Privacy policy

March 4th, 2026

Bonsai Bar ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have regarding your data. It applies to all users of bonsaibar.com and participants in our workshops, private events, and corporate events.

By using our website or purchasing our products or services, you agree to the practices described in this Privacy Policy.

 

 

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you place an order, register for a workshop, book a private or corporate event, or contact us. This may include your name, email address, mailing address, phone number, and payment information. Payment card data is processed by our third-party payment processor and is not stored on our servers.

1.2 Information Collected Automatically

When you visit bonsaibar.com, we and our service providers may automatically collect certain technical information, including your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visit. This information is collected through cookies, web beacons, and similar technologies.

1.3 Information from Third Parties

We may receive information about you from third-party services such as payment processors, shipping carriers, and analytics providers in connection with your transactions or use of our website.

 

 

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfill retail orders and workshop registrations

  • Communicate with you about your orders, events, and inquiries

  • Send transactional emails such as order confirmations and shipping updates

  • Send marketing communications where you have opted in or where permitted by law

  • Improve our website, products, and services

  • Comply with legal obligations and enforce our Terms of Service

  • Detect and prevent fraud or unauthorized activity

 

 

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers: We share information with third-party vendors who help us operate our business, including payment processors, shipping carriers, email marketing platforms, and website analytics providers. These vendors are contractually obligated to use your information only as directed by us and in accordance with applicable law.

Legal Compliance: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Bonsai Bar, our customers, or others.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs.

 

 

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on bonsaibar.com. Cookies are small data files stored on your device that help us remember your preferences, analyze site traffic, and deliver relevant content.

You may control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of our website. We do not currently respond to "Do Not Track" signals from browsers, but we will update this policy if that practice changes.

 

 

5. Email Marketing & Communications

If you opt in to receive marketing emails from Bonsai Bar, you may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at info@bonsaibar.com. Transactional emails related to your orders or event registrations are not subject to opt-out, as they are necessary to fulfill your purchase.

 

 

6. Data Security

Bonsai Bar maintains reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. We maintain a Written Information Security Program (WISP) in compliance with Massachusetts 201 CMR 17.00 and similar requirements in other states where we operate.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law in your state.

 

 

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will delete or anonymize it in accordance with our data retention practices.

 

 

8. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us at info@bonsaibar.com.

 

 

9. State-Specific Privacy Rights

9.1 California (CCPA/CPRA)

California residents have the right to: know what personal information is collected and how it is used; request deletion of their personal information; request correction of inaccurate data; opt out of the sale or sharing of personal information; and be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

Shine the Light (Cal. Civil Code § 1798.83): California residents may request information about personal data disclosed to third parties for direct marketing purposes in the preceding calendar year by contacting us directly.

To submit a CCPA/CPRA request, contact us at info@bonsaibar.com. We will respond within 45 days as required by law.

9.2 Washington (WPA & My Health Data Act)

Washington residents have rights under the Washington Privacy Act (WPA) to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising and profiling. Bonsai Bar does not collect sensitive consumer health data as defined under the Washington My Health Data Act (WMHDA).

9.3 Texas (TDPSA)

Texas residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of the sale of personal data and targeted advertising. We will respond to verified requests within 45 days, with a possible 45-day extension when reasonably necessary.

9.4 Connecticut (CTDPA)

Connecticut residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of solely automated decisions. We will respond within 45 days.

9.5 Colorado (CPA)

Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. Colorado residents may appeal a denied privacy request by contacting us. If the appeal is denied, residents may submit a complaint to the Colorado Attorney General. We will respond within 45 days.

9.6 Massachusetts

Massachusetts residents are protected under 201 CMR 17.00. In the event of a data breach involving personal information of Massachusetts residents, we will notify affected individuals in accordance with Mass. Gen. Laws ch. 93H.

9.7 Rhode Island (RICDPA)

Rhode Island residents have rights under the Rhode Island Data Transparency and Privacy Protection Act (RICDPA), effective January 1, 2026, including the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising and the sale of personal data.

9.8 New Jersey (NJDPA)

New Jersey residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data and targeted advertising. We will respond within 45 days.

9.9 Florida (FDBR)

To the extent Bonsai Bar is subject to the Florida Digital Bill of Rights (FDBR), Florida residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling.

9.10 New York (SHIELD Act)

Bonsai Bar maintains reasonable data security practices in compliance with the New York SHIELD Act to protect the private information of New York residents. In the event of a qualifying breach, affected New York residents will be notified in accordance with New York law.

9.11 Pennsylvania

In the event of a data breach involving personal information of Pennsylvania residents, Bonsai Bar will provide timely notification in accordance with the Pennsylvania Breach of Personal Information Notification Act.

9.12 Maine

To the extent applicable, Bonsai Bar complies with Maine's Act to Protect the Privacy of Online Customer Information and will not sell or share your personal data without your express consent.

9.13 Louisiana (LCDPA)

Louisiana residents have rights under the Louisiana Consumer Data Privacy Act (LCDPA), effective 2025, including the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

9.14 New Hampshire (NHPA)

New Hampshire residents have rights under the New Hampshire Privacy Act (NHPA), effective January 1, 2025, including the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale of personal data, and profiling.

9.15 How to Submit a Privacy Request (All States)

To exercise any of the privacy rights described above, please contact us at:

Email: info@bonsaibar.com Mail: Bonsai Bar, 2240 S County Trail, East Greenwich, RI 02818

We will verify your identity before processing your request and respond within the timeframe required by your state's applicable law. We will not discriminate against you for exercising your privacy rights.

 

 

10. Third-Party Links

Our website may contain links to third-party websites, including our host venue partners. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

 

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. We encourage you to review this policy periodically. Continued use of bonsaibar.com following any updates constitutes acceptance of the revised policy.

 

 

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: info@bonsaibar.com Mail: Bonsai Bar, 2240 S County Trail, East Greenwich, RI 02818, United States