FloraFlex Privacy Policy

This Privacy Policy explains how Cresthaven Agricultural Corp. ("Cresthaven," "we," "our," or "us") collects, uses, discloses, and protects personal information in connection with the FloraFlex website, ecommerce operations, wholesale accounts, customer relationships, marketing activities, and related services.

For purposes of applicable privacy law, Cresthaven is the entity responsible for the personal information described in this Policy unless otherwise stated.

1. Scope

This Policy applies to personal information collected through:

• www.floraflex.com;
• customer and wholesale accounts;
• quote and order requests;
• purchases and payment activity;
• credit or payment-term applications;
• customer service and technical support;
• email and SMS communications;
• trade shows and business events;
• forms and surveys;
• authorized distribution-partner referrals;
• advertising and analytics; and
• other business interactions that reference this Policy.

Information relating solely to a corporation or other legal entity may not constitute "personal information," but information identifying an employee, owner, representative, sole proprietor, or other individual may.

2. Information We Collect

Depending upon your interaction with us, we may collect the following categories of information.

Identifiers

Name, business name, email address, postal address, shipping address, billing address, telephone number, account identifier, username, IP address, and similar identifiers.

Business and Professional Information

Employer, business name, job title, industry, customer type, reseller or distributor status, purchasing authority, facility information, cultivation-business information, and business contact details.

Commercial Information

Products purchased or considered, quotes, purchase history, order frequency, transaction values, customer lifetime activity, shipping history, product interests, returns, warranties, support history, and account status.

Financial and Payment Information

Billing information, payment method information, transaction information, credit limits, payment history, trade references, credit-application information, and information necessary to establish commercial payment terms.

Payment card information may be processed directly by third-party payment processors rather than stored in full by Cresthaven.

Internet and Device Activity

IP address, browser type, operating system, device identifiers, pages viewed, links clicked, referral information, session activity, website interactions, and advertising or analytics identifiers.

Location Information

We may infer general location from an IP address and collect shipping, billing, facility, or delivery locations you provide.

We do not intend to collect precise continuous geolocation information through the Site unless expressly disclosed.

Communications

Emails, text communications, chat messages, customer-support communications, photographs, documents, warranty submissions, product questions, survey responses, and other communications with us.

User-Submitted Content

Product reviews, photographs, testimonials, feedback, and similar materials.

Inferences

We may derive business or marketing segments based on purchasing activity, product interests, location, company type, engagement, and similar information.

Sensitive Personal Information

In limited circumstances, particularly in connection with credit, payment terms, fraud prevention, tax documentation, or regulatory requirements, we or an approved service provider may process account credentials, financial-account information, government-issued identification information, tax information, or similar sensitive information.

We do not use sensitive personal information to infer characteristics about individuals except where expressly disclosed and permitted by law.

3. Sources of Information

We obtain information:

• directly from you;
• through your use of the Site;
• from your employer or colleagues;
• from payment and financing providers;
• from shipping and logistics providers;
• from authorized distribution partners;
• from vendors and service providers;
• at trade shows and industry events;
• from industry directories and publicly available business information;
• from marketing and data providers;
• from social platforms;
• from analytics providers; and
• from other lawful sources.

4. How We Use Information

We use personal information to:

• operate and secure the Site;
• establish and manage accounts;
• process orders;
• prepare quotations;
• collect payments;
• establish and manage commercial credit;
• arrange freight and fulfillment;
• manage inventory;
• deliver products;
• provide technical and customer support;
• process warranty and return requests;
• prevent fraud and abuse;
• communicate with customers;
• provide product information;
• route customers to appropriate authorized distribution partners;
• improve our products and services;
• analyze business performance;
• personalize and measure marketing;
• conduct advertising;
• administer promotions;
• maintain business and legal records;
• enforce agreements; and
• comply with legal obligations.

5. Authorized Distribution Partners

Cresthaven's business model may involve fulfillment through authorized FloraFlex distribution partners.

Where appropriate, we may share relevant business-contact, inquiry, product-interest, quantity, location, or order-related information with an authorized distribution partner so that the partner can provide availability, pricing, fulfillment, or local support.

Where required by applicable law, we will provide applicable choices regarding such disclosures.

A distributor's independent handling of information is subject to its own privacy practices where it acts independently from Cresthaven.

6. Service Providers

We may disclose information to vendors that perform services on our behalf, including providers of:

• ecommerce hosting;
• website hosting;
• payment processing;
• accounting;
• CRM services;
• customer support;
• email delivery;
• SMS delivery;
• analytics;
• advertising;
• fraud prevention;
• financing and factoring;
• credit evaluation;
• warehousing;
• fulfillment;
• shipping and freight;
• customs services;
• information technology;
• cybersecurity; and
• legal, accounting, and other professional services.

We expect service providers to process information consistent with their contractual and legal obligations.

7. Advertising and Analytics

We may use analytics, advertising, social-media, and similar technologies to understand Site usage, measure campaigns, create audiences, and deliver or evaluate advertising.

We do not sell personal information to third parties in exchange for money.

