Privacy policy
Last updated November 13, 2026
The short version
- We collect only what we need to take your order, get it to you, and plan what to grow.
- We never see or store your card number. You pay on Stripe's secure page.
- We don't sell your information, and we don't use advertising or tracking cookies.
- You can ask for a copy of your information, a correction, or deletion at any time, and you can say no to emails.
Who we are
Naglee Park Microgreens is a small local business in San Jose, California. We sell living trays of microgreens for pickup. Questions about this policy or your information: the email address on your order confirmation.
What we collect, and why
| What | Why |
|---|---|
| Your order: name, email, phone (optional), a note (optional), what you ordered, and your pickup place and time | To prepare and hand over your order, email your confirmation, and contact you about pickup if we have to. |
| Payment details | You enter your card on Stripe's page, not ours. We receive confirmation that you paid, the amount, and a receipt link. Stripe also gets your email so it can send a receipt. |
| “I want more” requests: how many you wanted, your email (optional), a note (optional), and whether you want an email when it's back | To decide how much to plant next. If you ask, we email you once when it's back. |
| If you create an account: your name, your email (or Google sign-in), your past orders, and your email preferences | To show your orders, apply offers, and send the emails you chose. |
| Technical information: a scrambled (hashed) version of your internet address, and a random browser id | To stop one visitor from tying up our stock or sending us the same request over and over. Our server logs are kept free of personal information. |
We don't collect your location, your contacts, or anything from social media, and we don't build profiles of what you browse.
Cookies
We only use cookies the shop needs to work. We don't use advertising, analytics, or tracking cookies.
| Cookie | What it does | How long |
|---|---|---|
ng_cart | Remembers what is in your cart. | 7 days |
ng_browser | A random id with no personal information. It keeps us from counting one person twice and limits repeat requests. | 30 days |
| Sign-in cookie | Keeps you signed in, only if you sign in to an account. | Until you sign out or it expires |
Do Not Track: because we don't track you across other websites, we treat every visitor the same whether or not your browser sends a Do Not Track signal.
Who else sees your information
Only the people and services that help us run the shop:
- Stripe takes your payment and sends receipts.
- Resend delivers the emails we send you.
- Google Cloud hosts our website and database.
- Our staff can see orders and requests, only to run the shop.
These services may only use your information to do their job for us. We share information if the law requires it, and we will never sell it or share it for advertising.
How long we keep it
| Information | How long |
|---|---|
| Order records (name, email, what you bought, and the amount) | 7 years from the order. Tax and accounting rules require us to keep sales records, and we need them for refunds and disputes. After that they are deleted. |
| Phone number and order note | 90 days after your pickup, then deleted. We only need them to arrange pickup. |
| “I want more” email and note | Up to 90 days, then deleted. We keep only the product and quantity, which say nothing about you. |
| Random browser id and scrambled internet address | 7 days at most, then deleted. |
| Account information | Until you delete your account, or after about 3 years without a sign-in. |
| Staff sign-in records (staff only) | 2 years. The internet address in them is deleted after 90 days. |
| Website logs | About 30 days. They are kept free of personal information. |
| Backups | Deleted information can remain in our backups for up to 7 days. |
Stripe and Resend keep their own records under their own policies.
Your choices and rights
Whoever you are, you can ask us to:
- Send you a copy of the information we hold about you.
- Correct anything that's wrong.
- Delete your information. We'll remove it, except order records we are legally required to keep (we'll remove everything not needed for that, like your phone number and notes).
- Stop emails that aren't about an order. Every such email has an unsubscribe link, and you can also just ask.
Email the email address on your order confirmation from the address you ordered with. We'll reply within 30 days (45 at the most) and may ask you to confirm it's you before we share or delete anything. We won't treat you differently for asking. If you're in California these are rights you have by law, and we offer them to everyone.
Emails
We always email you about your order. We only send other emails, such as offers, if you said yes, and you can change your mind at any time.
Your order link
Your confirmation email has a link to your order page. Anyone with that link can see what you ordered and where you're picking it up (but not your name, email, or phone number), so please don't share it publicly.
How we protect it
The whole site uses an encrypted connection. Payments never touch our servers. Only the people who run the shop can see orders, and we keep personal information out of our logs. No system is perfect, but we work to protect your information, and we'll tell you promptly if something happens that puts it at risk.
Children
Our shop is for adults. We don't knowingly collect information from children under 16. If you think we have some, tell us and we'll delete it.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and its date. For a significant change we'll also email people who have ordered from us.