Privacy Policy.

The Short Version

We collect only what we need to sell you plants and custom builds, and to deliver good service. We don’t sell your data. We don’t share it with random ad networks. We try to be the boring, trustworthy kind of small business when it comes to your information.

If you ever want to know what we have, change it, or delete it — email us at info@theelectricjungle.com and we’ll handle it.

What We Collect

When you place an order

• Name & email — so we can confirm and update you on your order.
• Mobile number (optional) — so we can reach you about your pickup. We only text it if you opt in to texts (see Text messages).
• Order details — plants/builds ordered, amount, pickup time, notes, and how you’d like us to handle an item that isn’t perfect.
• Signed agreements — for custom build orders only.
• Delivery details (delivery orders only) — your delivery address, mobile number, notes for the driver, delivery status and tracking, and the driver’s drop-off photo.
• Saved card for a pre-order balance (only if you choose “pay half now”) — Stripe saves your card so the rest can be charged at pickup. We keep only Stripe’s reference to it, never the card number, and use it only for that order’s balance.

When you join a waiting list

• Your name, email and/or mobile number and the plant you’re waiting for — used only to tell you it arrived (and, if you haven’t paid yet, to send your pay link).

When you turn on notifications

• If you allow alerts in your browser, we store the push address your browser gives us and the topics you picked (plant drops, sales, coupons, back-in-stock). Turn them off any time and we stop.

When you create an account

• Email, password (stored hashed — never in plain text), tier, and rewards points balance.
• If you sign in with Google or a one-time email magic link instead of a password, we receive your email address (and, from Google, your name and verified-email status) — we never see your Google password.
• Order history tied to your email.
• Email preferences (whether you opted out of marketing) — transactional emails always send regardless.

When you join The Jungle Club (subscription)

• Stripe Customer ID and Subscription ID issued by Stripe.
• Tier (Spark / Surge), billing cycle dates, pause / skip / cancel history.
• Your cycle picks and pickup-slot bookings.

When you buy in the shop

• If you give us a phone number for your receipt, we keep it with that sale. That lets our register recognise the number next time: if it matches your account we can attach the sale and apply your points or member perks, and if you don’t have an account we can see how many visits and how much you’ve spent so we can tell you the points you’d be earning.
• Only shop staff see this, at the register. It is never sold or shared.
• We only text you an account sign-up link if you say yes at the counter, and never if you’ve replied STOP.

When you contact us (Support or Events)

• Name, email, message, and ticket / event-request reference number so we can reply and track follow-ups.
• Phone, event date, location, and headcount — only for event/booking requests where you provide them.

When you use the Plant Advisor (Dwight)

• The text of your messages is sent to Anthropic (Claude API) so Dwight can reply. Conversations aren’t tied to your account by default and are not stored long-term beyond Anthropic’s standard logging.
• We rate-limit by IP to prevent abuse — the IP and a request counter sit briefly in our edge cache.

When you chat with us from an in-store code

• If you scan one of our in-store help codes and start a chat, we store your messages and a chat session ID so we can answer you in real time. The chat isn’t tied to your account unless you share your name or order number in it — don’t send card numbers or passwords through it.

When you subscribe to the newsletter

• Just your email. Unsubscribe any time via the link in every email or from your account’s email preferences.

Live shopping

• When you watch /live we count viewers with a random ID stored in your browser — not your name or account. To stop casual abuse of holds, we also keep a one-way scrambled (hashed) version of your network address with each “Grab it” hold.
• When you buy during a live show, your first name and last initial are shown on the live page and on the stream (“SOLD to Sarah S.”). The rest of your order is handled exactly like any other online order.
• If you’re on our email list, in the Text Club, or turned on Plant Drops notifications, we may send a “we’re live” alert. Texts only go to Text Club members, only between 9am and 8pm Mountain Time, and you can reply STOP any time; every email has a one-click unsubscribe link.

Auctions

• When you bid on an auction we store your account email, each bid (amount and time) and whether you asked for outbid alerts. Your first name and last initial are shown publicly next to your bids; your email is never shown. We use your email (and, if you’re in the Text Club, your phone number) only to tell you you’ve been outbid (if you asked) or that you won, with a link to pay.

Classes, events & pre-registration

• When you sign up or pre-register on our Events page we store your name, email, phone number if you give one, how many people are coming, and (for paid events) your payment status from Stripe. We use this to hold your spot, send your confirmation and tell you when a pre-registered event gets its date and tickets.
• Signing up also adds your email to our list for news about upcoming events and deals. Every one of those emails has a one-click unsubscribe link. If you already unsubscribed, signing up for an event does not undo that.
• Texts are separate: you only join the Text Club if you tick its own box, and texts start only after you reply JOIN. STOP ends them any time.

