Privacy policy

Privacy Policy

1. Information We Collect

To process and fulfill your orders, we may collect personal information such as your name, email address, billing and payment information, delivery details, and order information.

You may also choose to provide additional personal information when you contact us directly, for example when requesting customer support.

2. How We Use Your Information

We collect and process your personal information only when we have a lawful basis to do so. This may include:

  • Contractual necessity: To process and fulfill your orders, provide requested services, handle returns or disputes, and provide customer support.

  • Consent: When you have given us your consent, such as when subscribing to our newsletter. You may withdraw your consent at any time.

  • Legal obligations: When processing is necessary to comply with applicable laws, regulations, tax requirements, or lawful requests from authorities.

  • Legitimate interests: When necessary for our legitimate business interests, such as maintaining and improving our services, preventing fraud, and protecting our business, provided that these interests do not override your fundamental rights and freedoms.

3. Sharing and Disclosure of Your Information

We treat your personal information confidentially and share it only when necessary and permitted by applicable law.

Your information may be disclosed in the following circumstances:

  • Service Providers: We may share information with trusted third-party providers who help us operate our business, such as payment processors, delivery providers, hosting providers, and customer-support services. These providers may process personal information only as necessary to provide their services.

  • Business Transactions: If our business is involved in a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction, subject to applicable legal requirements.

  • Legal Requirements: We may access, retain, or disclose personal information when required by law or when reasonably necessary to respond to lawful requests, enforce our agreements, protect our rights, prevent fraud, or address illegal activities.

4. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy.

We may retain certain information for longer periods where required by applicable law, including tax and accounting requirements, or where necessary to resolve disputes, enforce agreements, or protect our legal rights.

Where legally permitted, we will securely delete or anonymize personal information when it is no longer required.

5. Transfers of Personal Information Outside the EU

Some of our service providers may be located outside the European Union or European Economic Area. As a result, your personal information may be transferred to and processed in countries whose data protection laws may differ from those in your country of residence.

Where personal data is transferred outside the EU/EEA, we will use appropriate safeguards required under applicable data protection law. Depending on the circumstances, these safeguards may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another legally recognized transfer mechanism.

We do not rely on the former EU–US Privacy Shield framework, which is no longer a valid mechanism for transferring personal data from the EU to the United States.

6. Your Rights

Depending on your location and applicable data protection law, you may have the following rights regarding your personal information:

  • Access: You may request access to the personal information we hold about you.

  • Correction: You may request that inaccurate or incomplete personal information be corrected.

  • Deletion: You may request deletion of your personal information, subject to applicable legal exceptions.

  • Restriction: You may request that we restrict the processing of your personal information in certain circumstances.

  • Objection: You may object to certain types of processing, including processing based on legitimate interests and, where applicable, direct marketing.

  • Data Portability: Where applicable, you may request to receive your personal information in a structured, commonly used, and machine-readable format.

  • Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

  • Complaints: If you are located in the EU/EEA, you may lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.

To exercise your rights, please contact us using the details below.

7. How to Contact Us

We are responsible for the processing of your personal information as described in this Privacy Policy.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact us at:

Email: support@florapunkt.com