San Francisco Flower Market

This Privacy Policy was last updated on June 15, 2023.

Welcome to the San Francisco Flower Market! San Francisco Flower Market, LLC (the “Company”,
“we”, “us” and/or “our”) is pleased to provide visitors, vendors, and other individuals (“you” and
“your”) with our website accessible at http://www.sfflowermart.com (the “Site”) and our flower market
services and related services through the Site and in-person (the “Services”) Your privacy is very
important to us, and we want to make your experience with our Services as enjoyable as possible
while giving you confidence about the use of your personal information. This Privacy Policy sets
forth our policy with respect to information including personally identifiable data (“Personal Data”)
and other information that is collected through your use of our Services.

Our Collection, Use, and Storage of Your Data.

Through your use of the Services, we collect and keep your Personal Data as provided below.

Communicated Data: Data included in any communication you send to us, whether from the
contact form(s) located on our Site, through email, text, social media messaging or posting, or any
other communication you send us through any medium, including when you provide information
when visiting our market in person. We keep and process this communication data for the purposes
of (i) communicating with you, (ii) record keeping, (iii) the establishment, pursuit, and/or defense of
legal claims, and (iv) other lawful purposes.

Customer, Vendor, and Registration Data: Data relating to any purchases of goods and/or
services such as your name, employer, title, billing address, delivery address, email address, phone
number, and contact, purchase, and credit card details. We process and store this data to manage
your account, supply the goods and/or services you have purchased, and to keep records of such
transactions.

Marketing Data: Data about your preferences in receiving marketing from us and your
communication preferences. We process this data to enable you to partake in our promotions such
as communication notices, to deliver relevant website content and advertisements to you, and to
measure or understand the effectiveness of this advertising.

Technical Data: Data about your use of our Site and Services such as your IP address, your login
data, details about your browser, length of visit to pages on our website, page views and navigation
paths, details about the number of times you use our website, time zone settings and other
technology on the devices you use to access our website. The source of this data is from our
analytics tracking system. We process this data to analyze your use of our website and other online
services, to administer and protect our business and website, to deliver relevant content and
advertisements to you and to understand the effectiveness of our advertising.

User Data: Data about how you use our Site and any Services together with any data that you post
for publication on our Site or through other online services. We process this data to operate our
website and ensure relevant content is provided to you, to ensure the security of our website, to
maintain back-ups of our website and/or databases and to enable publication and administration of
our website, other online services and business.
In addition to the uses described above, we may use your Personal Data to deliver relevant website
content and advertisements to you and to measure or understand the effectiveness of the
advertising we serve you. Our lawful ground for this processing is legitimate interests which are to
grow our business.

Consent and Geographic Transfer: By voluntarily providing us with Personal Data, you are
consenting to our use of it in accordance with this Privacy Policy. If you provide Personal Data to the
Services, you acknowledge and agree that such Personal Data may be transferred from your current
location to the offices and servers of the Company and the authorized third parties referred to herein
located in the United States. If you access our Services from outside of the United States,
information that we collect about you will be transferred to servers inside the United States, which
may involve the transfer of information out of your country of origin. By allowing us to collect
personal information about you, you consent to such transfer and processing of your personal
information.

Other Information: Non-Identifiable Data: When you interact with the Company through the
Services, we receive and store certain personally non-identifiable information. Such information,
which is collected passively using various technologies, cannot presently be used to specifically
identify you. The Company may store such information itself or such information may be included in
databases owned and maintained by the Company affiliates, agents or service providers. The
Services may use such information and pool it with other information to track, for example, the total
number of visitors to our Site, the number of visitors to each page of our Site, and the domain names
of our visitors’ Internet service providers. It is important to note that no Personal Data is available or
used in this process.

Information Collected by Partners and Sponsors: Some products and services may be offered to
you in conjunction with the vendors at our market, an affiliate, independent contractor seller or non-
affiliated partner of the Company. To provide you with some of these products and services, the
partner may need to collect and maintain personal information. In these instances, you will be
notified before any such data is collected or transferred and may decide not to use that particular
service or feature.

