Who this policy is about
Morrow & Marigold is the candy brand presented on this website. Privacy questions may be sent to info@zunvero.cfd, by phone at +1 (612) 850-5077, or by mail to 8924 Colfax Ave S, Minneapolis, MN 55420, USA.
Information you provide
The inquiry form collects your name, email, optional phone number, candy selection, approximate quantity and message. The form also asks you to acknowledge this policy and the inquiry-only nature of the request. Please do not send payment card details, identification documents or sensitive medical information.
How information is used
We use inquiry information to respond, discuss feasibility and pricing, arrange an order if separately agreed, and handle follow-up questions. The form does not subscribe you to a mailing list. We do not sell inquiry information or use it for targeted advertising.
Service providers and technical data
The website host may process ordinary access and error logs, including IP address, request time and browser details. The form uses a session token to prevent forged requests and a short-lived hashed network identifier to limit repeated submissions. Inquiry contents are transmitted through the configured email service to our inbox; hosting and email providers process data needed to operate those services. Email may be processed outside your state or country depending on the provider.
Cookies and local storage
A necessary, session-based PHP cookie protects the inquiry form and expires with the browser session. It is HttpOnly and SameSite=Lax; it must be marked Secure in production over HTTPS. A local-storage entry named mm-cookie-choice stores your cookie preference until you clear it or change it through Cookie preferences. We do not load analytics pixels, advertising cookies, external fonts or third-party tracking scripts. Essential only and Accept current cookies both leave only the necessary functionality enabled.
Retention and security
Inquiry emails remain in the business mailbox while needed for the conversation, related records or legal obligations; retention should be reviewed periodically rather than treated as indefinite permission to keep data. The application removes stale rate-limit records after approximately one day when handling later requests. Hosting logs have a provider-controlled retention period. We use access controls and encrypted transport when configured, but no website or email system can promise absolute security.
Your choices and requests
You may ask to access, correct or delete inquiry data by contacting the email above. We may need to verify the request and retain information required by law or an active dispute. Depending on where you live, additional privacy rights may apply. This policy does not claim that every jurisdiction-specific right applies to every visitor.
Children and external communication
This website is intended for adults and does not knowingly solicit personal information from children under 13. Contact us if you believe a child submitted personal data. Clicking an email or telephone link opens your own communication software, whose privacy practices may differ.
Policy changes
Updates will be posted here with a revised effective date. For any questions about current handling practices, contact us before submitting the form.