Privacy Policy

Effective Date: July 8, 2026

Version: 1.0

Jurisdiction: State of Colorado, United States

Our Commitment to Your Privacy. Leah’s All Occasion Baskets, LLC (“Company,” “we,” “us,” or “our”) is a Colorado limited liability company committed to protecting the privacy and security of our customers’ personal information. We recognize that you trust us with your personal data, and we take that responsibility seriously.This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the rights you have with respect to your personal data. It applies to all interactions with us, including visits to our website, online orders, phone orders, mail orders, email communications, and text message (SMS) communications.By using our website or placing an order through any channel, you acknowledge that you have read and understood this Privacy Policy.

1. INFORMATION WE COLLECT

We collect personal information in several ways depending on how you interact with us. The categories of information we collect are described below.

1.1 Information You Provide Directly

When you place an order, create an account, contact us, or interact with us in any way, you may provide us with the following types of personal information:

Identity Information: Full legal name.
Contact Information: Billing address, shipping address, telephone number, and email address.
Order Information: Order details, gift messages, personalization requests, and special delivery instructions.
Payment Information: Credit or debit card details, billing address, and other payment credentials. Please note: full payment card numbers and sensitive authentication data are processed directly by our third-party payment processor and are not stored by Leah’s All Occasion Baskets, LLC on our systems. We receive only limited, tokenized transaction data.
Communications: Information you provide when contacting us via email, telephone, mail, or through an online contact form, including the content of your messages.

1.2 Information Collected Automatically

When you visit our website, certain information may be collected automatically through cookies, log files, and similar tracking technologies, including:

Device and Technical Information: IP address, browser type and version, operating system, and device type.
Usage Information: Pages visited, time spent on pages, links clicked, referring URL, and navigation paths through our website.
Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar tools. Please refer to Section 7 of this Policy for full details on our use of cookies.

1.3 Information Received from Third Parties

We may receive limited personal information from the following categories of third parties in connection with your transactions or use of our services:

Payment Processors: We receive transaction confirmation and limited payment data from our third-party payment processor (processor information available upon request).
Shipping Carriers: We receive delivery confirmation data, including delivery timestamps and tracking information, from our shipping carriers.
Analytics Providers: We receive aggregated and anonymized website usage data from analytics service providers to help us understand how customers use our website.

2. HOW WE USE YOUR INFORMATION

We use the personal information we collect for the following purposes:

Order Fulfillment: To process, fulfill, and ship your orders, and to communicate with you regarding your order status.
Transactional Communications: To send order confirmations, shipping notifications, delivery updates, and other communications directly related to your transactions.
Customer Service: To respond to your inquiries, resolve complaints, and provide support.
Marketing and Promotional Communications: To send you marketing emails, newsletters, and promotional offers, but only where you have provided your consent to receive such communications. See Section 5 for details.
Text Message (SMS) Communications: To send you order-related and promotional text messages, but only where you have provided explicit written consent as required by the Telephone Consumer Protection Act (TCPA). See Section 6 for details.
Website Improvement: To analyze usage trends, improve website functionality, enhance user experience, and develop new features and services.
Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activity.
Legal Compliance: To comply with applicable federal and Colorado state laws and regulations, including tax reporting requirements, data protection obligations, and law enforcement requests.
Business Operations: To maintain our business records, manage our customer relationships, and operate our business effectively.

We will not use your personal information for purposes that are materially different from those described in this Policy without providing you with prior notice and, where required, obtaining your consent.

3. LEGAL BASIS FOR PROCESSING

We process your personal information on the following legal bases, consistent with applicable Colorado law and general data protection principles:

Legal Basis	Examples of Processing Activities
Contract Performance	Processing your order, arranging shipping, sending order confirmations and transactional communications necessary to fulfill your purchase.
Legitimate Interest	Fraud prevention, website security, improving our services and website functionality, maintaining business records, and managing customer relationships.
Consent	Sending marketing and promotional emails; sending text message (SMS) communications for marketing or promotional purposes; use of non-essential cookies and tracking technologies.
Legal Obligation	Maintaining tax and financial records as required by Colorado and federal law; responding to lawful requests from law enforcement or regulatory authorities; complying with Federal Trade Commission (FTC) rules and regulations.

4. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

We may share your personal information with the following categories of third parties solely to the extent necessary to operate our business and provide services to you:

Payment Processors: We share necessary payment and order information with our third-party payment processor (processor information available upon request) to facilitate secure payment transactions. The payment processor’s handling of your data is governed by its own privacy policy.
Shipping Carriers: We share your name, shipping address, and order details with our shipping carriers to arrange delivery of your order.
Email and SMS Marketing Platforms: If you have opted in to receive marketing emails or text messages, we may share your contact information with our email and SMS marketing service providers solely for the purpose of delivering those communications.
Analytics Providers: We share aggregated and, where possible, non-identifiable usage data with analytics service providers to help us understand website traffic and user behavior.
Legal and Regulatory Authorities: We may disclose personal information to law enforcement agencies, courts, regulatory bodies, or other governmental authorities when required to do so by law, subpoena, court order, or other lawful process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
Business Successors: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our business assets, personal information may be transferred to the successor entity, subject to the same privacy commitments described in this Policy.

All third-party service providers with whom we share personal information are contractually obligated to handle such information in a manner consistent with this Policy and applicable law, and to use it only for the specific purposes for which it was shared.

5. EMAIL MARKETING AND COMMUNICATIONS

Opt-In Requirement. We send marketing, promotional, and newsletter emails only to customers who have affirmatively opted in to receive such communications. We will not send unsolicited commercial email.

Unsubscribing. You may opt out of receiving marketing emails at any time by:

Clicking the “Unsubscribe” link included in the footer of any marketing email we send; or
Contacting us directly at info@leahsalloccasionbaskets.com and requesting to be removed from our marketing list.

Transactional Emails. Please note that even if you unsubscribe from marketing emails, you will continue to receive transactional emails related to your orders, such as order confirmations, shipping notifications, and customer service responses. These communications are necessary for the performance of your purchase contract and cannot be opted out of while you have active or pending orders.

CAN-SPAM Act Compliance. All marketing emails we send comply with the CAN-SPAM Act of 2003. Specifically, all marketing emails will:

Clearly identify the sender as Leah’s All Occasion Baskets, LLC;
Include a clear and conspicuous unsubscribe mechanism;
Not use deceptive subject lines or headers.

We will honor opt-out requests within ten (10) business days as required by the CAN-SPAM Act.

6. TEXT MESSAGE (SMS) COMMUNICATIONS – TCPA COMPLIANCE

IMPORTANT NOTICE REGARDING TEXT MESSAGES: Consent to receive text messages is not a condition of purchase. You may opt out of text messages at any time without affecting your ability to place orders with us.

6.1 Consent Requirement

Leah’s All Occasion Baskets, LLC sends text messages (SMS) only to individuals who have provided express written consent as required under the Telephone Consumer Protection Act, 47 U.S.C. § 227 et seq. (“TCPA”) and applicable Federal Communications Commission (FCC) regulations.

By providing your mobile telephone number and affirmatively checking the opt-in consent checkbox at checkout, on a sign-up form, or through another designated consent mechanism, you expressly consent to receive text messages from Leah’s All Occasion Baskets, LLC for the following purposes:

Order confirmations and order status updates;
Shipping notifications and delivery updates;
Promotional and marketing offers; and
Customer service follow-up communications.

6.2 Message Frequency and Rates

Message Frequency: Message frequency varies. You may receive up to 5 messages per month.
Message and Data Rates: Standard message and data rates may apply depending on your mobile carrier and service plan.

6.3 Opt-Out Instructions

You may opt out of receiving text messages at any time by replying STOP to any text message sent by us. Upon receipt of your STOP request, you will receive one (1) final confirmation text message acknowledging your opt-out, and no further marketing or promotional text messages will be sent to your mobile number. You may, however, continue to receive transactional text messages if you have an active or pending order.

6.4 Help and Support

For assistance with our text messaging program, reply HELP to any text message, or contact us at:

Email: info@leahsalloccasionbaskets.com
Phone: (719) 280-2341

6.5 No Autodialed or Prerecorded Marketing Calls

We do not initiate autodialed or prerecorded voice calls to customers for marketing purposes without obtaining separate, specific, written consent for such calls as required by the TCPA.

6.6 Record Retention

We maintain records of all TCPA consents, including the date, time, method, and content of the consent obtained, for a minimum period required by applicable law, and for as long as necessary to demonstrate compliance with TCPA requirements.

7. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to provide functionality, analyze usage, and support certain services. A “cookie” is a small data file stored on your browser or device when you visit a website.

7.1 How We Use Cookies

We use cookies and tracking technologies for the following purposes:

To remember your shopping cart contents and site preferences between sessions;
To analyze website traffic, user behavior, and usage trends;
To enable secure payment processing through our third-party payment processor; and
To support third-party analytics tools.

7.2 Types of Cookies Used

Cookie Type	Purpose	Consent Required?
Essential Cookies	Required for core website functionality, including shopping cart operation, checkout process, and security features. These cookies cannot be disabled without impairing site functionality.	No (Necessary for service)
Analytics Cookies	Collect information about how visitors use our website, including pages visited and time spent. This data is used in aggregate form to improve our website.	Yes
Marketing Cookies	Used to track visitors across websites for the purpose of delivering targeted advertising, where applicable.	Yes

7.3 Managing Cookies

You may disable or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may impair the functionality of our website, including your ability to add items to your shopping cart or complete the checkout process. Instructions for managing cookies can be found in your browser’s help documentation.

7.4 Do Not Track

We honor Do Not Track (DNT) signals transmitted by your web browser where technically feasible. When DNT is enabled, we will not deploy non-essential tracking technologies during your visit.

7.5 Cookie Consent Tool

No applicable cookie tool at the time of this policy.

8. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as described in this Policy, and as required by applicable law. Our general retention practices are as follows:

Order and Transaction Records: Retained for as long as necessary to fulfill your order and for a reasonable period thereafter to handle returns, refunds, disputes, and customer service inquiries.
Tax and Financial Records: Retained for a minimum of 10 years as required by Colorado state law and applicable federal tax regulations.
Marketing Consent Records: Records of your marketing opt-in consent are retained for as long as you remain opted in, plus 2 additional years following your opt-out, to demonstrate compliance with applicable law.
TCPA Consent Records: Retained for as long as required by applicable FCC regulations and applicable law, and for a minimum period sufficient to demonstrate compliance in the event of a dispute.
Analytics and Usage Data: Aggregated and anonymized usage data may be retained indefinitely for business analytics purposes.

When your personal information is no longer required for its original purpose and there is no legal obligation to retain it, we will securely delete or destroy it using commercially reasonable methods.

You may request deletion of your personal data at any time in accordance with Section 9 below, subject to applicable legal retention requirements that may prevent us from deleting certain data.

9. COLORADO PRIVACY ACT (CPA) – YOUR RIGHTS

If you are a resident of Colorado, the Colorado Privacy Act, C.R.S. § 6-1-1301 et seq. (effective July 1, 2023), provides you with the following rights with respect to your personal data:

9.1 Right to Know and Access

You have the right to confirm whether we are processing your personal data and to access a copy of the personal data we hold about you, in a portable and, to the extent technically feasible, readily usable format.

9.2 Right to Correct

You have the right to request that we correct inaccuracies in your personal data, taking into account the nature of the data and the purposes for which it is processed.

9.3 Right to Delete

You have the right to request that we delete personal data that we have collected from or about you. Please note that we may be required to retain certain personal data to comply with legal obligations, and deletion requests will be honored subject to such limitations.

9.4 Right to Opt Out

You have the right to opt out of:

The sale of your personal data (note: we do not sell your personal data);
Targeted advertising based on your personal data; and
Certain types of profiling that produce legal or similarly significant effects.

9.5 Right to Data Portability

You have the right to obtain your personal data in a portable, readily usable format that allows you to transmit the data to another entity where technically feasible.

9.6 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us using the following contact information:

Email: info@leahsalloccasionbaskets.com
Phone: (719) 280-2341

We will respond to your verified request within forty-five (45) days of receipt, as required by the Colorado Privacy Act. If we require additional time (up to an additional forty-five (45) days), we will notify you of the extension and the reason for the delay within the initial forty-five-day period.

9.7 Right to Appeal

If we decline to take action on your privacy rights request, you have the right to appeal our decision. To submit an appeal, please contact us in writing at the address provided in Section 15. We will respond to your appeal within forty-five (45) days as required by the CPA. If your appeal is denied, you may submit a complaint to the Colorado Attorney General.

9.8 Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights under the Colorado Privacy Act or any other applicable law. You will not be denied goods or services, charged different prices, or provided a different level of service quality as a result of exercising your rights under this Policy.

