Privacy policy
Privacy Policy
Greenhaus Gardening
Last updated: August 13, 2026
This Privacy Policy explains how Greenhaus Gardening ("Greenhaus," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, buy from us, or contact us. It also explains your privacy rights, including rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Texas Data Privacy and Security Act, and the comprehensive privacy laws of other U.S. states.
Greenhaus Gardening is based in Lancaster, Texas, and sells to customers in the United States. We fulfill orders through a partner located outside the United States, which means your order information is transmitted overseas — see Section 6.
1. Who we are
| Business name | Greenhaus Gardening |
| Business address | 2131 S Dallas Ave, Lancaster, TX 75146, United States |
| info@greenhaus-gardening.com |
Customer service hours (Central Time)
Monday through Friday: 8:00 AM – 5:00 PM
Saturday and Sunday: 9:00 AM – 4:00 PM
We aim to respond to all inquiries within 12 hours. Email is our primary channel for privacy requests.
2. Who this policy covers
- Visitors who browse our website
- Customers who place an order, receive Products, or open an account
- Subscribers to our marketing emails or text messages
- Anyone who contacts us by email or through our website
3. Notice at Collection — what we collect
The table below uses the categories defined in the CCPA. It shows what we collect, where it comes from, and whether we sell or share it for cross-context behavioral advertising.
| CCPA category | Examples we collect | Sources | Sold or shared? |
|---|---|---|---|
| A. Identifiers | Name, shipping and billing address, email address, phone number, IP address, account username, unique device and cookie identifiers | You; automatically from your device | Yes — identifiers and online activity are shared with advertising partners |
| B. Customer records (Cal. Civ. Code § 1798.80) | Name, address, phone number, payment card information | You | No |
| C. Protected classifications | We do not intentionally collect this | — | No |
| D. Commercial information | Products purchased or viewed, order history, order value, returns, wishlist and cart contents | You; our order systems | Yes — purchase and browsing signals are shared with advertising partners |
| E. Biometric information | We do not collect this | — | No |
| F. Internet or network activity | Pages and Products viewed, search terms, clicks, referring site, interactions with our ads and emails | Automatically, via cookies and similar technologies | Yes |
| G. Geolocation data | Approximate location derived from IP address. We do not collect precise geolocation. | Automatically | Yes — approximate only |
| H. Audio, electronic, visual information | Photographs you send us to support a return, warranty, or damage claim | You | No |
| I. Professional or employment information | We do not collect this from customers | — | No |
| J. Education information | We do not collect this | — | No |
| K. Inferences | Gardening interests, preferences, and product affinities drawn from your browsing and purchase activity, used to recommend Products and target ads | Derived by us and our partners | Yes |
| L. Sensitive personal information | Account login credentials in combination with a password. We do not collect Social Security numbers, driver's license numbers, precise geolocation, racial or ethnic origin, religious beliefs, health information, or information about sex life or sexual orientation. | You | No — we never sell or share sensitive personal information |
Payment card data. Full card numbers and security codes are collected and processed directly by our payment processors. Greenhaus does not store your full card number or CVV. We retain only the last four digits, card type, and expiration date for order support and fraud prevention.
4. How we use personal information
- Fulfilling your order — processing payment, transmitting your order to our overseas fulfillment partner, arranging shipment, handling customs and duties, sending order and shipping confirmations
- Managing your account — creating, maintaining, and securing it
- Customer service — answering questions, handling returns, refunds, damage claims, and warranty matters
- Product safety — contacting you about a recall or safety notice affecting a Product you bought
- Fraud prevention and security — verifying identity, detecting fraudulent transactions, protecting against malicious activity
- Legal and financial compliance — tax and transaction records, responding to lawful requests, establishing and defending legal claims
- Analytics and improvement — understanding how our website is used and improving our Products and service
- Marketing and advertising — sending marketing you opted into, and showing you relevant ads on other sites and platforms
- Personalization — recommending Products and tailoring content to your interests
We do not use or disclose sensitive personal information beyond the purposes permitted by CCPA § 1798.121, so the right to limit its use has limited application to us. We honor such requests regardless.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. How we disclose personal information
| Recipient category | Why |
|---|---|
| E-commerce platform provider | Hosting our store, processing orders, storing customer data |
| Payment processors | Processing payments, fraud screening, chargebacks |
| Our overseas fulfillment partner | Picking, packing, and dispatching your order |
| Shipping carriers and customs brokers | Delivering your order, clearing U.S. customs, paying duties |
| Email and SMS platforms | Sending transactional and marketing messages |
| Analytics providers | Measuring website performance and usage |
| Advertising and social media platforms (Meta, Google, TikTok) | Delivering and measuring advertising — see Section 9 |
| Professional advisors — lawyers, accountants, insurers | Advising and protecting our business |
| Law enforcement, regulators, and courts | Where required by law, subpoena, or legal process, or to protect our rights or others' safety |
| Acquirers | In a merger, acquisition, financing, or sale of assets. Your information would remain subject to this policy or a successor policy |
We do not disclose your personal information to third parties for their own independent marketing purposes.