However, disclosure of device identifiers, online activity, identifiers, or similar information to advertising partners may be considered a "sale," "sharing," or use for "targeted advertising" under certain U.S. state privacy laws.

Where applicable, you may opt out through our Your Privacy Choices link, Cookie Settings, or a legally recognized browser opt-out signal.

8. Global Privacy Control

Where required by applicable law, Cresthaven will process qualifying browser-based opt-out preference signals, including Global Privacy Control, as requests to opt out of covered sale or sharing of personal information associated with that browser, device, or known account.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Where consent is legally required, we will obtain appropriate consent before using non-essential technologies.

You may adjust choices through the Site's Cookie Settings interface.

10. Marketing Communications

You may unsubscribe from marketing emails using the unsubscribe mechanism included in the communication.

Transactional communications concerning orders, accounts, security, warranties, or other existing business relationships may continue when necessary.

If you participate in an SMS marketing program, additional Mobile Messaging Terms may apply.

11. Mobile Information

Mobile numbers, SMS opt-in records, and consent information obtained for a text-messaging program will not be sold or shared with unaffiliated third parties for their own independent text-message marketing.

We may disclose such information to service providers that help deliver or administer our messaging program.

12. Business Transfers

Personal information may be transferred as part of a financing, merger, acquisition, reorganization, asset transaction, bankruptcy, or similar corporate transaction, subject to applicable law.

Any future transfer will not alter the legal identity of past contracting parties or independently create an assumption of liabilities not otherwise assumed under the governing transaction documents.

13. Legal and Protective Disclosures

We may disclose information when reasonably necessary to:

• comply with law, court orders, subpoenas, or government requests;
• satisfy customs, tax, or regulatory requirements;
• investigate fraud or security incidents;
• enforce our agreements;
• protect legal rights;
• preserve the security of our systems;
• collect amounts owed; or
• protect Cresthaven, our customers, or others.

14. Data Retention

We retain personal information for only as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, tax, warranty, security, dispute, and recordkeeping requirements.

Retention depends on the nature of the information, relationship, transaction, legal requirements, and potential claims.

Transaction and accounting records may be retained for applicable tax and accounting periods. Customer account information may be maintained during an active relationship and for a reasonable period afterward. Marketing preference records may be retained as necessary to honor opt-outs. Security logs may be retained for fraud-prevention and security purposes.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No internet transmission, storage environment, or information-security system is completely secure, and we cannot guarantee absolute security.

16. U.S. State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to:

• confirm whether we process personal information;
• access or obtain personal information;
• request correction;
• request deletion;
• obtain a portable copy;
• opt out of certain sales or sharing;
• opt out of targeted advertising;
• limit certain uses of sensitive personal information;
• opt out of certain profiling or automated decision-making;
• appeal a decision concerning a privacy request; and
• exercise rights without unlawful discrimination.

These rights are subject to applicable exceptions and verification requirements.

17. California Privacy Rights

If California privacy law applies to your information, you may have rights to:

• know or access personal information;
• request deletion;
• request correction;
• opt out of sale or sharing;
• limit certain uses or disclosures of sensitive personal information; and
• receive equal treatment for exercising your privacy rights.

During the preceding 12 months, categories of personal information Cresthaven may have collected include identifiers; customer-record information; commercial information; internet or network activity; approximate location; professional or employment-related information; communications; financial information; and inferences.

Categories disclosed to service providers or contractors may include the same categories as necessary for the services they provide.

Categories potentially disclosed to advertising or analytics partners may include identifiers, device information, internet activity, approximate location, and commercial or interest information.

18. Privacy Request Methods

To exercise a qualifying privacy right, you may use the privacy-request mechanism made available through the Site or contact:

Email: accounting@cresthavenag.com

Mail:
Cresthaven Agricultural Corp.
Attn: Privacy
7901 4th St N, Suite 300
St. Petersburg, Florida 33702
United States

We may need to verify your identity before completing certain requests.

An authorized agent may submit a request where permitted by law, subject to verification of the agent's authority.

If additional request methods are required by applicable law, they will be made available through the Site.

19. Appeals

Where applicable state law provides an appeal right and we deny a privacy request, you may appeal by following the instructions in our response or contacting accounting@cresthavenag.com with "Privacy Appeal" in the subject line.

20. International Visitors

Cresthaven is based in the United States.

If applicable law in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction applies to our processing, we will process information under an appropriate lawful basis, which may include performance of a contract, legitimate interests, compliance with law, or consent.

Applicable individuals may have rights including access, correction, deletion, objection, restriction, portability, withdrawal of consent, and lodging a complaint with a competent supervisory authority.

International personal-data transfers may be supported by legally recognized transfer mechanisms where required.

21. Children

The Site is intended for business users and adults.

We do not knowingly solicit or intentionally collect personal information from children under 18 through our ecommerce services.

22. Changes to This Privacy Policy

We may update this Policy periodically.

The Effective Date identifies the latest revision.

Where required, material changes will be communicated through appropriate means.

23. Contact

Cresthaven Agricultural Corp.
7901 4th St N, Suite 300
St. Petersburg, Florida 33702
United States

Privacy inquiries: accounting@cresthavenag.com