10. CALIFORNIA RESIDENTS – CCPA/CPRA NOTICE

If you are a resident of the State of California, you may have additional rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), including:

Right to Know: The right to know what personal information we collect, use, disclose, and sell about you.
Right to Delete: The right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct: The right to request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to certain permitted purposes.
Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.

We do not sell or share personal information as those terms are defined under California law.

To exercise your California privacy rights, please contact us at: info@leahsalloccasionbaskets.com. We will respond to verified requests within the timeframes required by California law (generally forty-five (45) days, with up to a ninety (90)-day extension where necessary).

11. CHILDREN’S PRIVACY

Our website and services are intended for use by adults and are not directed at children under the age of thirteen (13). We do not knowingly collect, use, or disclose personal information from children under the age of thirteen (13).

If we discover that we have inadvertently collected personal information from a child under the age of thirteen (13) without verifiable parental consent, we will take prompt steps to delete such information from our records in accordance with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If you are a parent or legal guardian and you believe that your child has provided personal information to us without your consent, please contact us immediately at: info@leahsalloccasionbaskets.com.

12. DATA SECURITY

We implement commercially reasonable and industry-standard administrative, technical, and physical safeguards designed to protect the personal information we collect and maintain from unauthorized access, use, disclosure, alteration, and destruction. These measures include, but are not limited to:

Encryption of payment data and sensitive personal information transmitted over the internet using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology;
Access controls limiting access to personal information to employees and service providers who have a legitimate business need for such access;
Periodic review of our information collection, storage, and processing practices; and
Contractual data protection requirements imposed on all third-party service providers who process personal data on our behalf.

Limitation of Security Guarantees. No method of data transmission over the internet or method of electronic storage is one hundred percent (100%) secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Breach Notification. In the event of a security breach that compromises the confidentiality, integrity, or availability of your personal information, we will notify affected customers as required by the Colorado Security Breach Notification Law, C.R.S. § 6-1-716, within the timeframes specified by law. Notice will be provided to you via email (if you have provided your email address) and, where required, to the Colorado Attorney General and applicable regulatory authorities.

13. THIRD-PARTY LINKS

Our website may contain hyperlinks to websites operated by third parties, including our shipping carriers, payment processors, or other business partners. These links are provided for your convenience and informational purposes only. We do not control, operate, or endorse any third-party website, and we are not responsible for the privacy practices, content, or data security of those sites.

We encourage you to review the privacy policy of every website you visit before providing any personal information. This Privacy Policy applies solely to information collected by Leah’s All Occasion Baskets, LLC through our own website and channels.

14. CHANGES TO THIS POLICY

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, applicable law, or regulatory requirements. When we make changes, we will:

Post the updated Privacy Policy on our website with a revised “Effective Date” at the top of the document;
Update the version number accordingly; and
Where the changes are material, notify customers who have provided their email address by sending a notice to that email address, or by posting a prominent notice on our website homepage prior to the change becoming effective.

Your continued use of our website or placement of an order following the posting of any changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should discontinue use of our website and services.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

15. HOW TO CONTACT US – PRIVACY REQUESTS

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights described in this Policy, please contact us using the information below:

Contact Method	Details
Data Privacy Contact	Leah Ward
Email	info@leahsalloccasionbaskets.com
Phone	(719) 280-2341
TCPA Opt-Out (Text Messages)	Reply STOP to any text message, or contact info@leahsalloccasionbaskets.com
Email Marketing Opt-Out	Click “Unsubscribe” in any marketing email, or contact info@leahsalloccasionbaskets.com
Colorado CPA Requests	Submit your request via email or mail to the contacts above. We will respond within 45 days.

We are committed to addressing your privacy concerns promptly and professionally. All requests will be acknowledged and processed in accordance with applicable law.

ACKNOWLEDGMENT

By using our website, placing an order, or interacting with us through any channel described in this Policy, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy, including our data collection, use, and sharing practices.

This Privacy Policy does not constitute a contract and does not create any legal rights beyond those required by applicable law. This document is intended for informational purposes and to disclose our data practices in a clear and transparent manner.

Last Reviewed: July 8, 2026

Leah’s All Occasion Baskets, LLC is a limited liability company organized under the laws of the State of Colorado.