Last updated: August 1, 2026
At Flags.com, we recognize that our customers' privacy is a priority, and we take that responsibility seriously. This privacy policy describes how Regal Flags & Poles, Inc., doing business as Flags.com, collects, uses, shares, and protects your information when you use our website, and explains the rights you have over your information.
We believe our customers should know how their data is used and how it is collected. By using our website, you consent to the practices described in this policy.
Who we are
Company. Regal Flags & Poles, Inc. DBA Flags.com, 1395 NW 17th Ave, Suite 112B, Delray Beach, FL 33445, United States. Referred to in this policy as "we," "us," or "our."
Website. Flags.com, accessible at https://www.flags.com
Contact. See the "Contact us" section at the end of this policy.
Definitions
Account means a unique account created for you to access our website or parts of it.
Cookies are small files placed on your computer, mobile device, or other device by a website, containing details of your activity on that website.
Device means any device that can access our website, such as a computer, phone, or tablet.
Personal data and personal information mean any information that identifies, relates to, describes, or could reasonably be linked with you.
Sale, for the purposes of California law, means disclosing personal information to a third party for monetary or other valuable consideration.
Share, for the purposes of California law, means disclosing personal information to a third party for cross-context behavioral advertising, whether or not anything of value is received in return.
Sensitive personal information, for the purposes of California law, means personal information revealing government identifiers, account log-in credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, the contents of mail or messages, genetic data, biometric data, health information, or sex life and sexual orientation.
Service provider means a company or individual that processes data on our behalf to help us operate our business.
Usage data means data collected automatically, either generated by your use of our website or from the website infrastructure itself, such as the duration of a page visit.
Information we collect
Information you provide to us
- Name
- Email address
- Phone number, including mobile number if you opt in to text alerts
- Billing and shipping address
- Order and transaction history
- Customer service correspondence, including messages, calls, and chat
- Reviews and other content you choose to submit
- Military, veteran, first responder, or other community affiliation status, if you voluntarily verify eligibility for a discount program
We do not store or collect your payment card details. That information goes directly to our payment processors.
Information collected automatically
- IP address and approximate location derived from it
- Browser type and version
- Device type, operating system, and unique device identifiers
- Pages visited, time and date of visit, and time spent on pages
- Referring website
- On-site search queries
- Diagnostic and security data
Information we infer
We may infer preferences from your browsing and purchase history, such as which product categories interest you, in order to make our marketing and product recommendations more relevant. We do not use this information to make decisions that produce legal or similarly significant effects.
How we use your information
- To operate our website and process, fulfill, and deliver your orders
- To manage your account and your requests
- To provide customer service and respond to your inquiries
- To contact you about your orders, including confirmations, shipping updates, and service notices
- To send you marketing communications about products, offers, and events, where you have not opted out
- To send text message alerts, where you have opted in, as described in the "Text message program" section below
- To verify eligibility for community discount programs, where you choose to participate
- To display advertising to you on other websites and platforms, as described in the "Advertising and remarketing" section below
- To detect, investigate, and prevent fraud, abuse, and security incidents
- To analyze usage, measure the effectiveness of our marketing, and improve our website and products
- To comply with our legal obligations, resolve disputes, and enforce our agreements
- To evaluate or conduct a merger, acquisition, restructuring, or sale of assets
How we share your information
Service providers. We share information with companies that perform services on our behalf, such as hosting, payment processing, shipping, customer service, email and text messaging, analytics, backups, and security. These companies are listed in the "Service providers we use" section below. They are permitted to use your information only to perform services for us.
Advertising partners. We share online identifiers and activity data with advertising platforms, specifically Meta and Google, in order to deliver and measure advertising. Under California law this may be considered a sale or share of personal information. See "Sale and sharing of personal information" below.
Shipping carriers. We share your name, address, and contact information with carriers in order to deliver your order.
Legal and safety. We may disclose information where required by law or valid request from public authorities, or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.
Business transfers. We may share or transfer your information in connection with a merger, sale of assets, financing, acquisition, bankruptcy, or similar proceeding.
With your consent. We may disclose your information for other purposes with your consent.
Public content. If you submit a review or post publicly on our website, that content and the name you submit it under may be visible to others.
What we do not share
The following are never shared with or sold to third parties for marketing purposes, and are never shared with our advertising partners. This applies regardless of anything else in this policy:
- Mobile phone numbers collected for our text message alert program, and the consent records associated with them
- Military, veteran, first responder, and other community affiliation status
- Payment card details, which we never receive
Cookies and tracking technologies
We use cookies, beacons, tags, pixels, and scripts to operate our website, understand how it is used, and deliver advertising.
You can instruct your browser to refuse cookies or to notify you when a cookie is being sent. If you do not accept cookies, some parts of our website may not function.
