Privacy policy
Phoenix Ebra Inc. · Effective November 2026
This policy explains what information Phoenix Ebra Inc. ("Phoenix Ebra", "we", "us") collects when you visit phoenixebra.com, buy plants, or register for soil testing; how we use it; who we share it with; and the choices and rights you have wherever you live.
Who we are
Phoenix Ebra Inc. is responsible for (the "controller" of) your information. Contact: grow@phoenixebra.com · Phoenix Ebra Inc., Lake City, Florida, USA.
What we collect
- Plant orders: your name, email, phone number, delivery address and what you ordered. Card details go directly to our payment processor, Stripe; we never see or store your full card number.
- Gift certificates: the buyer's name and email, and, if the buyer chooses to email the certificate to someone, the recipient's name and email and the buyer's personal message. We use the recipient's details only to deliver the gift certificate. We keep each certificate's code, amount and remaining balance so it can be used until the balance runs out.
- Soil testing registration: your name, business or farm name (optional), email, phone number, mailing address, whether it's a garden or a farm, and for farms, acreage, crops and crop rotation. We also record whether you confirmed your email and phone, the type of phone line (mobile or landline), and your email and text message choices with the date you made them.
- Crop waitlists: your name, email, ZIP code, whether you're a home gardener, nursery or farm, about how many plants you want (optional), which crops you chose and any vegetables you asked for, and when you confirmed your email. We use this only to email you about those crops.
- Website analytics (only as allowed by your cookie choice): pages you visit, how you got to our site, device and browser type, approximate location (city or region), and actions such as how far you scroll, which links, buttons and questions you click, what you add to your cart, and completing an order. We never send what you type into a form. When you place an order we send Google Analytics your order number, total and order type only, never your name, email, phone or address.
- Advertising (only as allowed by your choice): Google advertising cookies record that your browser visited our site, which pages you viewed, and whether you placed an order. We use this to show our ads to people who have visited our site, on Google and partner sites and apps, and to see which ads lead to orders. We don't give Google your name, email, phone or address for advertising.
- Security information: on our registration and waitlist forms, Google reCAPTCHA collects information about your device and how you use the page to tell people from bots. Our hosting provider keeps short-term technical logs (such as IP address and browser) to run and protect the site.
- Messages you send us, such as emails.
How we use it, and our legal bases
If you are in the EU, EEA, UK or Switzerland, we rely on these legal bases under the GDPR:
- To fill, deliver and support your order and handle refunds: to perform our contract with you.
- To email you about crops you joined the waitlist for: with your consent, which you confirm by clicking the link we email you. You can withdraw it anytime.
- To register you for soil testing, confirm your email and phone, and tell you when to complete your registration and send in your sample: at your request, to take steps before entering a contract, and with your consent for text messages.
- Analytics: with your consent where the law requires it (you can change your choice any time).
- Advertising (showing our ads to people who have visited our site, and measuring which ads lead to orders): with your consent where the law requires it. Elsewhere, until you opt out.
- Security and fraud prevention (reCAPTCHA, phone checks, payment fraud screening): our legitimate interest in keeping the site and our customers safe.
- Tax, accounting and legal records: to meet our legal obligations.
We do not use your information for automated decisions that have legal or similarly significant effects on you.
Who we share it with
We do not sell your personal information for money. We share it with the service providers below, which work for us under contract.
Advertising: if you allow advertising cookies, Google collects information about your visit so we can show you our ads on other sites and apps (remarketing) and measure which ads lead to orders. Some US state laws call this "sharing" for "cross-context behavioral advertising" or "targeted advertising." You can opt out at any time: Your privacy choices.
- Stripe: payments, receipts and fraud prevention (privacy policy).
- Google: Google Analytics; Google Ads, if you allow advertising cookies; reCAPTCHA; and Google Workspace, where we keep order and registration records and send email (privacy policy).
- Twilio: checking whether a phone number is a mobile, sending verification codes and, if you agree, text messages (privacy policy).
- Netlify: website hosting (privacy policy).
We may also disclose information when the law requires it, to protect our rights or safety, or as part of a sale or reorganization of our business. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging consent and phone numbers are never shared with anyone except the providers that deliver our messages.
