Privacy policy

We collect only what we need to take your order and bring the flowers to the right person. We do not sell your information, we do not send marketing emails, and we do not use advertising or analytics trackers on this website.

The controller of your information is Valora Flowers, Poland, which runs Valora Flowers. You can reach us with the contact details at the bottom of this page.

When you place an order we collect:

• About you: your name, email address and phone number.
• About the recipient: their name, delivery address and phone number.
• About the order: the products, the delivery date and time slot, any delivery instructions, your card message and whether the gift is anonymous.
• Payment: you enter your card details on a form provided by Stripe. They go to Stripe and never reach our servers. We learn only whether the payment succeeded, and references that let us refund it.
• Messages: what you write to us by email, phone, WhatsApp or Messenger, if you contact us.

You give us the recipient’s details yourself. Please share them only if the recipient would expect it, as a surprise gift usually is. We use them only for the delivery.

• To take, prepare and deliver your order, to charge or refund the payment, to email you a confirmation and to contact you or the recipient about the delivery. Basis: it is needed for the contract with you.
• To keep accounting and tax records. Basis: a legal obligation.
• To answer questions and complaints, to prevent fraud and misuse of the shop, and to defend our rights. Basis: our legitimate interest in running a safe shop and handling disputes.

Our team in Cebu sees the order details they need to make and deliver the bouquet: the recipient’s name, address and phone number, the card message and what was ordered. They do not tell the recipient who sent an anonymous gift. They act on our instructions.

We also use providers that handle information for us:

• Stripe processes card payments and refunds, under its own privacy policy. Stripe also uses some information, such as your device, to detect fraud.
• Email and hosting services that send our order emails and run this website and our order system.
• WhatsApp and Messenger, if you choose to message us there.

We do not sell your information or share it for advertising. We disclose it to authorities only when the law requires.

The recipient’s details and the order go to our team in the Philippines, because that is where the flowers are made and delivered. The Philippines is outside the European Economic Area and is not covered by an EU adequacy decision, so we bind our team to protect the information with contractual safeguards, and we send them only what the delivery needs. Some of our other providers, such as Stripe, may also handle information outside the EU, under the safeguards the law requires. You can ask us for a copy of these safeguards.

We use two small cookies, both needed for the shop to work:

• One remembers your cart for up to 30 days, so it is still there when you come back.
• One lets you see your order confirmation for 24 hours after you place it.

We do not use cookies for advertising or tracking. The Stripe payment form may set its own cookies to keep payments secure.

We keep order records for as long as Polish accounting and tax law requires, currently five years from the end of the year of the sale. Messages you send us are kept for as long as needed to deal with your question and any complaint that may follow, and are then deleted. The recipient’s details are deleted from our team’s systems once the delivery is done, apart from what the order record itself needs.

You can ask us for a copy of the information we hold about you, ask us to correct it, delete it where we no longer need it, restrict how we use it, or hand it to you in a portable form. You can object to our use of it where we rely on our legitimate interest. The same goes for a recipient whose details were given to us. Contact us as described below and we will answer within one month.

If you are not satisfied with our answer, you can complain to the President of the Personal Data Protection Office in Poland (UODO) or to the data protection authority in your own country. Our team in the Philippines also handles information under the Philippine Data Privacy Act.

The shop is meant for adults. We do not knowingly collect information from anyone under 18, other than the details of a recipient that an adult has given us for a delivery.

If we change how we handle information, we update this page and its date. See also our terms of sale.