Privacy policy

Sunflower Creations is a small business in Milwaukee, Wisconsin. This page explains what information this website collects, why we collect it, and what we do with it.

What we collect

When you send us a request. The "Let's plan your kits" form asks for your name, email address and a message, and, if you choose, your phone number, the occasion, the themes you like, how many kits you need and when you need them. Along with what you type, we record when you sent it, your IP address and your browser type, which help us spot spam.

When you visit. We use Google Analytics to understand how people find and use the site: which pages are viewed, the type of device and browser, the general area visitors are in (such as the city or region), and how they arrived (for example, from Facebook or a search engine). Google Analytics uses cookies to do this (see Cookies below).

To keep the site secure. Our server sets two short-lived cookies that protect the form from forgery, and keeps a record of your visit's session, including your IP address and browser, that expires after two hours. To stop the form from being flooded with spam, we also count requests from each IP address for up to a day.

How we use it

• To answer your request, plan and make your kits, and follow up about your order.
• To keep the site secure and free of spam.
• To see which pages and themes people are interested in, so we can improve the site.

We don't sell or rent your information, and we won't add you to a mailing list unless you ask us to.

Who else handles it

We use a few service providers to run the site. They handle your information only to provide their service to us.

• DigitalOcean hosts the website and stores the requests sent through the form, on servers in the United States.
• Amazon Web Services (Amazon SES) delivers the email that tells us about your request, and our email provider delivers it to our inbox.
• Google Analytics measures how the site is used. You can read how Google uses this information at policies.google.com/technologies/partner-sites.

We may also share information when the law requires it.

Cookies

• XSRF-TOKEN and sunflower-creations-session are needed for the form to work securely. They expire after two hours.
• _ga and _ga_… are set by Google Analytics to tell visits apart. They last up to two years.

You can block or delete cookies in your browser settings. The site still works, but the form needs its security cookies to send your request. To stop Google Analytics from measuring your visits on any website, you can install Google's opt-out browser add-on.

How long we keep it

We keep form requests for as long as we need them to answer you, fill your order and keep basic business records. Google Analytics keeps detailed usage data for no more than 14 months.

Children

Our kits are made for kids, but this website is meant for parents, teachers and other grown-ups. We don't knowingly collect information from children under 13. If you think a child has sent us information, contact us and we'll delete it.

Your choices

You can ask us what information we have about you, ask us to correct it, or ask us to delete it. Just email or call us and we'll take care of it.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the date at the top.

Contact us