Privacy Policy

Who we are

Tropical Daydreams is an online tropical plant store based in Vancouver, British Columbia, Canada. This policy explains how we handle personal information when you browse our storefront, create an account, use social sign-in, bid in an auction, place an order, or contact us.

Information we collect

• Account information, including your name, email address, account identifier, and authentication status.
• Social sign-in information supplied by Google, Facebook, or Microsoft, including your provider identifier, display name, email address, and verified-email status. We may store the display name as your Tropical Daydreams account profile name. You can change this name in your account, and we do not use it as proof of identity or for authorization. We do not receive your social media password.
• Order and delivery information, including products, prices, shipping address, phone number, order history, and fulfillment status.
• Auction information, including bids, accepted terms versions, winning status, and related order activity.
• Technical and usage information, such as device and browser information, IP-based security signals, pages viewed, and analytics events.
• Messages and information you choose to provide when contacting us.

How we use information

• Create and secure your account, complete social sign-in, and prevent duplicate or unauthorized accounts.
• Process orders, payments, shipping, local pickup, returns, and customer support requests.
• Operate auctions, verify bidders, preserve bid history, and prepare winning orders.
• Allow authorized personnel to review account details, saved addresses, order history, and auction activity when needed for fulfillment, customer support, account administration, fraud prevention, or dispute handling.
• Prevent fraud, abuse, unauthorized access, and inventory conflicts.
• Measure storefront performance and improve reliability and customer experience.
• Meet tax, accounting, legal, and regulatory obligations.

Payments and service providers

Payments are processed by Stripe. Tropical Daydreams does not store full payment card numbers. We use service providers including Amazon Web Services for hosting, identity, storage, and email delivery; Stripe for payments; Google Analytics for storefront measurement; and the social provider you select for authentication. These providers process information under their own terms and privacy policies.

Cookies and analytics

We use necessary browser storage for sign-in, security, carts, and session continuity. We also use Google Analytics to understand visits and page usage. Browser or device controls may limit cookies and similar technologies, although disabling necessary storage can prevent account and checkout features from working correctly.

Sharing and international processing

We do not sell personal information. We share it only with service providers and delivery partners when needed to operate the store, complete a transaction, comply with law, protect customers, or enforce our terms. Some providers may process information outside British Columbia or Canada, where different privacy laws may apply.

Retention and data deletion

We keep personal information only as long as reasonably needed for the purposes above. If you wish to request deletion of your account and personal data (including data authorized via Facebook, Google, or Microsoft sign-in), email tropical.ddreams@gmail.com from your registered email address with the subject Tropical Daydreams Data Deletion Request.

Upon receiving your request, we verify account ownership before deleting your profile, saved delivery addresses, and social login mappings. Requests are acknowledged within 7 business days and processed within 30 days.

We may retain limited transaction, tax, fraud-prevention, dispute, and auction-integrity records when required by law or necessary to protect legitimate interests. Retained records will be restricted and de-identified where practical.

• What is deleted: Customer profile, saved shipping addresses, social login linkages (Facebook/Google/Microsoft), and expired authentication tokens.
• What is retained: Limited historical order receipts, tax invoices, refund records, and dispute audit trails required by legal and financial regulations.
• Facebook settings: Removing Tropical Daydreams from Facebook's Apps and Websites settings revokes future sign-in access, but completing the email request above ensures full deletion of records held by Tropical Daydreams.

Your choices and rights

You may ask to access, correct, or delete your personal information, or withdraw consent where applicable. You can also disconnect Tropical Daydreams from your social provider at any time.

Security and children

We limit administrative access to authorized personnel with a business need and use access controls, encryption in transit, managed authentication, and monitoring intended to protect customer information. No online service can guarantee absolute security. The storefront is not directed to children under 13, and we do not knowingly create accounts for them.

Contact and policy changes

Questions or privacy requests can be sent to tropical.ddreams@gmail.com. We may update this policy as our services or legal obligations change. The effective date above identifies the current version.