Cookies and How The Company Uses Them: In operating the Site, we may use a technology
called “cookies.” A cookie is a piece of information that the computer that hosts our Services gives to
your browser when you access the Services. Our cookies help provide additional functionality to the
Services and help us analyze Services usage more accurately. For instance, our Services may set a
cookie on your browser that allows you to access the Services without needing to remember and
then enter a password more than once during a visit to the Services. In all cases in which we use
cookies, we will not collect Personal Data except with your permission. On most web browsers, you
will find a “help” section on the toolbar. Please refer to this section for information on how to receive
notification when you are receiving a new cookie and how to turn cookies off. We recommend that
you leave cookies turned on because they allow you to take advantage of some of the Service
features.

Partners that you interact with on, and/or who are linked to through our Services may also use their
own cookies. We do not control use of these cookies and expressly disclaim responsibility for
information collected through them.

“Do Not Track” Browser Settings: We do not use technology that recognizes a “do-not-track”
signal from your web browser, because we do not track users other than for aggregate statistical
purposes. To the extent that we are able to recognize and honor a “do-not-track” signal, we will
endeavor to honor that request.

Aggregated, De-Identified Personal Data: In an ongoing effort to better understand and serve the
users of the Services, the Company often conducts research on its customer demographics,
interests and behavior based on the Personal Data and other information provided to us. This
research may be compiled and analyzed on an aggregate basis, and the Company may share this
aggregate data with its affiliates, agents and business partners. This aggregate information does not
identify you personally. The Company may also disclose aggregated user statistics in order to
describe our services to current and prospective business partners, and to other third parties for
other lawful purposes.

Location Information: Our Service may collect and use your location information (for example, by
using the GPS on your mobile device) to provide certain functionality of our Service. We may also
use your location information in an aggregate way, as described above in the “Aggregated, De-
Identified Personal Data” section.

Additional Use of Your Personal Data and Other Information: In addition to the uses described
above, the Company and its vendors, partners, subsidiaries, and affiliates may also use your
Personal Data and other personally non-identifiable information collected through the Services to
offer you their own services, help us improve the content and functionality of the Services, to better
understand our users and to improve the Services. The Company and its affiliates may use this
information to contact you in the future to tell you about services we believe will be of interest to you.
If we do so, each marketing communication we send you will contain instructions permitting you to
“opt-out” of receiving future marketing communications. In addition, if at any time you wish not to
receive any future marketing communications or you wish to have your name deleted from our
mailing lists, please contact us as indicated below.

If the Company intends on using any Personal Data in any manner that is not consistent with this
Privacy Policy, you will be informed of such anticipated use prior to or at the time at which the
Personal Data is collected.

Our Disclosure of Your Personal Data and Other Information

We will not sell your information. We consider this information to be a vital part of our relationship
with you. The Company will use your Personal Data solely to provide the Services, and we will
protect such information and disclosures that may be made of such information without your
authorization. There are, however, certain circumstances in which we may share your Personal Data
with certain third parties without further notice to you, as set forth below.

Vendors: Many of our Services are provided through the third-party vendors that operate at our
market. We share your information with those vendors in order to enable them to provide the
Services.

Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the
event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be
part of the transferred assets. We may also share your Personal Data with our Related Companies
for purposes consistent with this Privacy Policy.

Agents, Consultants and Related Third Parties: The Company, like many businesses, sometimes
hires other companies to perform certain business-related functions. Examples of such functions
include mailing information, maintaining databases and processing payments. When we employ
another entity to perform a function of this nature, we only provide them with the information that
they need to perform their specific function. Legal Requirements: The Company may disclose your
Personal Data if required to do so by law or in the good faith belief that such action is necessary to
(i) comply with a legal obligation, (ii) protect and defend the rights or property of The Company, (iii)
act in urgent circumstances to protect the personal safety of users of the Services or the public, or
(iv) protect against legal liability.

Special Cases: It is our policy not to use or share the personal information about you in ways
unrelated to the ones described above without also providing you an opportunity to opt out or
otherwise prohibit such unrelated uses.

