
• Browser type, version, and operating system
• Device category (mobile, tablet, desktop)
• Pages viewed, products explored, time on each page, and search terms used
• Referring URL — the website or search engine that brought you to us
• Checkout funnel behavior (cart additions, checkout initiations, completed purchases)

1C. Information from Third Parties

We may receive supplementary data from:

• Payment processors (transaction confirmations and fraud-screening signals only)
• Shipping carriers (dispatch notices, tracking updates, delivery confirmations)
• Website analytics platforms (aggregated traffic and performance metrics)
• Social media networks (when you engage with our content, leave reviews, or share our posts)

Section 2 — How We Use Your Information

We apply your personal data to the following purposes:

Order fulfillment and live-tree shipping. We use your name, shipping address, and contact details to prepare, pack, and ship your potted trees and plants. For live-tree orders, we use your geographic location to assess weather conditions along the shipping route and may adjust our shipping schedule to protect plant health during extreme heat or cold.

Plant-care guidance. When you share information about your growing space — such as whether you have full sun, partial shade, a balcony, or a backyard — we use that context to offer personalized care recommendations for your Kumquat tree, Meyer Lemon, Banana plant, or any other species you purchase.

Customer service. We reference your order records to answer care questions, process returns, resolve delivery issues, and assist with replacement requests.

Transactional communication. We send order confirmations, shipping notifications, and delivery alerts. With your explicit consent, we also send promotional emails about seasonal fruit-tree arrivals, new herb varieties, and planting tips.

Website improvement. Aggregated usage data helps us optimize page performance, product presentation, and the overall shopping experience.

Fraud prevention. We analyze transaction patterns to detect suspicious activity and protect our customers.

Legal and tax compliance. We retain records as required by the IRS, California Franchise Tax Board, and consumer-protection regulations.

Section 3 — Cookies and Tracking Technologies

Our website uses cookies for the following functions:

• Preserving your shopping cart between visits
• Remembering your login credentials and display preferences
• Measuring site performance (page load time, bounce rate, conversion paths)
• Delivering personalized advertisements where you have opted in

You may manage or delete cookies through your browser settings at any time. Blocking certain cookies may limit some site functionality, such as persistent cart or auto-login.

We also use third-party analytics services (including Google Analytics) that collect anonymized usage data under their own privacy agreements.

Section 4 — Payment Data Security

All financial transactions are routed through PCI-DSS Level 1 certified payment processors. We never store, transmit, or directly access your full card number, CVV, or banking credentials on our own servers.

Every payment exchange is encrypted using 256-bit SSL/TLS technology, ensuring that your financial data remains confidential from the moment you submit payment until the processor confirms the transaction.

Section 5 — Sharing and Disclosure

We do not sell, lease, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we do share certain data with advertising partners for targeted advertising, which may be considered a "sale" or "sharing" under certain U.S. state privacy laws — you may opt out via our Your Privacy Choices page. Limited data sharing occurs only with service providers essential to our operations:

Every third-party partner is bound by a written data-processing agreement that limits how your information may be used.

Section 6 — Data Retention

• Account information: Retained for as long as your account is active, plus five (5) years after closure for tax and dispute-resolution purposes.
• Transaction records: Maintained for a minimum of seven (7) years per IRS and California requirements.
• Marketing preferences: Retained until you withdraw consent.
• Cookie data: Expires according to each cookie's defined lifespan (typically 30 days to 2 years).

Section 7 — Your Rights Under the CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

7A. Right to Know

You may request disclosure of:

• The categories of personal information we have collected about you.
• The specific pieces of personal information currently in our possession.
• The business or commercial purposes for which the information was collected or shared.
• The categories of third parties with whom we have shared it.

7B. Right to Delete

You may request that we erase your personal information, subject to limited exceptions such as completing a pending transaction, fulfilling a legal obligation, or addressing a security incident.

7C. Right to Correct

You may ask us to amend inaccurate personal information we hold about you — for example, an outdated shipping address or an incorrect phone number.

7D. Right to Opt Out of Sale or Sharing

We share certain browsing and interaction data with advertising partners (such as Google Ads) for targeted advertising. Under the CCPA/CPRA, this may be considered a "sale" or "sharing." You have the right to opt out — visit our Your Privacy Choices page. We also honor the Global Privacy Control (GPC) signal.

7E. Right to Limit Use of Sensitive Personal Information

We do not employ sensitive personal information (such as financial-account numbers or precise geolocation) for any purpose beyond those permitted by law.

7F. Right to Non-Discrimination

Exercising any of your privacy rights will never result in inferior pricing, reduced service quality, or denial of service.

7G. How to Submit a Request

Contact us through either channel below. Please provide your name, email address, and (if applicable) your order number for identity verification:

• Email: info@kimthaigarden.com
• Phone: +1 (323) 388-3871

We will acknowledge your request and provide a substantive response within 45 calendar days. If additional time is needed (up to 45 more days), we will notify you before the initial deadline expires.

7H. Authorized Agents

You may designate a trusted person or service to submit requests on your behalf. The agent must present a signed written authorization, and we may independently verify your identity before processing the request.

Section 8 — Rights Available in Other States and Jurisdictions

Residents of other U.S. states may hold comparable rights under laws including:

• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• European General Data Protection Regulation (GDPR), where applicable

No matter where you live, you may contact us at info@kimthaigarden.com or +1 (323) 388-3871 to exercise any available privacy right.

Section 9 — Children's Data

Our website is intended for users aged 18 and older. We do not knowingly collect information from children under 13. If we discover that a minor has inadvertently provided personal data, we will delete it without delay.

Section 10 — Third-Party Links and Embedded Content

Our website may contain hyperlinks to external sites, social-media platforms, or embedded videos. We are not responsible for the privacy practices of those destinations. We encourage you to review the privacy policy of every third-party site you visit.

Section 11 — Policy Revisions

We may update this Privacy Policy periodically to reflect changes in our operations, legal requirements, or technology. The current version will always be posted on this page with its effective date clearly indicated. We recommend reviewing this document from time to time.

Section 12 — Contact Us

For any privacy-related question, concern, or request:

KimThai Garden 901 N Broadway Los Angeles, CA 90012

Email: info@kimthaigarden.com Phone: +1 (323) 388-3871

Business Hours: Daily: 11:30 AM – 5:00 PM (PT) Closed Wednesdays