Privacy Policy

Rose and Roasted LLC (“Rose and Roasted,” “Company,” “we,” “us,” or “our”) is committed to protecting the privacy of our clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, contact us, or engage our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

1. Information We Collect

1.1 Information You Provide Directly

When you submit an inquiry, book our services, or communicate with us, we may collect:

• Full name
• Email address
• Phone number (including for SMS communications)
• Event type, date, location, and guest count
• Aesthetic and styling preferences
• Special requests, dietary requirements, or other event details
• Payment information (processed by our third-party payment processor; we do not store card data)
• Any other information you voluntarily provide

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and referring URLs
• Cookie identifiers and session data

1.3 Information From Third Parties

We may receive information about you from referral partners, event venues, or social media platforms if you interact with our content or are referred to us through those channels.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Process bookings, confirmations, and event logistics
• Send transactional communications (booking confirmations, reminders, invoices)
• Send promotional and marketing communications via email and SMS (with your consent)
• Improve our website, services, and client experience
• Maintain our customer relationship management (CRM) system
• Comply with applicable laws and legal obligations
• Enforce our Terms of Service and protect our legal rights
• Prevent fraud and maintain the security of our platform

3. SMS / Text Message Communications (10DLC Compliance)

3.1 Program Description

Rose and Roasted LLC operates an SMS messaging program to send booking confirmations, event reminders, promotional offers, and service updates to clients and prospective clients who have opted in to receive such communications.

3.2 Opt-In

You opt in to our SMS program by (a) submitting your phone number through our website inquiry or booking form and checking the SMS consent checkbox, (b) texting a designated keyword to our business number, or (c) providing express written consent through another channel. Your opt-in constitutes your agreement to receive recurring automated marketing text messages from Rose and Roasted LLC at the phone number provided.

3.3 Message Frequency

Message frequency varies based on your interactions with us and your event timeline. You may receive up to 8 messages per month. Transactional messages (booking confirmations, event reminders) may be sent outside this cadence as needed.

3.4 Message and Data Rates

Message and data rates may apply. Charges are assessed by your mobile carrier and are subject to your wireless plan. Rose and Roasted LLC is not responsible for carrier fees.

3.5 How to Opt Out

You may opt out of SMS communications at any time by replying STOP to any text message you receive from us. After opting out, you will receive one final confirmation message. To re-subscribe, text START to our number. You may also opt out by contacting us at legal@roseandroasted.com.

3.6 Help

Text HELP at any time to receive assistance. You may also contact us at legal@roseandroasted.com or (571) 200-6364.

3.7 Supported Carriers

Our SMS program is supported by all major U.S. wireless carriers including AT&T, T-Mobile, Verizon, and Sprint. Carrier support is not guaranteed and may vary.

3.8 SMS Data Use

Phone numbers and SMS opt-in data will not be shared with third parties for their own marketing purposes. We do not sell your SMS opt-in consent or phone number to any third party. Phone numbers may be shared with our messaging platform provider (LeadConnector) solely for the purpose of delivering messages on our behalf.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device. We use:

• Strictly necessary cookies — required for the website to function
• Analytics cookies — to understand how visitors use our site
• Marketing cookies — to deliver relevant advertisements (with consent)

You may disable cookies through your browser settings. Note that disabling cookies may affect website functionality.

5. Information Sharing and Disclosure

5.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business, including:

• LeadConnector — our CRM and marketing automation platform, used to manage inquiries, bookings, and communications
• Sanity.io — our content management system (does not process personal data)
• Payment processors — for secure payment handling
• Email service providers — for transactional and marketing emails

All service providers are contractually required to protect your information and are prohibited from using it for any purpose other than providing services to us.

5.2 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Rose and Roasted LLC, our clients, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

6. Your Privacy Rights

6.1 Virginia Consumer Data Protection Act (VCDPA)

Virginia residents have the following rights under the Virginia Consumer Data Protection Act, effective January 1, 2023:

• Right to access personal data we process about you
• Right to correct inaccurate personal data
• Right to delete personal data we hold about you
• Right to data portability (obtain a copy in a portable format)
• Right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling
• Right to appeal our response to any request you make under these rights

6.2 Maryland Personal Information Protection Act (MPIPA)

Maryland residents are protected under the Maryland Personal Information Protection Act. We implement reasonable security measures to protect your personal information and will notify you in the event of a qualifying data breach as required by Maryland law.

6.3 District of Columbia

DC residents are protected under the DC Consumer Protection Procedures Act. We comply with all applicable DC privacy and consumer protection laws.

6.4 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know, the right to delete, the right to opt out of sale, and the right to non-discrimination. To exercise these rights, contact us at legal@roseandroasted.com.

6.5 Exercising Your Rights

To exercise any of the above rights, submit a verifiable request to legal@roseandroasted.com. We will respond within 45 days of receipt. We may need to verify your identity before processing your request.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Booking records are generally retained for 7 years for tax and legal compliance purposes. Marketing data is retained until you opt out or request deletion. SMS opt-in records are retained for a minimum of 4 years as required by applicable telemarketing regulations.

8. Data Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS/HTTPS), access controls, and vendor security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and disclaim liability for breaches that result from events beyond our reasonable control.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a person under 18, we will take prompt steps to delete such information. If you believe we have collected information from a minor, please contact us immediately at legal@roseandroasted.com.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of every website you visit.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated by updating the “Effective Date” at the top of this page and, where appropriate, by email notification. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: legal@roseandroasted.com
• Phone: (571) 200-6364
• General: co@roseandroasted.com
• Entity: Rose and Roasted LLC, Washington DC Metropolitan Area, Virginia