Privacy Policy

Last updated: October 5, 2026

We collect only the personal information we need to prepare, deliver and support your flower orders, and we never sell it.

1. Who we are and what this policy covers

This policy explains how Epic Society LLC, doing business as Epicflowers (“we”, “us”), handles personal information. We are a U.S. company that sells bouquets grown on our own farms in Ecuador. It applies to:

our website and online store at epicfloralstudio.com, which runs on Shopify;
orders you place with us on Amazon.com;
emails and chat messages you exchange with us about an order.

By using our website or placing an order, you acknowledge this policy. If you do not agree with it, please do not use our services.

2. Information we collect

Contact and account: name, email, phone, billing address and account login, provided by you when you buy or create an account.
Recipient and delivery: recipient name, delivery address, recipient phone and delivery date, provided by you, or by Amazon when you order there.
Gift message: the message printed on the card that goes with the flowers.
Order details: products, quantities, prices, order and tracking numbers, from our store, Amazon and our delivery carriers.
Payment: payment confirmation and the last digits of the card, from our payment processors. We never see or store full card numbers.
Messages: what you write to us about an order by email or through the chat on our website.
Device and usage: IP address, browser, pages viewed and cookies, from your browser when you visit our website.

We do not ask for sensitive information such as government ID numbers or health data. Please do not include it in gift messages or notes.

3. How we use information

Fulfill orders: prepare the bouquet, print the gift card, create the shipping label, deliver and send tracking updates.
Customer support: answer questions, fix delivery problems, handle refunds and replacements.
Payments and fraud prevention: confirm payment and protect you and us from fraudulent orders.
Legal and accounting: keep the records that tax, accounting and consumer-protection laws require.
Improve our store: understand in aggregate how visitors use the website so we can improve it.
Marketing: send offers or newsletters only to customers who opted in. Every email has an unsubscribe link.

We do not use the information of gift recipients for marketing. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Orders placed on Amazon

For orders placed on Amazon.com, we use the information Amazon gives us only to fulfill that order, and we delete the recipient's personal information no later than 30 days after shipment.

What we receive from Amazon: the order and product details, the recipient's name, delivery address and phone, and the gift message. We do not receive or store the buyer's email or payment information.
How we use it: only to prepare, print the gift card, ship, track and support that order, and to send the order-related messages Amazon allows through its messaging system.
What we never do: use Amazon customer information for marketing, add it to our mailing lists, sell it, rent it, or share it with anyone except the carrier that delivers the order.
How we protect it: it is encrypted with AES-256 when stored, access is limited to the staff who prepare and ship orders, and every access is logged.
How long we keep it: the recipient's name, address, phone and gift message are deleted automatically no later than 30 days after shipment, and immediately if the order is cancelled. Order records without personal information are kept for up to 18 months.

Amazon's own handling of your information is described in the Amazon.com Privacy Notice.

5. How we share information

We share personal information only with the providers that help us deliver your order and run the store, under terms that limit their use of it. We do not sell personal information.

Shopify: hosts our online store, checkout and customer chat.
Payment processors: process the payment details you enter at checkout.
FedEx and other carriers: receive the recipient's name, address and phone to deliver the order and provide tracking.
Hosting and backup providers: run our internal order system and keep encrypted backups.
Email provider: handles the messages you send us and our replies.
Authorities: only what the law requires, to comply with a valid legal request or protect rights and safety.

If our business is sold or merged, personal information may transfer to the new owner, who must keep honoring this policy.

6. Cookies

Essential cookies keep your cart, checkout and login working and cannot be turned off.
Analytics cookies help us understand, in aggregate, how the store is used. They are optional.

You can accept or decline optional cookies in the banner shown on your first visit and change your choice at any time from the privacy choices link in the footer. You can also block or delete cookies in your browser settings, although parts of the store may stop working.

7. How long we keep information

Recipient name, address, phone and gift message from Amazon orders: deleted no later than 30 days after shipment, immediately if the order is cancelled.
Order records without personal information: up to 18 months.
Store orders and customer accounts: while your account is active and as long as tax and accounting laws require.
Marketing subscriptions: until you unsubscribe.
Support messages: up to 12 months after the issue is closed.
Encrypted backups: 30 days, then permanently deleted.
Security and audit logs, without customer personal information: 12 months.

8. How we protect information

Recipient names, addresses, phone numbers and gift messages are encrypted with AES-256 when stored, and all traffic uses HTTPS.
Each team member has an individual account with a strong password and two-factor authentication. Staff see only what their job requires, and every view of a full address is logged.
Encrypted backups are stored separately from our servers and deleted after 30 days.
We monitor for unusual activity and keep an incident response plan. If a breach affects your information, we will notify you and the authorities as the law requires.

No system is completely secure, but we review these measures regularly.

9. Your rights and choices

Depending on where you live, including several U.S. states, you may have the right to:

know what personal information we hold about you and get a copy;
correct inaccurate information;
delete your information, unless we must keep it for legal or accounting reasons;
opt out of marketing emails at any time with the unsubscribe link;
opt out of the sale of personal information or its use for targeted advertising. We do not sell personal information.

To make a request, email hello@epicfloralstudio.com. We may ask you to confirm your identity and will answer within 45 days. An authorized agent may make a request on your behalf with your written permission. We will not treat you differently for exercising your rights.

10. Children's privacy

Our store is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

11. Where we process information

We serve customers in the United States and grow and prepare our bouquets on our own farms in Ecuador, so your information may be processed in both countries. Our team in Ecuador accesses order information only to prepare and ship your order, under the same protections described in this policy.

12. Changes to this policy

We will post any change on this page and update the date at the top. If a change materially affects how we use your information, we will tell you by email or with a notice on the store before it takes effect.

13. Contact us

Epic Society LLC, doing business as Epicflowers
Email: hello@epicfloralstudio.com
Live chat: available on every page of our website
Mailing address (correspondence only, not open to the public): 1065 Southwest 8th Street, #1792, Miami, FL 33130, United States