Cookies can be persistent or session based. Persistent cookies remain on your device when you go offline. Session cookies are deleted when you close your browser. We use both, for the following purposes.
Necessary and essential cookies Session cookies, set by us. Required to provide the website and its features, authenticate users, and prevent fraudulent use of accounts. Without these, the services you request cannot be provided.
Notice acceptance cookies Persistent cookies, set by us. Record whether you have accepted our use of cookies.
Functionality cookies Persistent cookies, set by us. Remember choices you make, such as login details or preferences, so you do not have to re-enter them.
Analytics and performance cookies Persistent cookies, set by third parties. Track how visitors use our website so we can measure traffic, test changes, and improve the experience.
Advertising and targeting cookies Persistent cookies, set by third parties. Placed by Meta and Google to recognize your device across websites, show you our advertisements elsewhere, and measure advertising performance. Under California law, our use of these cookies may constitute a sale or share of personal information. See "Sale and sharing of personal information" below for how to opt out.
Advertising and remarketing
We advertise our products on third-party websites and platforms, including to people who have previously visited our website. This is commonly called remarketing.
To do this, our advertising partners place cookies and pixels on our website that recognize your device and record activity such as pages viewed and products purchased. We may share online identifiers, including hashed email addresses where available, so that our partners can recognize you across devices and browsers.
The advertising partners we use are:
Meta (Facebook and Instagram). We use the Meta pixel and related advertising tools. Manage your ad preferences at https://www.facebook.com/adpreferences. Meta's privacy policy is at https://www.facebook.com/privacy/policy
Google Ads. We use Google Ads remarketing and conversion tracking, and we list products through Google Shopping. Opt out of personalized Google advertising at https://adssettings.google.com. Google's privacy policy is at https://policies.google.com/privacy
We do not use Google's enhanced conversions feature, and we have never uploaded a customer list to Google Ads or any other advertising platform for targeting.
To opt out of interest-based advertising more broadly, you can use these industry tools:
- Network Advertising Initiative: http://www.networkadvertising.org/choices/
- European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/
- Digital Advertising Alliance: http://optout.aboutads.info/
On mobile devices you can enable Limit Ad Tracking on iOS or Opt Out of Ads Personalization on Android.
Some advertising vendors use technologies that are not affected by browser cookie settings. The opt-out tools above are specific to the browser and device you use them on. If you change browsers or clear your cookies, you will need to opt out again.
Text message program
If you opt in to receive text messages from Flags.com, the following applies.
What we send. Alerts notifying you of Presidential and Gubernatorial orders to fly the United States flag at half-staff. We do not send promotional or sales messages through this program.
How you opt in. By providing your mobile number and affirmatively consenting at signup. Consent is not a condition of any purchase.
Message frequency. Frequency varies and depends on when half-staff orders occur. These events are not scheduled and cannot be predicted in advance.
Cost. Message and data rates may apply. Flags.com does not charge for these messages. Your mobile carrier may.
How to stop. Reply STOP to any message to unsubscribe. You will receive one confirmation and no further messages. Reply HELP for assistance, or contact us using the details below.
Carriers. Mobile carriers are not liable for delayed or undelivered messages.
Your data. We do not sell, rent, or share mobile numbers or consent records with any third party for marketing purposes. Numbers are processed by our messaging provider solely to deliver the messages you requested.
Community discount verification
We offer discounts to members of the military, veterans, first responders, and other public service communities. To verify eligibility we use a third-party verification service, VerifyPass.
If you choose to verify, VerifyPass confirms your status using its own data sources and any documentation you provide to it. VerifyPass then provides us with your name, email address, and the community you verified as, so that a discount code can be issued.
Any supporting documentation you submit during verification is held by VerifyPass and is not transmitted to us. We do not receive, store, or have access to your military records, identification documents, or service history.
Participation is entirely optional and is not required to make a purchase. We do not sell or share community affiliation status, and we do not use it for advertising or targeting.
Loyalty program
Our Patriot Points loyalty program has been discontinued. Enrollment is closed and points can no longer be earned.
Previously issued reward codes may continue to be honored for a limited period. Historical program records, including enrollment details and points activity, remain held by our former loyalty provider, Smile.io, while the program is wound down. Smile.io's privacy policy is at https://smile.io/privacy-policy
If you participated in the program and would like your loyalty records deleted, contact us using the details below.
