Keystone Plant Provisions ("Keystone Plants", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.keystoneplants.com (the "Site"), place an order, attend our pop-up sales, or interact with us.
Contact Us
Keystone Plant Provisions
Email: hello@keystoneplants.com
Location: Wyndmoor, PA
Instagram: @keystoneplantprovisions
We aim to respond within 48 hours.
Information We Collect
Information You Provide Directly
- Order Information: When you purchase plants online or pre-order for pop-up sales, we collect your name, shipping address, billing address, email address, phone number, and payment details (processed securely by our payment processor — we do not store full credit card numbers).
- Plant Inquiries: When you contact us via email or our contact form about plant sourcing, custom orders, or availability, we collect your name, email, and the details of your request.
- Pop-Up Sale Pre-Orders: If you place a pre-order for pickup at one of our pop-up events, we collect your name, email, order details, and pickup preferences.
- Newsletter Signups: If you subscribe to our email list, we collect your email address and, optionally, your name and gardening interests.
- Social Media Interactions: If you interact with us on Instagram or other social platforms, we may see your public profile information and messages you send us.
Information Collected Automatically
Our Site is hosted on Squarespace, which automatically collects certain data:
- Usage Data: Pages visited, time on site, referral sources, click patterns, and approximate geographic location (city/region level).
- Device Data: Browser type, operating system, screen resolution, and language preferences.
- Cookies: Squarespace places cookies for essential site functionality, analytics, and security. We do not currently use third-party advertising cookies, but may add analytics tools (such as Google Analytics) in the future. If we do, we will update this policy and re-collect consent where required.
Information from Third Parties
- Payment Processors: Stripe or Square (via Squarespace) processes your payment and shares transaction confirmation with us.
- Shipping Partners: If we ship plants to you, we share your address and contact information with our delivery carrier (e.g., USPS, UPS, or local courier).
- Google Sheets: Our public plant list is hosted on Google Sheets. Viewing the sheet is subject to Google's privacy practices.
How We Use Your Information
We use the information we collect to:
- Fulfill orders: Process payments, prepare plant orders, coordinate pickup or delivery, and send order confirmations and shipping notifications.
- Communicate with you: Respond to plant inquiries, notify you of upcoming pop-up sales, share gardening tips (if you subscribe), and inform you of order status.
- Improve our offerings: Understand which plants are most popular, optimize our plant list, and plan future sales events.
- Maintain the Site: Ensure the website functions properly, prevent fraud, and protect against security threats.
- Comply with legal obligations: Tax reporting, record keeping, and responding to lawful requests.
Cookies and Tracking
What Are Cookies
Cookies are small text files stored on your device that help websites function and remember your preferences.
Cookies We Use
| Category | Purpose | Examples |
|---|
| Essential | Required for core functionality | Shopping cart, checkout flow, session state |
| Analytics | Understand visitor behavior | Squarespace Analytics, Google Analytics (if enabled) |
| Security | Protect against fraud and abuse | Squarespace security cookies, CAPTCHA |
| Functional | Remember your preferences | Plant list view settings, region selection |
Your Choices
Most web browsers allow you to control cookies through their settings. You can delete existing cookies and block future cookies, though this may affect your ability to use certain features like the shopping cart.
If we add advertising or advanced analytics cookies in the future, we will display a cookie consent banner allowing you to accept or reject non-essential cookies.
How We Share Your Information
We do not sell your personal information. We share data only in the following circumstances:
- Squarespace: Our website platform, which hosts the Site and processes some data on our behalf.
- Payment Processors: Stripe or Square processes your payment securely. We receive confirmation of payment but do not see your full credit card details.
- Shipping Carriers: USPS, UPS, or local couriers receive your shipping address and contact information to deliver your plants.
- Service Providers: Email marketing platforms (if we use one), accounting software, and customer support tools.
- Legal Compliance: When required by law, subpoena, or to protect our rights, safety, or property.
- Business Transfers: If Keystone Plant Provisions is acquired or merged, customer information may be transferred as part of that transaction.
Data Security
We implement reasonable measures to protect your information:
- Our Site uses HTTPS/TLS encryption for all data transmission.
- Payment processing is handled by PCI-compliant providers (Stripe/Square); we never store your full credit card numbers.
- Access to customer data is limited to the owners and any authorized team members who need it to fulfill orders.
No internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Data Retention
- Order and Payment Data: Retained for 7 years for tax and accounting purposes, as required by law.
- Email Correspondence: Retained for 2 years unless you request deletion.
- Newsletter Subscriptions: Retained until you unsubscribe. Unsubscribe links are included in every email.
- Analytics Data: Retained according to our analytics provider's policies (typically 26 months for Google Analytics).
Your Privacy Rights
Depending on your location, you may have the following rights:
For All Users
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements (e.g., tax records).
- Objection: Object to receiving marketing emails by clicking "unsubscribe" in any email.
For California Residents (CCPA)
You have the right to:
- Know what personal information we collect and how we use it.
- Request deletion of your personal information (with exceptions for legal obligations).
- Opt out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising your privacy rights.
To exercise CCPA rights, email hello@keystoneplants.com with "CCPA Request" in the subject line.
For Pennsylvania and Other US Residents
Pennsylvania law requires us to notify you of any data breaches affecting your personal information. We will comply with all applicable state breach notification laws.
Children's Privacy
Keystone Plant Provisions is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, contact us immediately at hello@keystoneplants.com and we will delete it.
Third-Party Links
Our Site contains links to:
- Our public plant list on Google Sheets
- Our Instagram profile and other social media
- Google Maps for directions to pop-up sale locations
- Partner nurseries or growers (if listed)
Each of these has its own privacy policy. We encourage you to review them before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. The "Last updated" date at the top will reflect the most recent revision. For material changes, we will post a notice on the Site for 30 days.
Compliance Statement
Keystone Plant Provisions complies with applicable privacy laws including:
- California Consumer Privacy Act (CCPA)
- Pennsylvania Breach of Personal Information Notification Act
- Federal Trade Commission (FTC) guidelines on data practices
- Children's Online Privacy Protection Act (COPPA)
Keystone Plant Provisions is a native plant nursery based in Wyndmoor, Pennsylvania. Thank you for trusting us with your information and for supporting native plant gardening.