LEGAL

Privacy Policy

Effective Date: October 8, 2026

At Sirak, maintaining the trust of our online users is of the utmost importance to us. We have developed this Notice of Privacy Practices (our "Privacy Notice") to show our commitment to fair information practices and the protection of our users' privacy, and to explain how we collect, use and share information about our users. This Privacy Notice applies to our company website, sirak.com, owned or operated by Sirak, LLC or its subsidiaries (referred to collectively herein as "Sirak" or "us" or "we") and that have this Privacy Notice posted (collectively, the "Sites").

This Privacy Notice does not apply to any third-party websites that you may be able to access from the Sites, which may have data collection and use practices and policies that differ materially from those described in this Privacy Notice, nor does it apply to any services that may be offered by our business partners, where your personally identifiable information is collected by anyone other than Sirak.

What We Collect

We collect information in three ways: what you send us through a form, what you give us when you apply for or use a trade account, and a small amount of technical information our servers record automatically.

Information You Give Us

The Sites have five forms — a garden inquiry, a custom commission inquiry, a contract sales inquiry, a newsletter signup, and a trade partner application. Depending on which one you use, we collect your name, email address, phone number, firm or company name, professional role, project location, project details such as type, quantity, dimensions, inscription and timeline, how you heard about us, and whatever you choose to write in the message field. Fields that are not marked required may be left blank.

Trade Accounts and Business Documents

If you apply for a trade account, we also collect your firm, website, Instagram handle and profession, and one or more business verification documents that you upload — typically an EIN confirmation letter, a business license, or a resale certificate. These documents contain tax-identifying information about your business. We collect them for a single purpose: to confirm that an applicant is a legitimate trade professional before granting access to trade pricing.

Uploaded documents are held in a private storage location. They are not published, not linked from anywhere on the Sites, and cannot be retrieved by guessing a web address. Sirak staff reviewing an application open them through a signed link that expires ten minutes after it is created.

If your application is approved, we hold the account profile you see in the portal — your name, email address, phone number, and firm — together with the quotes and orders associated with it.

Information Automatically Collected

Our hosting provider records standard server logs for each request — the page requested, the time of the request, the originating IP address, the browser user agent, and the referring page. These logs are kept for a limited period and are used to operate, secure and debug the Sites.

We also use Vercel Web Analytics, a privacy-focused tool from our hosting provider, to count visits to the public pages of the Sites. For each page view it records the page address, the referring site, the time, your approximate location (country, region and city), and your device type, operating system and browser. It sets no cookies and does not store your IP address. Visits are counted using a temporary identifier that is discarded after twenty-four hours, and we see only aggregated totals, never a record of any individual visitor. Pages inside the trade portal and the studio staff area are excluded. On some of our inquiry forms, the same tool also counts when a form is started, when it is submitted, and when it could not be sent, together with the piece being inquired about, the options chosen from the form's menus (for example, the type of commission), and whether the inquiry came from a signed-in trade account. It never records what you type into a form — your name, contact details and message are not sent to it.

To keep our forms from being flooded by automated submissions, we also record a one-way, salted cryptographic hash of the submitting IP address together with which form it was submitted to. The address itself is never written to our database, the hash cannot be turned back into an address, and these records are deleted after twenty-four hours.

We use cookies only where a cookie is strictly necessary for a feature to work. We do not use analytics cookies, advertising cookies, pixel tags or web beacons, and we do not track you across other websites. The visit counting described above works without cookies. Browsing the public Sites — the planters, the gardens, the journal, the contact forms — sets no cookie at all.

The only cookies we set are these:

Authentication cookies, set when you sign in to the trade portal. They are what keep you signed in from one page to the next, and they are cleared when you sign out.
A staff preview cookie, set when a member of the Sirak studio views the portal as a trade partner would see it. It is limited to the portal and expires after thirty minutes.

Because each of these is strictly necessary to deliver a service you have asked us for, we do not show a cookie consent banner. If we ever add a non-essential technology that sets cookies or tracks visitors across sites, we will update this Privacy Notice before doing so, and ask for your consent where the law requires it.

You can remove and reject cookies through your browser settings. Most browsers accept cookies until you change that setting. Rejecting ours will not affect your use of the public Sites, but you will not be able to sign in to the trade portal.

Do Not Track

Because we do not track visitors across third-party websites, there is no cross-site tracking here for a "do not track" signal to switch off. Consistent with our rights under applicable law, the Sites do not otherwise respond to do-not-track requests or other signals sent from a web browser.

Use of Personal Information

Where you have provided us with your personal information, we may use that information in the following ways:

To operate, maintain, and improve our sites, products, and services;
To respond to comments and questions and provide customer service;
To review trade account applications, verify the business credentials submitted with them, and administer trade accounts, quotes and orders;
To send information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages;
To communicate about promotions, upcoming events, and other news about products and services offered by us and our selected partners;
To update the account information we hold about you;
To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity, including limiting automated form submissions;
To provide and deliver products and services in response to our customers' requests.

