PRIVACY POLICY

Last updated: August 28, 2026

Mallory Joyce Floral Design ("Mallory Joyce Design," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, submit an inquiry, subscribe to our emails, communicate with us, or otherwise interact with our services.

Our website is hosted on Squarespace, and email subscriptions are managed through Substack. By using this website, you acknowledge the practices described in this Privacy Policy.

INFORMATION WE COLLECT

Information you provide to us may include:

• Your name, email address, telephone number, and other contact information.

• Wedding, event, or project information, including dates, locations, venues, budgets, design preferences, and details you include in an inquiry.

• Information you send through contact or inquiry forms, email, or other communications.

• Your email address and subscription preferences when you choose to join our mailing list.

• Any other information you voluntarily choose to provide.

When you visit our website, Squarespace and its service providers may also automatically collect technical and usage information, such as your IP address, browser and device type, operating system, pages viewed, referring website, approximate location, and information collected through cookies or similar technologies.

HOW WE USE YOUR INFORMATION

We may use personal information to:

• Respond to inquiries and communicate with prospective and current clients.

• Provide, manage, and improve our floral design, wedding, event, editorial, residential, and hospitality services.

• Prepare proposals, estimates, contracts, schedules, and other project-related materials.

• Understand how visitors use our website and improve its content, performance, and functionality.

• Send newsletters, studio updates, inspiration, or marketing communications when you have chosen to receive them.

• Maintain the security and integrity of our website and business.

• Comply with legal obligations and protect our rights, property, clients, and business.

We will not use personal information for materially different purposes without providing appropriate notice where required by law.

SQUARESPACE, COOKIES, AND WEBSITE ANALYTICS

Our website is hosted by Squarespace. Squarespace and its service providers may use cookies and similar technologies that are necessary for the website to function and may collect information that helps us understand website traffic, performance, and visitor interactions.

Depending on the features enabled on our website, these technologies may collect browser and device information, IP address, website activity, and referring-page information. Where required by applicable law, visitors will be given choices regarding non-essential cookies. You may also control certain cookies through your browser settings, although disabling cookies may affect some website functionality.

For more information about Squarespace's privacy practices, please review the Squarespace Privacy Policy at squarespace.com/privacy.

EMAIL SUBSCRIPTIONS AND SUBSTACK

We use Substack to manage our email list and distribute newsletters and other communications. If you subscribe, information such as your email address and subscription activity will be provided to and processed by Substack in accordance with its own privacy practices.

You may unsubscribe at any time by using the unsubscribe link included in our emails. For more information about Substack's privacy practices, please review the Substack Privacy Policy at substack.com/privacy.

Even if you unsubscribe from marketing communications, we may continue to send non-promotional communications related to an inquiry, contract, project, transaction, or existing client relationship.

HOW WE SHARE INFORMATION

We do not sell your personal information for monetary compensation.

We may share personal information with trusted service providers that help us operate our website and business. These may include Squarespace, Substack, payment processors, client-management or scheduling systems, professional advisers, and other vendors that support our services.

We may also disclose information where reasonably necessary to comply with applicable law or legal process; protect or enforce our rights; protect the safety, rights, or property of our clients, visitors, or others; investigate fraud or security concerns; or facilitate a merger, acquisition, restructuring, sale, or other transfer involving all or part of our business.

DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining appropriate business and financial records, resolving disputes, enforcing agreements, and complying with legal obligations. Retention periods may vary depending on the nature of the information and our relationship with you.

DATA SECURITY

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no website, electronic transmission, or storage system can be guaranteed to be completely secure, and we cannot guarantee the absolute security of information transmitted to or stored by us.

THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, social media platforms, publications, vendors, or other external services. We are not responsible for the privacy, security, or content practices of third parties. We encourage you to review their privacy policies before providing personal information.

YOUR PRIVACY RIGHTS

Depending on where you reside and which privacy laws apply, you may have certain rights regarding your personal information. These may include the right to:

• Request access to personal information we maintain about you.

• Request correction of inaccurate personal information.

• Request deletion of certain personal information.

• Request information about how your personal information is used or disclosed.

• Withdraw consent where processing is based on consent.

• Opt out of marketing communications.

• Opt out of certain uses or disclosures of personal information where required by law.

• Obtain a portable copy of certain personal information where applicable.

• Appeal certain decisions concerning a privacy request where applicable.

These rights are subject to applicable legal exceptions and may differ depending on your jurisdiction. To submit a privacy request, please contact us using the information below. We may need to verify your identity before fulfilling certain requests. We will not unlawfully discriminate against you for exercising an applicable privacy right.

CALIFORNIA RESIDENTS

California residents may have additional rights under California privacy laws where those laws apply to our business. These may include rights to know about, access, correct, or delete certain personal information and, where applicable, to opt out of the sale or sharing of personal information or certain uses of sensitive personal information.

Mallory Joyce Floral Design does not sell personal information for monetary compensation. If our data practices constitute "sharing" or another regulated activity under applicable California law, we will provide any additional notices and opt-out mechanisms required by law.

VISITORS FROM THE EEA, UNITED KINGDOM, AND OTHER JURISDICTIONS

If applicable privacy law requires a lawful basis for processing personal information, we process information only where we have an appropriate basis to do so. Depending on the circumstances, this may include your consent; taking steps at your request before entering into a contract; performing a contract with you; complying with a legal obligation; or pursuing legitimate business interests where those interests are not overridden by your rights and interests.

Where applicable, you may also have rights to object to or restrict certain processing and to lodge a complaint with the appropriate data protection authority.

CHILDREN'S PRIVACY

Our website and services are intended for adults and are not directed toward children under the age of 13. We do not knowingly collect personal information online from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS

Some browsers and devices provide privacy controls or signals concerning tracking or the use of personal information. Where applicable law requires us to recognize a legally valid opt-out preference signal, we will process that signal in accordance with applicable law.

INTERNATIONAL DATA TRANSFERS

Our website and business are operated from the United States. If you access our website from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where our service providers operate. Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, website, technology, services, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

CONTACT US

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or have concerns about how your information is handled, please contact:

Mallory Joyce Floral Design
Charlottesville, Virginia
Email: mallory@malloryjoyce.com
Website: www.malloryjoyce.com