6. Transfer of your order information overseas
Your name, shipping address, phone number, and order contents are transmitted to our fulfillment partner located outside the United States so your order can be picked, packed, and dispatched. This transfer is necessary to fulfill your order.
We require our fulfillment partner and carriers by contract to protect your information, use it only to fulfill your order, and not use it for their own purposes.
Data protection laws in the country where your order is fulfilled may differ from those in the United States. By placing an order, you understand that your order information will be transferred there for that purpose.
7. How long we keep personal information
| Information | Retention period |
|---|---|
| Order records, invoices, and transaction data | 7 years from the transaction date, to meet IRS and state tax record-keeping requirements |
| Account information | While your account is active, plus 2 years after your last activity |
| Customer service correspondence, returns, warranty and damage claims | 4 years, aligned with the applicable statute of limitations for consumer claims |
| Product safety and recall contact records | 7 years, so we can reach affected customers |
| Marketing preferences and opt-out records | Until you opt out, plus a permanent suppression record so we do not contact you again |
| Website analytics and advertising identifiers | Up to 26 months |
| Fraud prevention records | Up to 7 years where necessary to protect against repeat fraud |
When a retention period ends we securely delete or de-identify the information. Where deletion is not immediately possible — for example in backups — we isolate the data and delete it on the next scheduled cycle.
8. Your privacy rights
8.1 California residents (CCPA/CPRA)
You have the right to:
- Know what personal information we collected, the sources, the purposes, the categories of third parties we disclose it to, and the specific pieces we hold;
- Delete personal information we collected from you, subject to legal exceptions such as completing a transaction, detecting fraud, or complying with a legal obligation;
- Correct inaccurate personal information we maintain;
- Opt out of the sale or sharing of your personal information — see Section 9;
- Limit the use of sensitive personal information — as noted in Section 4, we do not use it beyond permitted purposes;
- Not be discriminated against for exercising a privacy right. We will not deny you Products, charge a different price, or give you lower-quality service because you exercised a privacy right.
8.2 Texas residents
Under the Texas Data Privacy and Security Act you have the right to confirm whether we process your personal data and access it, correct inaccuracies, delete it, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and certain profiling. As that Act requires us to disclose: we sell personal data to third parties for targeted advertising purposes, as described in Section 9. We do not sell sensitive personal data or biometric data. Exercise these rights at info@greenhaus-gardening.com.
8.3 Residents of other states
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others as their laws take effect — generally have the right to:
- Confirm whether we process your personal data and access it;
- Correct inaccuracies;
- Delete personal data;
- Obtain a portable copy in a readable format;
- Opt out of targeted advertising, the sale of personal data, and certain profiling;
- Appeal a decision on your request — see Section 11.4.
Nevada residents: Under Nevada SB 220 you may direct us not to sell your covered personal information. Email us with "Nevada Opt-Out" in the subject line.
8.4 California "Shine the Light"
California Civil Code § 1798.83 allows California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
8.5 California minors
If you are a California resident under 18 and a registered user, you may request removal of content you publicly posted on our website under Cal. Bus. & Prof. Code § 22581. Email us. Removal may not be complete where the law does not require it.
9. Do Not Sell or Share My Personal Information
We share personal information for cross-context behavioral advertising. In plain terms: we use advertising and analytics tools from companies such as Meta, Google, and TikTok that place cookies and similar technologies on our site. These let us show you Greenhaus ads on other websites and measure how our ads perform. Under the CCPA and several other state laws, this counts as "selling" or "sharing" personal information — even though we receive no money for it.
We do not sell or share sensitive personal information, and we do not knowingly sell or share the personal information of anyone under 16.
How to opt out
1. Use our opt-out link. Click "Do Not Sell or Share My Personal Information" in the footer of our website.
2. Adjust your cookie preferences. Use the cookie settings link on our site to withdraw consent for advertising and analytics cookies.
