Privacy policy

Only what it takes to make and deliver your order:

• your name, phone number and (optionally) e-mail;
• the delivery address, date and time;
• the recipient’s name and phone if the flowers are for someone else, the card message and your order comment;
• how to send you a photo of the bouquet before delivery (Telegram, Viber, WhatsApp or e-mail);
• what you ordered, the total and the payment status.

You pay on WayForPay’s secure page. Your card number, expiry date and CVV are entered there and never reach us — we only see the payment confirmation, the amount and the order number.

• Your IP address — to protect checkout from automated abuse; we do not store it with your order.
• Where your first visit came from — the link’s advertising tags (utm), a flag that you arrived from a Google or Meta ad (not its identifier), the name of the referring website, the landing page and the date — is remembered on your device and saved with your order, along with whether it was placed in the app or on the website. This shows us which advertising works; it contains nothing about you personally.
• With the order we also keep which device it was placed from: the device type, operating system and browser (as the browser reports them), screen and window size, time zone, browser languages, light or dark theme, the number of visits and time on the site before the order, the products you last viewed, the app version, how many times the order tracking page was opened, and the city and country derived from your IP address (the IP address itself is not stored). This helps us contact you conveniently and fix problems on the site.
• The website uses Google Analytics, Google Ads and Meta Pixel: they see which pages you open and whether you completed an order, so we know what works and can show ads to people who may like them. These services use cookies and browser identifiers.
• Microsoft Clarity records how visitors use the website (clicks, scrolling, page changes) and shows us de-identified heatmaps and visit recordings, so we can see where the site is awkward. The fields you fill in, and the checkout, order and profile pages, are masked in the recordings: Clarity does not see your name, phone or address.
• The iPhone app has no advertising pixels: only de-identified Google Analytics and Microsoft Clarity statistics (which screens are opened, whether checkout works, where it is awkward; masked the same way as on the website). The app does not track you across other apps or websites.

Until you sign in, your bag, the order form you filled in, your delivery area, «My orders» (order number and tracking key), «My dates» and your recent searches are kept only on your device — in the browser’s or the app’s storage. Your bag, the order form, the area and the order list are also placed in a cookie of this site in your own browser, so they do not vanish when the browser clears the site’s storage by itself (Safari does after a week without a visit); we do not keep them in our database. «Forget my details» in Profile erases all of it, as does clearing the site’s data in a browser.

If you sign in with Telegram, we keep in your account the phone number you confirmed, your name, and your bag, delivery area and checkout details (name, phone, e-mail, address, the recipient’s name and phone) — so that they are on all your devices. «My dates» are kept there too (who and when to congratulate, and how many days ahead to remind you): that way they appear on your other devices, and we can remind you of the occasion. Searches stay on the device only. «Sign out» removes the account’s data from the device; «Delete account» in Profile erases the account and this data for good — the orders themselves we keep as records.

If you tap «Notify me about the status», the app sends us Apple’s technical push token, tied to that order. We delete it as soon as the order is delivered or cancelled. You can turn notifications off in iPhone Settings.

• to prepare, take payment for and deliver your order, contact you or the recipient about it, and send the bouquet photo;
• to send the order confirmation and status;
• to keep accounting and tax records;
• to answer your messages;
• to improve the website and our ads (website only) and to protect it from abuse.

The legal bases are performing our sales contract with you, our legitimate interests (analytics, security) and legal obligations (accounting).

We never sell personal data. Some of it is processed by services the shop cannot run without:

• the courier delivering your order — the recipient’s name, phone and address;
• WayForPay — card payments;
• Resend — confirmation e-mails;
• Vercel (website hosting), Neon (order database), Cloudflare (e-mail and encrypted backups);
• Google and Meta — website analytics and advertising, Microsoft — Clarity (see above);
• Apple — push notifications in the app;
• Photon (komoot) — address suggestions: it only sees the address text you type;
• the messenger you chose for the pre-delivery photo.

Our providers’ servers may be located in the EU and the USA; they are bound to protect the data and use it only for our purposes.

We keep order data for as long as tax and accounting law requires (usually up to 3 years), then delete or anonymise it. Encrypted database backups are deleted automatically within 400 days. Analytics data is kept according to Google’s, Meta’s and Microsoft’s settings.

Under the Law of Ukraine «On Personal Data Protection» you may ask what data we hold about you, have it corrected or deleted, object to its processing or withdraw your consent. Write to us — we reply within 30 days. If you believe your rights have been violated, you may complain to the Ukrainian Parliament Commissioner for Human Rights.

• to opt out of website analytics, block third-party cookies in your browser or use the Google Analytics Opt-out add-on;
• to erase what is on your device, use «Forget my details» (app) or clear the site’s data (browser).

The shop is not meant for children and we do not knowingly collect their data.

If we start collecting other data or add a new service, we will update this page and the date at the top.