Cookies and similar technologies
You choose whether we use analytics cookies and advertising cookies. If you are in the EU, EEA, UK or Switzerland, both stay off until you accept. Elsewhere, both are on unless you opt out, and both are off if your browser sends a Global Privacy Control signal. You can change your choice at any time: Your privacy choices.
| Name | Provider | Purpose | Kept for |
|---|---|---|---|
| pe_consent | Phoenix Ebra (browser storage) | Remembers your cookie choice. Necessary. | Until you clear it |
| pe_cart_retail, pe_cart_bulk, pe_checkout | Phoenix Ebra (browser storage) | Remembers your cart and checkout. Necessary. | Until your order is placed or you clear it |
| _ga, _ga_* | Google Analytics | Counts visits and shows which pages help people. Analytics, only with your choice. | Up to 2 years |
| _gcl_au, _gcl_aw | Google Ads | Connects a visit to an ad click, to measure which ads lead to orders. Advertising, only with your choice. | Up to 90 days |
| Google advertising cookies (on Google's own sites, such as doubleclick.net) | Shows our ads to people who have visited our site, and limits how often you see them. Advertising, only with your choice. | Up to 13 months | |
| __stripe_mid, __stripe_sid | Stripe (checkout pages) | Secure payment and fraud prevention. Necessary. | Up to 1 year |
| YouTube (privacy-enhanced mode) | YouTube / Google (homepage video) | The video's preview image loads from YouTube. The video itself loads only if you press play, from youtube-nocookie.com, which doesn't set YouTube cookies until you play it. Once it plays, YouTube may store data to play the video and prevent abuse. | Set by YouTube; see Google's privacy policy |
| pe_video_variant | Phoenix Ebra (browser storage) | Remembers which homepage video caption you saw, so we can tell which wording works best. | Until you clear it |
| _GRECAPTCHA | Google reCAPTCHA (soil testing page) | Tells people from bots. Necessary for security. | Up to 6 months |
Third-party vendors, including Google, use cookies to show ads based on your past visits to our website. You can opt out of personalized ads from Google at Google's Ad Settings, and from many other ad companies at aboutads.info. You can also block or delete cookies in your browser settings, or use Google's Analytics opt-out add-on.
Text messages
If you check the text message box when you register for soil testing, Phoenix Ebra will send you text messages about your soil testing registration, including when to complete your registration and send in your sample. Message frequency varies (usually a few messages per season). Message and data rates may apply. Reply STOP to cancel at any time, or HELP for help. You can also email grow@phoenixebra.com. Consent to texts is not a condition of any purchase. Carriers are not liable for delayed or undelivered messages. We also send a one-time verification code by text to confirm your mobile number when you register.
How long we keep it
- Orders: up to 7 years, for tax and accounting records.
- Soil testing registrations: until testing opens and you complete or cancel your registration, or until you ask us to delete it. We periodically remove registrations that were never confirmed.
- Crop waitlists: until the crop is available and we've told you, or until you unsubscribe. We remove sign-ups that were never confirmed.
- Analytics: up to 14 months in Google Analytics.
- Advertising lists: the visitor lists we use for advertising keep people for up to 90 days after their last visit, then they drop off.
- Security logs: for a short period, typically 30 days or less.
International transfers
We are based in the United States, and our service providers process information in the United States and other countries. If you are outside the US, your information is transferred to the US. Where the law requires, these transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework (and its UK and Swiss extensions) used by our providers.
Security
We use encryption in transit (HTTPS), payment processing by a PCI-certified provider, limited access to records, and verification and anti-bot checks. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.
Your rights
Wherever you live, you can ask us to see, correct or delete your information, or to stop texts or emails. Email grow@phoenixebra.com. We will verify your request (usually by confirming from the email or phone number we have on file) and respond within the time the law requires, normally within 30 days (45 days in US states). We will not discriminate against you for using your rights. Some information must be kept for legal reasons, such as tax records.
EU, EEA, UK and Switzerland
You have the right to access, correct, delete, restrict or object to our use of your information, to data portability, and to withdraw consent at any time (this does not affect earlier use). You can complain to your local data protection authority, or in the UK to the Information Commissioner's Office (ico.org.uk).
California and other US states
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws have the right to know what personal information we collect and how we use it, to access, correct and delete it, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information for money. Unless you opt out, we allow Google to use advertising cookies to show you our ads (targeted advertising), which some state laws treat as "sharing." To opt out, use Your privacy choices or turn on Global Privacy Control in your browser. We honor Global Privacy Control as an opt-out of analytics and targeted advertising. We do not use sensitive personal information to infer characteristics about you. You may use an authorized agent to make a request. If we deny your request, you can appeal by replying to our response; if you disagree with the outcome, you may contact your state attorney general. The categories of information we collected in the last 12 months are listed under "What we collect" above, from the sources described there (you, your device, and our service providers), for the purposes listed under "How we use it".
Canada, Brazil, Australia and other countries
You have the rights your local law provides, such as access, correction, deletion and withdrawing consent. Contact us at the address above and we will help.
Children
Our site is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
We will update this page when our practices change and change the effective date above. For significant changes, we will notify registered customers by email.
Contact
Phoenix Ebra Inc. · Lake City, Florida, USA · grow@phoenixebra.com