Giveaways

• When you enter a giveaway we store your name, the email and/or phone number you give, your Instagram handle if you add one, your referral code, your entries (including when you scanned the in-store QR code and any Instagram actions you report), and a one-way scrambled (hashed) version of your network address to stop mass sign-ups. We use this only to run the giveaway, contact the winner and send any thank-you code.
• The winner’s first name and last initial may be shown on the giveaway page and in our announcements.
• We only add you to our email list or the Text Club if you tick the separate “send me deals” box. Texts also need you to reply JOIN, and STOP ends them any time. A thank-you code is texted only to Text Club members; everyone else gets it by email if they gave one.
• Instagram and Meta don’t receive your entry details from us.

What we don’t collect

• Your credit card or bank info — that goes directly to Stripe (PCI-compliant). We never see or store it.
• Your location beyond your billing, pickup or delivery address.
• Browsing behavior across other sites.

How We Use It

• Fulfilling orders — confirming, prepping, scheduling pickups, booking deliveries, sending tracking links, and charging a pre-order balance you authorized.
• Customer support — answering your questions, handling warranty claims.
• Account features — rewards points, order history, tier benefits.
• Occasional updates — new plant drops, build availability (only if you’ve opted in).
• Required record-keeping — sales records, tax compliance.

We don’t use your data to train AI models, sell to data brokers, or pad some marketing list. Promise.

Who We Share It With

We use a small set of trusted services to actually run the business:

• Stripe — payment processing (cards, Apple Pay, Google Pay, Cash App Pay, bank payments, BNPL), subscription billing for The Jungle Club, and securely saving a card when you choose to pay a pre-order balance at pickup. Stripe also provides the Customer Portal where you manage your subscription payment method.
• Uber (Uber Direct) — for delivery orders only: your name, mobile number, delivery address, driver notes and the order’s items and value, so a driver can bring it to you. Uber handles that information under its own privacy policy.
• Google — we use Google Workspace for email and Google Sheets/Apps Script for our order system.
• Cloudflare — serves the site, runs our backend API, and protects against abuse. Cloudflare Stream also delivers our live shopping video on /live; we keep live recordings turned off.
• Meta (Instagram & Facebook) — when you watch our live shows inside Instagram or Facebook, Meta handles that under its own privacy policy. We don’t receive your Instagram or Facebook account details from watching.
• Resend — transactional email delivery (order confirmations, magic-link sign-in, pickup updates).
• Twilio — delivers our text messages (order updates and Text Club deals), only to numbers that opted in, and runs our shop phone line (the phone menu, call forwarding, voicemail recordings and voicemail transcripts). See Text messages and Phone calls.
• Anthropic (Claude) — powers the Plant Advisor (Dwight). Your messages are sent to Anthropic to generate replies; they handle data per their own privacy policy.

That’s the entire list. We don’t sell, rent, or trade your data with anyone else. Ever.

We may disclose information if required by law (court order, subpoena) — but only the minimum required.

How We Protect It

• HTTPS everywhere — all traffic is encrypted in transit.
• Hashed passwords — we never store passwords in readable form.
• Tokenized order tracking — your order links use unique tokens, not predictable IDs.
• Limited admin access — only the owner and authorized staff can view customer records.
• No payment data — we never store card numbers, so they can’t be stolen from us.

No system is bulletproof. If something does go wrong, we’ll notify affected customers within a reasonable timeframe.

Your Rights

You can do any of the following at any time by emailing info@theelectricjungle.com:

• Ask for a copy of everything we have on you.
• Correct or update your information.
• Delete your account and personal data (we keep order records for tax purposes, but personal details get scrubbed).
• Opt out of all marketing emails (one-click unsubscribe in every email).
• Withdraw consent for non-essential data use.

Cookies & Local Storage

We use browser local storage to remember:

• Your shopping cart (so it’s there if you close the tab).
• Your sign-in session (magic-link auth issues a session token; it expires after 30 days).
• Your reservation timer during checkout.
• Your pickup time and contact choices while you check out (cleared once your order is placed).
• Whether you chose guest checkout for the current session.
• On the giveaway page: a private entry key so you can see your entries and referral link when you come back, and the referral code from a friend’s link.
• On the live shopping page: a random viewer ID (used only to count how many people are watching and to keep your “Grab it” hold yours) and your current live hold.

No third-party tracking cookies. No ad cookies. No cross-site fingerprinting.

Email Preferences

Every marketing email has a one-click Unsubscribe link that pulls a per-recipient token; tapping it flips your marketing-email flag off immediately. You can also manage this from your account’s Notifications section.

Transactional emails always send regardless — order confirmations, receipts, pickup updates, payment failures, Jungle Club cycle picks, password resets. These are required to deliver the service you bought.

Kids

Our site isn’t aimed at children under 13, and we don’t knowingly collect their data. If you’re a parent and think your kid signed up, email us — we’ll remove it.

Changes to This Policy

If we update this policy, we’ll bump the “last updated” date at the top. Significant changes will be announced via email for account holders. Continued use of the site after changes means you accept the updated policy.