Privacy Policy | Floral.am

This Privacy Policy (the Policy) explains how Floral.am (referred to as Floral.am, the Platform, we, us, or our) collects, uses, stores, shares, and protects personal data.

This Policy applies to the floral.am website, partner administration dashboards, online stores operating under Floral.am subdomains or custom domains, and other services provided through the Platform, to the extent that personal data is processed by Floral.am or on its behalf.

Our goal is to ensure lawful, transparent, and secure processing of personal data while respecting every individual’s right to privacy.

Personal data is processed in accordance with the Law of the Republic of Armenia on Personal Data Protection and other applicable legislation.

Please also review our Terms of Service and Cookie Policy.

1. Responsibility for Personal Data Processing

Floral.am provides a technology platform that enables entrepreneurs and organizations to create, manage, and grow their own online flower stores.

For website visitors, partners, partner employees, and individuals using the Platform’s own services, Floral.am determines the purposes and means of personal data processing within the limits of applicable law.

Floral.am’s role in processing the personal data of customers of partner stores is described in Section 3 of this Policy.

2. Whose Personal Data We Process

2.1. Website Visitors

Individuals who visit floral.am, explore the Platform’s features, pricing, and published information, or contact us.

2.2. Partners

Individuals, sole proprietors, representatives of organizations, and other persons who register or manage stores on Floral.am.

2.3. Partner Employees

Individuals who have been granted access to a store’s administration dashboard by a partner.

2.4. Customers

Individuals who place orders through online stores created using Floral.am.

2.5. Order Recipients

Individuals to whom orders or gifts are delivered, even if they have never used the Platform directly.

2.6. Support Requesters

Individuals who submit questions, suggestions, complaints, or technical support requests to us.

3. Responsibilities of Floral.am and Partner Stores

Floral.am is a multi-tenant Software-as-a-Service (SaaS) platform through which each partner independently conducts its commercial activities.

3.1. Responsibilities of Partner Stores

Each partner store operates as an independent seller and generally determines the purposes and essential means of processing its customers’ and order recipients’ personal data.

Partners are responsible for:

Properly informing customers about personal data processing.
Establishing appropriate legal grounds for processing personal data.
Accepting, processing, fulfilling, and delivering orders.
Ensuring lawful use of customer information.
Maintaining data confidentiality among their employees.
Responding to customer requests concerning their personal data rights.
Ensuring the legality of their own advertising and marketing communications.

3.2. Responsibilities of Floral.am

Regarding the personal data of customers of partner stores, Floral.am generally acts as an authorized data processor operating on the partner’s instructions.

We process this data to provide Platform functionality, technically support order processing, transmit necessary notifications, and deliver services selected by the partner.

Floral.am does not acquire ownership rights over partner customer data and does not use such data for its own independent advertising campaigns without an appropriate legal basis.

We do not sell the personal data of partners or their customers.

However, Floral.am may independently determine the purposes of processing certain technical data, particularly for Platform security, fraud prevention, system monitoring, and compliance with legal obligations. In such cases, our role is determined by the actual nature of the processing.

3.3. Customer Requests

If you have made a purchase through a store created using Floral.am and wish to access, correct, or delete your personal data, you may first contact the relevant store.

If you are unable to contact the store, you may contact Floral.am support. We will review your request within the scope of our responsibilities and, where necessary, assist the partner in fulfilling your rights.

4. Personal Data We Collect

We collect and process only the information necessary to provide relevant services, maintain security, or comply with legal obligations.

4.1. Partner Information

During partner registration and store management, we may process:

First and last name.
Email address.
Phone number.
Store name and business address.
Company or sole proprietor information.
Tax and billing information, where necessary.
Store subdomain or custom domain.
Account identification and login information.
Employee information and access permissions.
Subscription, commission, and payment history.
Technical support requests and correspondence.

Passwords must be stored using secure hashing mechanisms. We do not intend to store passwords in plaintext.

4.2. Store Management Information

Partners may enter and store:

Product names, descriptions, and photographs.
Prices, discounts, and offers.
Delivery zones and conditions.
Business hours.
Store contact information.
Payment integration settings.
Order and customer information.
Store terms and other published content.

Some of this information may be publicly available when published by the partner on their online store.

4.3. Customer Information

On behalf of partner stores, we may process the following information to facilitate orders:

Customer’s first and last name.
Phone number.
Email address.
Delivery address.
Order date and preferred delivery time.
Ordered products, quantities, and prices.
Order status and history.
Payment method and payment status.
Additional order instructions.
Shopping cart contents.

4.4. Order Recipient Information

To arrange delivery, partner stores may process:

Recipient’s name.
Phone number.
Delivery address.
Delivery timing information.
Gift card messages or special delivery instructions.

