Privacy Policy

Last updated: August 28, 2026

Fruit Fresh Up (“Fruit Fresh Up”, “we”, “us”) operates the website www.fruitfreshup.com (the “Site”) and sells fresh fruit bouquets, platters and grab-and-go products to customers in the United States. This Privacy Policy explains what information we collect when you visit the Site or place an order, how we use it, who we share it with, and the choices you have. It also serves as our notice at collection under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”).

If you have questions, contact us at info@fruitfreshup.com or by mail at 2928 Walden Ave., Depew, NY 14043.

1. Information We Collect

Information you give us directly

When you place an order, create an account, or contact us, you provide:

Identifiers and contact details: name, company name, email address, phone number, billing address and delivery address.
Order information: the products you buy, delivery date and instructions, order history, and any notes you add to an order.
Payment information: your card details are entered into and processed by our payment processor, Authorize.Net. We do not store full card numbers on our servers. We receive a transaction record and, if you choose to save a payment method, a token that lets us charge that method again at your request.
Contact form submissions: name, company, email, phone and the message you send us through the contact form on the Site.
Account credentials: if you create an account, your username and a hashed password.

Information collected automatically, only with your consent

The Site uses a cookie consent banner. Analytics and advertising cookies and the tools that use them are OFF until you choose to accept them. If you do not accept, the tools described in this section do not load and do not send anything to their providers.

If you accept analytics cookies, Google Analytics 4 collects information about your visit: pages viewed, products viewed and added to the cart, purchases (order value and order number, not your name), approximate location derived from your IP address, browser and device type, and a random identifier stored in a cookie so repeat visits can be counted. Google Signals and cross-device advertising features are turned off for this property. IP addresses are not logged or stored by Google Analytics 4.

If you accept advertising cookies, Google Ads conversion tracking records when a visit that started from one of our Google ads leads to an order or a phone call, and Google may show you a dynamically inserted phone number so calls can be counted. This uses cookies set by Google on our Site’s domain and may share a click identifier with Google. We do not send your name, email address or phone number to Google Ads. We do not use “enhanced conversions”.

Cookies that are strictly necessary for the Site to work, such as the cookies WooCommerce uses to remember your cart and the cookie that records your consent choices, are always set. See our Cookie Policy for the full list, which is generated from a live scan of the Site.

Information from other sources

Google reCAPTCHA protects our contact form from spam. The reCAPTCHA script is loaded on every page of the Site. When a page loads, Google receives your IP address and information about your browser in order to decide whether you are a person. This is covered by Google’s Privacy Policy and Terms of Service. For details, see our reCAPTCHA disclosure. Our web host, WP Engine, keeps standard server logs (IP address, requested page, time, browser) for security and operations.

2. How We Use Information

We use the information above to:

Take, prepare and deliver your orders, and communicate with you about them.
Process payments and prevent fraud.
Answer your questions and contact form messages.
Maintain your account if you create one.
Understand how the Site is used so we can improve it (analytics, only with your consent).
Measure whether our Google advertising results in orders or calls (advertising, only with your consent).
Comply with legal obligations such as tax and accounting rules.

3. Who We Share Information With

We share personal information only with the companies that help us run the business, and only what they need:

Authorize.Net (payment processing).
WP Engine (website hosting and backups).
Google: Google Analytics 4 and Google Ads, only if you accept the relevant cookies, and Google reCAPTCHA on the contact form.
Gravity Forms is the software that runs our contact form; submissions are stored on our own Site, not sent to a third party.
Delivery personnel and, for wholesale accounts, our order and invoicing systems.
Professional advisers, and government authorities where the law requires it.

We do not sell your personal information for money. Accepting advertising cookies allows Google to receive information that may be considered “sharing” for cross-context behavioral advertising under the CCPA; you can decline or withdraw that at any time as described in section 5. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16.

4. How Long We Keep Information

Order and account records: as long as you have an account and for seven years after the last order, to meet tax and accounting requirements.
Contact form submissions: up to two years, then deleted.
Google Analytics event data: two months of user-level retention, the shortest setting Google offers; aggregated reports may be kept longer.
Consent records from the cookie banner: twelve months, as evidence of your choices.

5. Your Choices and Rights

Cookies. You can change or withdraw your cookie choices at any time using the “Cookie settings” link in the Site footer, which reopens the consent banner.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sharing for cross-context behavioral advertising: advertising consent is set to denied even if you accept advertising cookies, so no advertising cookies are set and Google Ads conversion tracking, call tracking and remarketing do not run. Any signal Google’s tag still sends is cookieless and marked as consent denied. Analytics still depends on your banner choice.

Your rights under the CCPA and similar state laws. You may ask us to tell you what personal information we have collected about you, to delete it, to correct it, or to stop sharing it. You will not be treated differently for exercising these rights. To make a request, email info@fruitfreshup.com with “Privacy request” in the subject line, or call 1-716-684-3400. We will confirm your identity by matching the details you give us against our order records, and respond within 45 days. You may use an authorized agent; we will ask for proof that you gave them permission. See also our page Your Privacy Choices, linked in the Site footer.

Marketing email. If we send you marketing email, every message has an unsubscribe link.

6. Security

The Site is served over HTTPS. Payments are handled by Authorize.Net on PCI DSS compliant systems. Access to order data is limited to staff who need it. No system is perfectly secure, and we cannot guarantee against every unauthorized access.

7. Changes to This Policy

We will post any changes on this page and update the date at the top. If a change materially reduces your rights, we will give notice on the Site before it takes effect.