Sharing of Personal Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not disclose personal information to third parties for their own marketing purposes. Beyond the service providers listed above, we may share personal information as follows:

We may share personal information with your consent, and only for what you have consented to.
We may share personal information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
We may share personal information for legal, protection, and safety purposes.
We may share information to comply with laws.
We may share information to respond to lawful requests and legal processes.
We may share information to protect the rights and property of Sirak, LLC, our agents, customers, and others. This includes enforcing our agreements, policies, and terms of use.
We may share information in an emergency. This includes protecting the safety of our employees and agents, our customers, or any person.
We may share information with those who need it to do work for us.
We may also share aggregated and/or anonymized data with others for their own uses.

Service Providers We Use

We run the Sites with a small number of third-party service providers. They process personal information only on our instructions, only in order to provide their service to us, and not for their own purposes:

Our hosting provider, which serves the Sites and records the server logs described above.
Our database and authentication provider, which stores form submissions, trade account records, and the verification documents uploaded with a trade application.
Our email provider, which delivers the confirmations, notifications and newsletters we send.

We will name any additional provider here before it begins handling personal information on our behalf.

How Long We Keep Information

We keep personal information for as long as it is needed for the purpose it was collected for, and then only as long as required for our legitimate business or legal purposes:

Inquiries sent through our forms are kept as the record of the conversation while it is active and for a reasonable period afterward.
Trade applications and the verification documents submitted with them are kept for as long as the trade account is active, as the record of how that account was approved.
Newsletter subscriptions are kept until you unsubscribe.
The anti-spam records described above are deleted after twenty-four hours.
Server logs are kept by our hosting provider for its standard, limited retention period.

You may ask us to delete information we hold about you at any time, subject to the exceptions described under "Your Legal Rights Over Your Personal Information" below.

Links

Our Sites may include links to third-party websites. We are not responsible for the content or privacy practices of those other sites, which are governed by their own privacy policies and practices.

Notice Concerning Children

The Sites are not specifically directed at or intended for children under the age of 13. Therefore, Sirak does not knowingly collect personal information via the Sites from anyone under 13. Any user that believes that Sirak has in its database the personal information of a child under the age of 13 should contact us at the email address set forth under "Contact Information" below.

Your Legal Rights Over Your Personal Information

Where allowed under local law, you may have the right to submit a request for access to the data we hold about you. Further, Sirak will correct inaccurate or out-of-date information about you at your request or when we become aware of the error. You can request that your data be made available for you to download or other export as well. Finally, you may request that Sirak delete certain data we hold about you, except your data will not be deleted in the following situations:

You have any open or ongoing matter with Sirak's customer service or technical support personnel; or
Retention is required by applicable law or for legal enforcement purposes.

To exercise these rights where allowed under your applicable local law, please contact us by email using the information set forth under "Contact Information" below. Sirak will respond to your request within a reasonable timeframe in accordance with the applicable law.

Your California Privacy Rights

Sirak does not sell personal information and does not share personal information for cross-context behavioral advertising, and has not done so in the preceding twelve months. We do not offer financial incentives in exchange for personal information, and we will not discriminate against you for exercising any privacy right.

If you are a California resident, you may request a list of all third parties to which we have disclosed certain personal information during the preceding year for those third parties' direct marketing purposes. If you are a California resident and want to obtain such a list, please contact us by email using the information set forth under "Contact Information" below. Please ensure that you include the statement "Your California Privacy Rights" in the body of your request, as well as your name, street address, city, state, and zip code.

Information Choices and Changes

Our marketing emails tell you how to "opt-out." If you opt out, we may still send you non-marketing emails. Non-marketing emails include emails about your accounts and our business dealings with you.

You may send requests about personal information to our Contact Information below. You can request to change contact choices, opt-out of our sharing with others, and update your personal information.

As noted above, you can remove and reject cookies from our Sites with your browser settings. Many browsers are set to accept cookies until you change your settings. Rejecting our cookies will not affect your use of the public Sites, but it will prevent you from signing in to the trade portal.

Changes to This Privacy Notice

We may revise this Privacy Notice from time to time — e.g., to keep up with changes in the law, or to reflect changes in how we are doing business — and so you should review this Privacy Notice periodically to make sure you are ok with our current privacy practices.

We will use commercially reasonable efforts to notify our users if we change this Privacy Notice. The Sites will always include our most up-to-date Privacy Notice, and we include an effective date at the top of the Privacy Notice, so you can quickly see when we last updated it.

Contact Information

We welcome your comments or questions about this Privacy Notice.

You may email us at: studio@sirak.com