Order recipients are not required to have a Floral.am account.

Partners must ensure that such processing is lawful and must not collect information that is unnecessary for delivery.

4.5. Google Sign-In Information

If Google Sign-In is available in a relevant part of the Platform and the user chooses to use it, we may receive information authorized by Google, such as:

Name.
Email address.
Profile picture.
Technical account identifier.

We do not receive the user’s Google account password.

4.6. Technical Information

When using the Platform, certain information may be processed automatically, including:

IP address.
Browser and device information.
Operating system type.
Request dates and times.
Pages visited and technical actions performed.
Error and security logs.
Information collected through cookies and similar technologies.

Technical information is used to maintain the functionality, security, and performance of our services.

4.7. Payment Information

Floral.am may process payment amounts, currencies, payment statuses, transaction identifiers, and other necessary payment-related information.

Our systems are not intended to store complete bank card numbers, CVV/CVC security codes, or sensitive card authentication data.

Sensitive card payment information must be processed within the secure environment of the relevant payment service provider or bank.

4.8. Special Categories of Personal Data

Floral.am is not designed to intentionally collect information about health, religious or political beliefs, or other special categories of personal data.

Please avoid including such information in gift card messages, order comments, or other free-text fields unless necessary and supported by an appropriate legal basis.

5. Purposes and Legal Grounds for Processing

We process personal data for specific and lawful purposes.

5.1. Entering Into and Performing Contracts

Personal data may be processed to:

Create partner accounts.
Register and manage stores.
Provide Platform services.
Calculate payments and commissions.
Deliver technical support.
Fulfill contractual obligations.

5.2. Order Fulfillment

Customer information is processed on behalf of partner stores to facilitate order placement, confirmation, payment, preparation, delivery, and customer service.

5.3. Compliance With Legal Obligations

Certain information may be processed and retained to comply with applicable tax, accounting, and other legal requirements of the Republic of Armenia.

5.4. Security and Fraud Prevention

Technical information may be used to:

Detect unauthorized access.
Prevent suspicious activities.
Identify system errors.
Maintain service stability.
Defend against legal claims.

Such processing is carried out on legal grounds permitted by applicable law and only to the extent necessary.

5.5. Marketing and Analytics

Optional marketing communications and analytics technologies requiring consent are used only where appropriate consent has been obtained.

Users may withdraw their consent through available settings or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Registering an account, visiting the website, or placing an order does not automatically constitute blanket consent to all forms of personal data processing. Each processing activity must have an appropriate legal basis.

6. Sharing Personal Data With Third Parties

We do not sell personal data or disclose it to third parties for their independent advertising purposes without an appropriate lawful basis.

To provide our services, personal data may be shared, to the extent necessary, with the following recipients.

6.1. Partner Stores

Customer information is accessible to the store through which the order was placed.

6.2. Payment Providers and Banks

To process payments, information may be shared with the GetPay payment service.

Each payment provider may maintain its own privacy policy.

6.3. Technical Infrastructure Providers

Floral.am may use hosting, data storage, content delivery, security, and messaging services, including Cloudflare.

These providers may process technical and other necessary information depending on the services they deliver.

6.4. Notification Services

When a partner enables the relevant functionality, certain order details or technical notifications may be transmitted through Telegram or other communication services.

Partners are responsible for configuring and using notification features appropriately.

6.5. Authentication and Analytics Services

Google services may be used for authentication and, where appropriate consent has been obtained, website usage analytics.

6.6. Government Authorities

Personal data may be disclosed to courts, law enforcement agencies, tax authorities, or other competent public bodies only on grounds and in accordance with procedures established by law.

We apply contractual and organizational data protection measures to third-party service providers according to their roles and the nature of their services.

7. International Transfers of Personal Data

Certain technical services used by Floral.am may be provided by organizations located outside the Republic of Armenia.

In particular, Cloudflare, Google, Stripe, Telegram, and other service providers may process or store certain information internationally.

International transfers of personal data are carried out subject to the requirements of Armenian legislation.

Where consent, regulatory authorization, or additional data protection safeguards are required, transfers must take place only after those requirements have been satisfied.

We seek to limit the amount of information transferred and select service providers that implement appropriate technical and organizational safeguards.

The legal basis for each transfer is assessed separately, taking into account the service provider, recipient country, and nature of the personal data involved.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, perform contractual obligations, or comply with applicable legal requirements.

8.1. Partner Accounts

Partner account and store management information is retained while the partner uses our services.

After account closure, information that is no longer necessary is deleted or anonymized in accordance with established procedures.

Certain information may be retained for longer where required to comply with legal obligations, resolve disputes, or protect legitimate legal claims.

8.2. Order Information

Order information is retained during the partner’s use of the services and in accordance with the data retention terms agreed with that partner.