3. Send a Global Privacy Control signal. We recognize and honor the Global Privacy Control (GPC) browser signal as a valid opt-out for the browser and device sending it. Enable it through a supporting browser or extension — see globalprivacycontrol.org. Because GPC is tied to a browser, enable it on each browser and device you use.
4. Email us. Write to info@greenhaus-gardening.com with "Do Not Sell or Share" in the subject line.
Opting out does not stop you seeing ads — it stops us using your personal information to target them.
10. Cookies and tracking technologies
We use cookies and similar technologies for:
- Strictly necessary purposes — keeping your session active, remembering your cart, securing checkout, preventing fraud. Required for the site to work.
- Analytics — understanding how visitors use our site so we can improve it.
- Advertising — delivering and measuring the ads described in Section 9.
Manage non-essential cookies through the cookie settings on our website, or through your browser settings. Blocking strictly necessary cookies may break parts of the site.
Do Not Track. There is no accepted industry standard for responding to browser DNT signals, so we do not respond to them. We do honor Global Privacy Control signals — see Section 9.
11. How to submit a request
11.1 How to reach us.
- Email: info@greenhaus-gardening.com
- Mail: Greenhaus Gardening, 2131 S Dallas Ave, Lancaster, TX 75146, United States
Tell us which right you are exercising and include enough information for us to find your records — for example the email address and order number associated with your purchases.
11.2 Verification. To protect your information we verify your identity before acting on a request to know, delete, or correct. We may ask you to confirm details we already hold, such as your order number and the email used to place it. We will not disclose personal information to someone we cannot verify.
11.3 Timing. We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time we may extend by a further 45 days and will tell you why within the initial period. There is no charge unless a request is manifestly unfounded or excessive.
11.4 Appeals. If we decline your request you may appeal by emailing us with "Privacy Appeal" in the subject line. We respond in writing within 45 days (60 for California) explaining our decision. If we deny the appeal, we will tell you how to contact your state attorney general to complain.
11.5 Authorized agents. You may use an authorized agent. We require written proof of the agent's authority and may ask you to verify your identity directly.
12. Marketing communications
Email. We send marketing email in compliance with the CAN-SPAM Act. Every marketing message has an unsubscribe link, which we honor promptly. You may also email us to opt out.
Text messages. If you opt in to SMS you consent to receive automated marketing texts under the Telephone Consumer Protection Act. Consent is not a condition of purchase. Reply STOP to unsubscribe or HELP for help. Message and data rates may apply.
Opting out of marketing does not stop transactional messages about an order you placed, or safety and recall notices.
13. Children's privacy
Our website and Products are intended for adults. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn we have collected such information we will delete it promptly. Contact us if you believe a child has provided us with personal information.
We do not knowingly sell or share the personal information of consumers under 16.
14. How we protect personal information
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction — including encryption in transit (TLS), access limited to personnel who need it, established service providers maintaining recognized security standards, and contractual security commitments from our vendors and our overseas fulfillment partner.
No method of transmission or storage is completely secure and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any required regulators as required by applicable state breach notification laws, including Texas Business & Commerce Code § 521.053.
15. Third-party links
Our website may link to third-party websites and services. We do not control them and are not responsible for their privacy practices. Please read the privacy policy of any site you visit.
16. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date shows when it was last revised. If we make material changes — such as collecting new categories of information or using it for a materially different purpose — we will notify you by email or through a prominent notice on our website before the change takes effect.
17. Contact us
Greenhaus Gardening
2131 S Dallas Ave, Lancaster, TX 75146, United States
Email: info@greenhaus-gardening.com
Customer service hours (Central Time)
Monday through Friday: 8:00 AM – 5:00 PM
Saturday and Sunday: 9:00 AM – 4:00 PM
Accessible format. If you need this Privacy Policy in an alternative accessible format, contact us and we will provide one.
Laws referenced in this policy
- California Consumer Privacy Act, as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.100 et seq.
- California "Shine the Light" law, Cal. Civ. Code § 1798.83
- California minor content removal, Cal. Bus. & Prof. Code § 22581
- Texas Data Privacy and Security Act, Tex. Bus. & Com. Code ch. 541
- Texas breach notification law, Tex. Bus. & Com. Code § 521.053
- Nevada SB 220, Nev. Rev. Stat. ch. 603A
- Virginia, Colorado, Connecticut, Utah, Oregon, Montana, and other state comprehensive privacy acts
- Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506
- CAN-SPAM Act, 15 U.S.C. §§ 7701–7713
- Telephone Consumer Protection Act, 47 U.S.C. § 227