Service providers we use
These companies process personal information on our behalf. Each processes information in accordance with its own privacy policy.
| Provider | Purpose |
|---|---|
| BigCommerce | Ecommerce platform hosting our store, orders, and customer accounts |
| Order management system | Order processing, fulfillment, and customer order history |
| Cloudflare | Website security, performance, and bot protection. Processes IP addresses and request data |
| Rewind | Backup copies of our store data, including customer, order, and contact records |
| PayPal | Payment processing. https://www.paypal.com/webapps/mpp/ua/privacy-full |
| Authorize.net | Payment processing. https://www.authorize.net/about-us/privacy.html |
| Klaviyo | Email and text message delivery. https://www.klaviyo.com/privacy |
| Gorgias | Customer service inquiries, correspondence, and associated order information |
| Reviews.io | Collection and display of customer reviews |
| VerifyPass | Community discount eligibility verification |
| Google Analytics 4 | Website analytics. https://policies.google.com/privacy |
| Tag Rocket | Deployment and management of analytics and advertising tags |
| Google Places | Address autofill at checkout, which helps ensure addresses are entered correctly and prevents delivery delays |
| FedEx, UPS, USPS | Order delivery |
Our payment processors adhere to the PCI-DSS standards managed by the PCI Security Standards Council.
Children under 13
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will delete it from our records.
How long we keep your information
We retain personal information only as long as necessary for the purposes described in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.
| Information | Retention period |
|---|---|
| Order and transaction records | Minimum of 7 years from the order date, for tax, accounting, warranty, and dispute purposes. Legacy order records predating our current systems may be kept longer where needed to support warranty claims, reorder history, and system migration |
| Account information | For the life of the account, and for 7 years after closure where associated with orders |
| Marketing contact information | Until you unsubscribe. We retain a suppression record indefinitely so that we can continue to honor your opt-out |
| Text message consent records | Not less than 4 years from the date of consent or opt-out |
| Customer service correspondence | 10 years from the date the matter is closed |
| Community verification records | For the life of the account, so that verified customers do not need to re-verify |
| Usage and analytics data | No longer than 14 months |
| Cookies | As described in the cookies section above |
Security
The security of your personal information matters to us. We use commercially reasonable measures to protect it, including encryption in transit, access controls, and third-party security and bot protection services.
No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
International transfers
Your information is processed at our operating offices in the United States and in other locations where our service providers operate. This means your information may be transferred to and maintained on computers located outside your state, province, or country, where data protection laws may differ from those in your jurisdiction.
Your submission of information represents your agreement to that transfer. We take steps reasonably necessary to ensure your data is treated securely and in accordance with this policy, and we do not transfer your personal data to an organization or country unless adequate controls are in place.
Your privacy rights
A number of states have enacted comprehensive privacy laws. Regardless of whether a particular law applies to us, we extend the following rights to all residents of the United States:
- To know and access. Confirm whether we process your personal information, and obtain a copy of it
- To correct. Correct inaccurate personal information we hold about you
- To delete. Request deletion of your personal information, subject to the exceptions below
- To portability. Obtain a copy in a structured, commonly used, machine-readable format
- To opt out. Opt out of the sale or sharing of your personal information and of targeted advertising
- To non-discrimination. Not be discriminated against for exercising any of these rights
How to make a request
Contact us using any of the methods in the "Contact us" section below.
We may ask you to verify your identity before responding. Your request must give us enough information to reasonably verify that you are the person about whom we collected the information, and enough detail for us to understand and respond to it.
We will respond free of charge within 45 days of receiving a verifiable request. We may extend that by an additional 45 days where reasonably necessary, and we will notify you if we do. Disclosures will cover the 12-month period preceding the request.
Authorized agents
You may use an authorized agent to submit a request on your behalf. We will require written proof of the agent's authority, and we may require you to verify your own identity directly with us.
Appeals
If we decline to act on your request, we will tell you why. You may appeal by replying to our response or contacting us. We will respond to your appeal in writing within 45 days. If we deny the appeal, we will provide you with a way to contact your state Attorney General.
When we may decline a deletion request
We may deny a deletion request where retaining the information is necessary to:
- Complete a transaction, provide a product or service you requested, or otherwise perform our contract with you
- Detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity
- Debug products to identify and repair errors
- Exercise free speech or ensure another person's right to do so
- Comply with a legal obligation
- Make other internal and lawful uses compatible with the context in which you provided the information
Accessible formats
If you need this policy or a response to your request in an alternative accessible format, contact us and we will accommodate the request.
Your California privacy rights
This section supplements the information above and applies to California residents.
