Privacy Policy
Last Updated: January 29, 2026
PAPER YARROW is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and place orders with us.
Information We Collect
When you place an order with PAPER YARROW, we collect the following personal information:
- Contact Information: Name, email address, and phone number
- Delivery Information: Full delivery address (street, city, state, postal code) for shipping orders, or pickup location selection
- Order Details: Items purchased, quantities, prices, delivery method, delivery date, and preferred delivery time window
- Payment Information: We do not store your credit card information. All payment processing is handled securely by Stripe, our third-party payment processor.
- Order History: Records of your past purchases, including dates, items, and order totals
- Contact Inquiries: When you contact us through our website, we collect your name, email, phone (if provided), and message content
How We Use Your Information
We use your personal information for the following purposes:
- Order Fulfillment: To process your orders, arrange delivery or pickup, and communicate with you about your purchase
- Customer Service: To respond to your inquiries, provide support, and resolve any issues
- Transactional Emails: To send order confirmations, delivery updates, and other essential communications
- Legal Compliance: To comply with tax, accounting, and regulatory requirements
Note: Order confirmation emails are necessary to complete your purchase and cannot be opted out of. If we send marketing emails in the future, they will include an unsubscribe link.
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill your order (we cannot deliver flowers without your address)
- Legal Obligation: We must retain business records for 7 years to comply with IRS tax regulations
- Legitimate Interest: For customer service and operational purposes that do not override your privacy rights
Third-Party Services
To provide our services, we share your information with the following trusted third-party providers:
Stripe (Payment Processing)
Stripe securely processes your payment information. We receive confirmation of successful payments but never store your credit card details. Learn more at stripe.com/privacy.
Google Maps API (Address Validation)
Google Maps provides address autocomplete and distance calculation for delivery quotes. Your typed address is sent to Google for validation. Learn more at policies.google.com/privacy.
Uber Direct (Delivery Service)
For shipping orders, Uber Direct receives your name, phone number, and delivery address to book and fulfill deliveries. You will receive a tracking link in your confirmation email to monitor your delivery in real-time. Learn more at uber.com/legal.
Email Service Provider (SMTP)
We use an email service to send order confirmations and notifications. Your email address and order details are processed by this service to deliver messages to you.
Data Storage and Security
Your information is stored securely in our database located in the United States. We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse.
Your shopping cart is stored locally in your browser (using localStorage) and is automatically cleared after you complete your order.
Data Retention
Retention Period: We retain your order information for 7 years from the date of purchase to comply with IRS tax and accounting regulations.
After 7 Years: You may request deletion of your personal information. Upon request, we will anonymize your data by removing your name, email, phone number, and address while preserving order records for business analytics (dates, items purchased, totals).
Note: We cannot delete data that we are legally required to retain for tax compliance purposes within the 7-year period.
Your Privacy Rights
You have the following rights regarding your personal information:
- Right to Access: You may request a copy of all personal data we hold about you
- Right to Correction: You may request corrections to inaccurate or incomplete information
- Right to Deletion/Anonymization: You may request deletion or anonymization of your data (subject to our 7-year retention requirement for tax compliance)
- Right to Data Portability: You may request your data in a machine-readable format (JSON)
- Right to Object: You may object to certain types of data processing
To exercise your rights, please email us at: privacy@paperyarrow.com
We will respond to your request within 30 days. Please include your order number and the email address used for your purchase to help us verify your identity.
Marketing Communications
If we send marketing emails in the future (such as new product announcements or special offers), each message will include an unsubscribe link. You can opt out of marketing communications at any time without affecting order confirmations and transactional emails.
Cookies and Tracking
No Cookies: PAPER YARROW does not use cookies for tracking or advertising purposes.
Local Storage: We use your browser's localStorage to temporarily save your shopping cart. This is essential for the e-commerce functionality and is cleared after you complete your order. No personal information is stored in localStorage.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, please contact us:
PAPER YARROW
East Village, New York, NY
Privacy Requests: privacy@paperyarrow.com
General Inquiries: Visit our shop
Your California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected
- Right to Delete: You may request deletion of your personal information (subject to legal retention requirements)
- Right to Opt-Out: We do not sell your personal information to third parties
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To exercise your California privacy rights, please email: privacy@paperyarrow.com
Do Not Sell My Personal Information
PAPER YARROW does not sell, rent, or share your personal information with third parties for monetary gain. We only share data with service providers necessary to fulfill your orders (Stripe for payments, email provider for confirmations, delivery services for shipping quotes).