However, we may disclose personal information about you or information regarding your use of our
Services, for any reason if, in our sole discretion, we believe that it is reasonable to do so, including:
credit agencies; collection agencies; merchant database agencies; law enforcement, or to satisfy
laws, such as the Electronic Communications Privacy Act, the Child Online Privacy Act, regulations,
or governmental or legal requests for such information; to disclose information that is necessary to
identify, contact, or bring legal action against someone who may be violating our Terms Of Service,
or other user policies; to operate our Services properly; or to protect the Company.

Your Choices:

You can visit the Site without providing any Personal Data. If you choose not to provide any
Personal Data, you may not be able to use certain Services.

Data Information and Removal of Your Personal Data: You may, up to two times during any
twelve-month period, request details of personal information which we hold about you. A small fee
may be payable. If you would like a copy of the information we keep on our systems about you,
please visit our site at http://www.sfflowermart.com, email us at badge@sfflowermart.com, write to us at
640 Brannan Street, SF, CA 94107, or call us at 415.392.7944. If you believe that any information
we are holding is incorrect or incomplete, please contact us (through the same means listed above)
as soon as possible. We will promptly correct any information found to be incorrect. You can ask us
at any time to delete the information we hold on you by contacting us, again through the same
means. If we are not able to delete such information because we have a need to keep it (for
example, to comply with a law requiring us to hold such information), we will not use the information
for any purpose other than that specific need. Note that we may need to collect information from you
so that we can verify your identity before taking any such requested action. We will respond to your
request within 45 days.

Changes to Personal Data: Users of the Services are required to inform us about any change
concerning their data, in particular about changes of place of residence, changes of surname, and
changes of email address. We are not liable for the consequences resulting from providing mistaken
data.

Your California Privacy Rights: For California residents only. We may disclose your personal
information to our affiliates or other related third parties for their use in marketing to you. Pursuant to
California’s “Shine the Light Act,” California residents are permitted to request information about the
manner in which we share certain categories of information with third parties for their marketing use.
Please send an email at badge@sfflowermart.com to request a copy of our disclosure pursuant to
California law.

Children

We do not knowingly collect Personal Data from children under the age of 16. If you are under the
age of 16, please do not submit any Personal Data through the Services and delete your account
immediately. We encourage parents and legal guardians to monitor their children’s Internet usage
and to help enforce our Privacy Policy by instructing their children never to provide Personal Data on
the Services without their permission. If you have reason to believe that a child under the age of 16
has provided Personal Data to the Company through the Services, please contact us, and we will
endeavor to delete that information from our databases.

Links to Other Web Sites

This Privacy Policy applies only to the Services. The Services may contain links to other websites
not operated or controlled by the Company (the “Third Party Sites”). The policies and procedures we
described here do not apply to the Third Party Sites. The links from the Services do not imply that
the Company endorses or has reviewed the Third Party Sites. We suggest contacting those sites
directly for information on their privacy policies.

Public Forums

Please remember that any information you may disclose in any public areas of our Site or the
Internet becomes public information. You should exercise caution when deciding to disclose
personal information in these public areas.

Data Security

We take reasonable steps to protect the Personal Data you have provided from loss, misuse, and
unauthorized access, disclosure, alteration, or destruction. However, no Internet or email
transmission is ever fully secure or error free, and we cannot guarantee that our security measures
will prevent third-parties from unlawfully obtaining such information. In particular, email sent to or
from the Services may not be secure. Therefore, you should take special care in deciding what
information you send to us via email. Please keep this in mind when disclosing any Personal Data to
the Company via the Internet.

Changes to Our Privacy Policy

The Services and our business may change from time to time. As a result, at times it may be
necessary for us to make changes to this Privacy Policy. We reserve the right to update or modify
this Privacy Policy at any time and from time to time without prior notice. Please review this policy
periodically, and especially before you provide any Personal Data. This Privacy Policy was last
updated on the date indicated above, and will be updated at least once every twelve months. Your
continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your
agreement with the terms of such revised Privacy Policy.

Contacting Us

Please feel free to contact us if you have any questions about the Company’s Privacy Policy or the
information practices relating to the Services.

You may contact us by sending an email to us addressed to badge@sfflowermart.com