Privacy policy
Last updated October 16, 2026
The short version: we collect your email address so we can tell you when a Bloom opens. We don't sell it. You can leave whenever you like, and we'll delete you if you ask.
What we collect
- Your email address, when you type it into one of our sign-up forms.
- Your phone number, only if you offer it — after you've given us your email, we ask whether you'd also like a text when a Bloom opens. It's optional, we don't ask for it first, and skipping it changes nothing. If you give it, we text you once to confirm before we ever text you about a Bloom, and replying STOP ends it for good. We never replace a number already on your record.
- Your size, only if you tell us — S/M or M/L, so we know how many of each to make. It's a question, not a field you have to fill.
- How you got here — if you arrived from an ad or a link with campaign tags in the URL, we store those tags and the referring page. That's how we tell which ads are worth running.
We don't ask for your name, your address, or anything about your running. You don't need an account to join the list.
Our sign-up page sets no tracking cookies. This shop does use cookies that are needed to run the store, remember your cart and complete a checkout.
When you submit the phone form we keep a scrambled, one-way code of your network address for ten minutes so nobody can hammer the form. We don't store the address itself, and the codes are deleted as they age out.
Why we collect it
To email you about Blooms — new ones, and the occasional column. That's the whole purpose. You confirm your address before we ever send you anything, and every email has an unsubscribe link that works immediately. If you gave us a phone number, it's for the same thing and nothing else: once you confirm by text, one hello with our contact card, then two texts a Bloom. Message and data rates apply.
Who else touches it
- Shopify — our shop and email provider. Your address and campaign tags are stored there so we can send you the emails you asked for.
- Cloudflare — runs the small service behind our text sign-up step, and holds our own copy of the subscriber list, so we aren't dependent on any single email provider.
- Meta (Facebook/Instagram), when we advertise. To measure whether our ads actually work, we may send Meta a scrambled (hashed) version of your email — a one-way code, not the address itself — so they can match it to an ad you saw. We do this to judge ad performance, not to let anyone else email you.
We do not sell your information, and we don't share it for anyone else's marketing.
No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Your text-message opt-in and consent are never shared with anyone.
How long we keep it
Until you unsubscribe or ask us to delete it, or until you've been inactive long enough that keeping it stops making sense.
Your choices
- Unsubscribe from any email, using the link at the bottom of it.
- Ask us what we hold about you, ask us to correct it, or ask us to delete it — email hi@dearpeony.com and we'll do it.
- We honor Global Privacy Control signals from your browser as an opt-out of sharing for advertising. You can also use Your Privacy Choices.
Depending on where you live, you may have additional rights over your data. Ask us and we'll honor them — we'd rather do that than argue about which state you're in.
Children
This shop isn't for children under 13, and we don't knowingly collect their information.
Changes
If we change how any of this works, we'll update this page and change the date at the top.
Contact
hi@dearpeony.com
Hightop Brands LLC, d/b/a Dear Peony
7533 S Center View Ct, Suite #6082, West Jordan, UT 84084