Privacy Policy

Effective date: January 1, 2026

1. Overview

Koshift Floral Atelier (“we”, “us”, or “our”) respects your privacy. This policy explains what data we collect, why, how we process it, and the choices you have.

2. Information we collect

• Account data: name, email, password (hashed), course enrollments.
• Transaction data: purchased courses, payment confirmation from our payment processor (we do not store full card details).
• Support data: messages you send via our contact form or email.
• Usage data: pages visited, device type, approximate location (city/country), session duration.
• Cookies and local storage: preferences (theme), cart, and favorites (Fallows).

3. How we use information

• Provide and improve courses and site features.
• Process orders, deliver confirmations, and maintain your account.
• Respond to support requests and feedback cycles.
• Secure our services and prevent abuse.
• With your consent, send educational updates or offers; you can opt out anytime.

4. Legal bases

We rely on contract necessity, legitimate interests, legal obligations, and your consent where required.

5. Sharing

We share data with service providers only as needed to operate our services (e.g., payment processing, analytics, email delivery). We do not sell personal data.

6. Cookies and local storage

We use strictly necessary cookies and localStorage to remember preferences (theme), cart, and Fallows. The cookie banner in our footer allows you to consent to non-essential cookies where applicable.

7. Security

We apply reasonable technical and organizational measures to protect data. No method is 100% secure; please use strong passwords and keep them confidential.

8. Data retention

We keep personal data only as long as necessary for the purposes outlined or as required by law. You may request deletion where applicable.

9. Your rights

• Access, correct, or delete your data.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent at any time without affecting prior processing.

10. International transfers

Where data moves across borders, we use appropriate safeguards consistent with applicable law.

11. Children’s privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with a new effective date.

13. Contact

For privacy inquiries, contact us at [email protected] or +1 (415) 809-6723.