Privacy policy

Who is responsible

The controller of your personal data is VITE FLOWER CREATIONS LTD, HE 298276, Georgiou Griva Digeni 25A, 3106 Limassol, Cyprus · +357 97 778847 · Viteflowercreations@gmail.com. Write to us with any question about your data.

What we collect

• Your details: name, phone number and e-mail — to confirm the order and send you the photo of the bouquet.
• Recipient's details: name, phone number and delivery address — to deliver.
• The order: bouquets, add-ons, date and time slot, the text of the card, and any message you send us about the order.
• Requests: for weddings, events, subscriptions or a bouquet by budget — what you write in the form and the photos you choose to send.
• Payment: card payments are handled by Stripe. We receive only the payment confirmation, the amount and the card type — never the full card number.

Why we use it

• To accept, make and deliver your order and to deal with any complaint — this is necessary to perform our contract with you (Article 6(1)(b) GDPR).
• To keep accounting records required by Cyprus tax law (Article 6(1)(c) GDPR).
• To count visits with Google Analytics and see which pages and bouquets people look at — only if you press “Allow” in the cookie banner (Article 6(1)(a) GDPR). You can withdraw this at any time.
• We do not send advertising, do not build customer profiles and do not sell or share your data for marketing.

Who sees it

• Our florists and the courier delivering the order. The courier gets only the recipient's name, phone and address.
• Service providers that run the site for us: Hostinger (the server the site runs on and where orders are stored), Stripe (payments), our e-mail provider for receipts and, only with your consent, Google Ireland Ltd (Google Analytics). Transfers outside the EU are covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
• WhatsApp (Meta) — when you write to us there or we send you the photo of the bouquet.
• Public authorities, only where the law requires it.

How long we keep it

• There are no customer accounts on the site and we do not keep a customer database.
• Names, phone numbers, addresses, e-mail and card texts are deleted from our order system automatically 90 days after the order. What remains is anonymous: what was ordered and for how much.
• Invoices and payment records are kept for as long as Cyprus tax law requires.

Cookies and your browser

• Google Ads uses the same “Allow”: with it, Google’s cookies note that you came from one of our ads, so we can see which ads lead to orders. We do not use personalised advertising or remarketing.
• Google Analytics is switched on only after you press “Allow” in the banner at the bottom of the page. It then sets its own cookies (_ga) to count visits; we do not see who you are. If you press “No thanks”, it is not loaded at all. You can change your choice under “Cookies” at the bottom of any page.
• Your cart, saved bouquets, chosen language, delivery area, an unfinished checkout and the numbers of your orders are stored only in your own browser so they are still there when you come back. You can clear them at any time in the browser settings.

Your rights

• You can ask us what data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy — write to Viteflowercreations@gmail.com. We reply within one month.
• If you think we handle your data wrongly, you can complain to the Office of the Commissioner for Personal Data Protection of Cyprus, dataprotection.gov.cy.
• How orders, delivery and refunds work is described in the terms of sale.