Privacy policy

1. What we collect

• Order details: orderer name and phone, recipient name, phone and address, delivery date and time, card message, payment method; email if you choose to share one.
• Phone number for a call back when you tap “Leave your number”, together with the design you’re viewing, the date you need the flowers and any note.
• Anonymous statistics: pages viewed, buttons tapped, loading time, traffic source (e.g. Facebook, Zalo). No tracking cookies, no stored IP, no link to your name or phone; the session id only lives in the open browser tab.
• Your cart and the name/phone you choose to “Remember on this device” are stored on your phone itself (browser storage) — not sent to our server until you place the order.

2. What we use it for

• Wrapping flowers, delivering to the right person at the right time, and contacting you to confirm when needed.
• Calling you back or messaging on Zalo when you leave your number.
• Confirming payment, refunding when needed, and keeping our books.
• Understanding which designs and times customers need, so we can prepare better (anonymised, aggregated numbers only).
• Preventing spam and fake orders.

We never sell or rent your details, and never send marketing without your consent.

3. Who processes data with us

We use a few outside services; each one only receives the part needed for their job:

• Cloudflare — Hosting the website, database, photos and spam protection (Turnstile) (United States and a global server network).
• Telegram — Sending order notifications and lead messages to the owner (United Arab Emirates and worldwide).
• Resend — Sending confirmation emails (only when you leave an email) (United States).
• payOS, MoMo, VNPay — Processing online payments when you pick these gateways (Vietnam).
• Zalo — Chatting with the shop when you message us on Zalo (Vietnam).
• Cloudflare Workers AI, TypeSafe — Classifying our product photos (not your personal data), only when enabled (United States).

4. How long we keep it

• Phone numbers left without an order: up to 90 days, then deleted or anonymised.
• Recipient details (name, phone, address, card message): 12 months after delivery, then deleted; the amount and the design stay in our books.
• Detailed analytics data: 14 days; then only aggregated anonymous numbers remain.

5. Your rights

You can ask us what we hold about you, request a correction, deletion, withdraw consent or object to processing. Message us with the phone number you used; we verify, act and reply within 72 hours. Deletion does not affect completed orders, except where we must keep records by law.

6. Children

If you are under 16, please ask a parent or guardian to order or leave a number for you. When we discover we hold data about a child under 16 without guardian consent, we delete it immediately.

7. Data protection

Data is encrypted in transit, only the signed-in owner can view it; delivery and receipt photos sit in a private store, not public. In case of a data breach, we notify the authorities within 72 hours and inform you if the breach affects you.

8. Contact

• Zalo: message us
• Phone: 0905123456

Legal basis: Decree 13/2023/NĐ-CP on personal data protection and the Personal Data Protection Law 91/2025/QH15.