Privacy Policy

1. Who is responsible

The controller of your data is Lacy Bird International L.L.C-FZ (Formation No. 2204627, licence No. 2204627.01), Business Center 1, M Floor, The Meydan Hotel, Nad Al Sheba, Dubai, United Arab Emirates. Florist Circles and Lacy Bird Academy are brands of this company and share one account: the data you give the platform is also used by the school to provide its courses, and vice versa. Contact: hello@floristcircles.com (Florist Circles) or lba@lacybird.com (Lacy Bird Academy).

If you enrol in a course of a partner school, that school receives the data it needs to run the course (your name, email, progress and answers to its registration form) and processes it under its own privacy policy, linked on the course page.

2. What we collect

• Account: email address, first and last name, display name, profile photo or video, headline, city, bio, language, time zone and display settings.
• Consents: which documents you accepted, their version and when; whether you agreed to receive news and offers.
• Phone number — only if you confirm it for WhatsApp (tickets and reminders).
• Content you create: posts, photos, video notes, comments, reactions, chat messages, portfolio and experience, homework, course reviews.
• Learning and events: circles you join, courses and lessons you open and complete, events you register for, answers to registration forms, attendance and watch time of live sessions.
• Purchases: what you bought, amount, currency, status and payment reference (card details stay with Stripe).
• Calls and live sessions: audio and video are transmitted in real time to participants; sessions may be recorded by the host, which you will see in the session.

3. Device and usage data

• Device data: browser or app version, operating system, push-notification token (if you allow notifications), IP address and technical logs needed for security.
• Usage: which pages and screens you open, actions you take (for example, joining a circle, registering for an event, starting a payment), where you came from (campaign link or referring website), and whether you open our emails and notifications. A random identifier in your browser or app links visits before sign-in to your account. We collect this ourselves and keep it in our own database; it is not sold or shared with advertising networks.
• Cookies and similar technologies — see the Cookie Policy.

4. Why we use your data (and on what basis)

We do not sell your personal data.

• To provide the services — your account, circles, content, courses, live sessions, tickets and support (performance of our contract with you).
• To send service messages from Florist Circles and Lacy Bird Academy: sign-in codes, tickets, reminders, course access, replies and mentions (contract).
• To send news, new courses and offers from Florist Circles and Lacy Bird Academy — with the agreement you give when creating your account, which you can withdraw at any time by unsubscribing (consent).
• To personalise the service: suggest circles, courses and reminders that fit what you do (for example, a reminder about a course you started) (legitimate interests; you can turn notifications off).
• To keep the community safe: moderation, reports, blocking, fraud and abuse prevention (legitimate interests).
• To measure and improve the services and our advertising (legitimate interests).
• To process payments, keep accounting records and meet legal obligations (contract and legal obligation).

5. Who we share data with

Trusted service providers who process data only on our instructions:

• Supabase — database, sign-in and file storage.
• Vercel — website and server hosting.
• Stripe — card, Apple Pay and Google Pay payments (we never see your full card number); GetCourse — registrations and payments for some Lacy Bird Academy offers.
• Daily — video calls and interactive rooms; Kinescope — video hosting and live streams.
• Resend — email delivery (including whether an email was opened or a link clicked); Respond.io and WhatsApp (Meta) — WhatsApp messages.
• OpenRouter, Anthropic and DeepL — machine translation, AI content agents and the admin assistant (only the text needed for the task).
• Apple, Google (Firebase Cloud Messaging) and Expo — push notifications.
• Meta — advertising measurement on public course and event pages (Pixel and Conversions API; identifiers are sent only in hashed form).

6. Who can see your content

Your profile card and posts are visible to members of the circles where you publish them. Posts in open circles may be visible on the open web if you allow it in your settings. You choose who can see your public profile (members, anyone with the link, or only you). Chat messages are visible to members of that circle. Circle owners, moderators and our team can see content to keep the community safe.

7. International transfers

Our providers store data in data centres in the European Union and the United States. When data leaves your country, we rely on the providers’ contractual safeguards (such as the EU Standard Contractual Clauses) to protect it.

8. How long we keep data

We keep your data while your account exists. When you delete your account, your profile, posts, comments, messages, memberships and photos are deleted and backups are overwritten within 30 days. We keep purchase and consent records as long as the law requires. Accounts that start sign-in but never confirm the email are deleted after 30 days.

9. Your rights

To exercise your rights, write to hello@floristcircles.com. We answer within 30 days.

• access and get a copy of your data; correct it; delete it (Profile → Settings → Delete account);
• object to processing based on legitimate interests and restrict processing;
• withdraw consent at any time — for example, unsubscribe from news and offers or turn off notifications;
• data portability;
• complain to your data protection authority.

10. Children

The services are not intended for children under 16, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will delete it.

11. Security

Data is encrypted in transit; access is limited to people who need it; administrators use two-factor authentication. No system is perfectly secure — if you suspect a problem, write to us at once.

12. Changes and contact

We will publish changes on this page with a new date and notify you of important ones. Questions: hello@floristcircles.com. Lacy Bird International L.L.C-FZ (Formation No. 2204627, licence No. 2204627.01), Business Center 1, M Floor, The Meydan Hotel, Nad Al Sheba, Dubai, United Arab Emirates.