Categories of personal information we collect
The categories below are those defined in the California Consumer Privacy Act. This reflects our good-faith assessment of what we collect.
| Category | Collected |
|---|---|
| A. Identifiers. Name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name | Yes |
| B. California Customer Records categories. Name, address, telephone number, financial information | Yes |
| C. Protected classification characteristics. Age, race, national origin, religion, marital status, medical condition, disability, sex, sexual orientation, veteran or military status, genetic information | Yes, limited to veteran, military, and public service community status, and only where you voluntarily verify for a discount. We collect no other characteristic in this category. |
| D. Commercial information. Records of products or services purchased or considered | Yes |
| E. Biometric information | No |
| F. Internet or other network activity. Interaction with our website or advertisements | Yes |
| G. Geolocation data. Approximate physical location | Yes, limited to approximate location inferred from IP address. We do not collect precise geolocation. |
| H. Sensory data. Audio, visual, thermal, olfactory | No |
| I. Professional or employment information | No |
| J. Non-public education information | No |
| K. Inferences. Profiles reflecting preferences and characteristics | Yes, limited to product and category preferences drawn from browsing and purchase history. |
Personal information does not include publicly available government records, deidentified or aggregated information, or information excluded from the scope of the CCPA, such as data covered by HIPAA, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or the Driver's Privacy Protection Act.
Sensitive personal information
We do not collect sensitive personal information as defined by California law.
Military and veteran status is a protected classification characteristic under the CCPA, but it is not within the definition of sensitive personal information. The documentation used to verify that status is held by our verification provider and is not transmitted to us. Accordingly, we do not use or disclose sensitive personal information in a way that would require us to offer a right to limit its use.
Where we get personal information
- Directly from you, through forms, account signup, purchases, and correspondence
- Indirectly from you, by observing your activity on our website
- Automatically, through cookies and similar technologies
- From service providers, including our verification, analytics, and advertising providers
Categories we disclose for business purposes
We disclose the following categories to service providers in order to operate our business: Category A, Category B, Category C, Category D, Category F, and Category G. When we disclose personal information for a business purpose, we enter into a contract requiring the recipient to keep it confidential and not to use it for any purpose other than performing that contract.
Sale and sharing of personal information
We do not sell your personal information for money, and we have not done so in the preceding twelve months.
However, we use third-party advertising and analytics cookies on our website, including those operated by Meta and Google. Under the broad definitions in California law, our use of these technologies may constitute a sale or a share of the following categories of personal information:
- Category A: Identifiers, including online identifiers and IP address
- Category D: Commercial information, including products viewed or purchased
- Category F: Internet or other network activity
We treat this activity as a share for cross-context behavioral advertising and give you the right to opt out.
We do not sell or share:
- Mobile phone numbers or text message consent records
- Military, veteran, or other community affiliation status
- The personal information of consumers we know to be under 16 years of age
How to opt out of sale or sharing
You can opt out in any of these ways:
- Use the "Do Not Sell or Share My Personal Information" link in the footer of our website
- Adjust your cookie preferences on our website
- Use the industry opt-out tools listed in the "Advertising and remarketing" section above
- Contact us directly using the details below
Opt-outs set through browser tools apply only to the browser and device you use to set them.
Global Privacy Control
We recognize and honor the Global Privacy Control signal. If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information for that browser.
Do Not Track
Our website does not respond to Do Not Track signals. Do Not Track is a separate mechanism from the Global Privacy Control described above.
Shine the Light
Under California Civil Code Section 1798.83, California residents with an established business relationship with us may request information once a year about our sharing of personal information with third parties for those third parties' direct marketing purposes. Contact us to make such a request.
California residents under 18
California Business and Professions Code Section 22581 allows California residents under 18 who are registered users to request removal of content they have publicly posted. To request removal, contact us and include the email address associated with your account. Removal may not be complete or comprehensive, and the law may not require removal in all circumstances.
Rights under the GDPR
If you are located in the European Economic Area or the United Kingdom, you have the following rights over your personal data: to access it, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent.
We process personal data on one or more of these legal bases: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interests in operating and improving our business.
To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local supervisory authority.
Our Meta business page
We operate a public business page on Meta named Flag Experts, at https://www.facebook.com/flagexperts
For visitors located in the European Economic Area and the United Kingdom, we and Meta act as joint controllers with respect to page insights data. We use the page insights function to obtain anonymized statistical information about visitors to our page. Meta places a cookie on the device of users who visit the page, containing a unique identifier that remains active for two years unless deleted earlier.
Meta's terms are at https://www.facebook.com/terms.php and its privacy policy is at https://www.facebook.com/privacy/policy
Links to other websites
Our website may contain links to sites we do not operate. If you click a third-party link you will be taken to that party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policy of every site you visit.
Changes to this policy
We may update this policy from time to time. We will post the updated policy on this page and revise the "Last updated" date at the top.
If we make a material change to how we handle your personal information, we will notify you by email or by a prominent notice on our website before the change takes effect. For minor corrections and clarifications, the updated date on this page serves as notice.
We encourage you to review this policy periodically.
Contact us
If you have questions about this privacy policy or wish to exercise any of your rights:
Email: [email protected] Web: https://www.flags.com/contact-us/ Phone: 800-858-8776 Mail: Regal Flags & Poles, Inc., 1395 NW 17th Ave, Suite 112B, Delray Beach, FL 33445