When a partner account is closed, data is deleted, returned, or anonymized, subject to applicable contractual and legal obligations.

8.3. Financial Records

Invoices, transaction records, and accounting documents are retained for the periods required by applicable tax and accounting legislation.

8.4. Technical Logs

Technical and security logs are retained for a limited period necessary for their intended purposes.

Specific retention periods are determined according to the type of log, security requirements, and applicable legal obligations.

8.5. Support Correspondence

Support requests and related communications are retained for the time necessary to resolve inquiries, address recurring issues, and protect legal claims.

8.6. Backups

Following a data deletion request, certain information may temporarily remain in system backups until those backups are replaced or deleted as scheduled.

Access to backup data is restricted, and such data is not used for new purposes.

Data retention periods are reviewed periodically.

9. Your Rights

In the circumstances and manner provided by the laws of the Republic of Armenia, you have the right to:

Be informed about data processing. Find out whether your personal data is being processed, for what purposes, and on what legal grounds.
Access your personal data. Review your personal data and obtain information about it in accordance with the law.
Request correction. Request the correction or completion of inaccurate, incomplete, or outdated information.
Request blocking or destruction of data. Where legally justified, request the suspension of certain processing activities or destruction of personal data.
Withdraw consent. Where processing is based on your consent, you may withdraw that consent.
Opt out of marketing communications. You may unsubscribe from optional marketing communications at any time.
File a complaint. You may contact the competent personal data protection authority of the Republic of Armenia or seek judicial remedies in accordance with applicable law.

How to Exercise Your Rights

To submit a request regarding your personal data, please contact Floral.am using the contact details provided in Section 15.

To prevent unauthorized disclosure of personal information, we may request reasonable verification of your identity.

Requests are reviewed within the time limits and procedures established by law.

If your request concerns customer information held by a particular partner store, we may forward it to that partner or assist the partner in responding.

10. Data Security

Floral.am applies technical and organizational measures designed to protect personal data, taking into account the nature and volume of the information processed and the potential risks.

These measures may include:

Secure HTTPS/TLS connections.
Secure password hashing.
Access restrictions.
Employee role and permission management.
Protection of payment integration credentials and secrets.
Security and system event logging.
Data backups.
System updates and remediation of technical vulnerabilities.
Monitoring of unauthorized access and suspicious activities.

We periodically review security measures in response to technological developments and identified risks.

Nevertheless, no method of transmitting information over the internet or storing it electronically can guarantee absolute security.

In the event of a personal data security incident, we assess its nature, potential consequences, and take appropriate action.

Where required by law, we notify affected individuals, partners, or competent authorities in accordance with applicable procedures.

Partners are also responsible for protecting their account credentials and granting employees only the access permissions they need.

11. Cookies and Similar Technologies

Floral.am may use cookies, browser local storage, and similar technologies to:

Authenticate users and maintain sessions.
Enable essential website functionality.
Preserve shopping cart information.
Maintain security.
Remember user preferences.
Analyze website usage.

Technologies requiring user consent are used on the basis of appropriate consent.

Detailed information about cookie categories, purposes, retention periods, and available controls is provided in our separate Cookie Policy.

12. Children’s Personal Data

Floral.am partner administration accounts are intended for adults with the necessary legal capacity.

The Platform is not intended for independent use by individuals under the age of 16.

We do not intentionally collect children’s personal data without an appropriate legal basis.

If we become aware that a child’s personal data is being processed without the necessary legal basis, we will take appropriate measures in accordance with applicable law.

If you believe that a child’s personal data is being processed improperly through Floral.am, please contact us.

13. Third-Party Websites and Services

Stores created using Floral.am may operate their own websites, domains, privacy policies, and third-party integrations.

Partners may also use social networks, payment systems, mapping services, and other external services.

When visiting third-party websites or using their services, the privacy policies of those organizations may apply.

Floral.am does not determine all the purposes and means of personal data processing carried out independently by third parties.

We recommend reviewing the privacy policies of the relevant third-party services.

14. Changes to This Policy

Floral.am may periodically review and update this Policy to reflect:

Changes in legislation.
New Platform features.
Changes to technical infrastructure.
New security requirements.
Changes in data processing procedures.

The current version of this Policy is published on floral.am with its last updated date.

Where required by law or contract, we will notify partners of material changes through appropriate communication channels, including email or the administration dashboard.

If a change requires new consent, that consent will be obtained through the appropriate process before the relevant processing begins.

15. Contact Us

If you have questions about this Policy, personal data processing, data protection, or exercising your rights, please contact us.

Floral.am

We will review your inquiry and respond in accordance with the procedures and deadlines established by the laws of the Republic of Armenia.