Privacy Policy

Flowers Everywhere · Sri Lanka

1. Compliance Statement

This Privacy Policy outlines how Flowers Everywhere collects, uses, and protects your personal data in accordance with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022 and relevant Consumer Affairs Authority regulations.

2. Information We Collect

We collect the following personal data to process your purchases and provide our services:

• Personal Identifiers: Name, phone number, email address, and billing address.
• Recipient Details: Name, delivery address, and phone number of gift recipients.
• Transaction Data: Order history, payment confirmation receipts, and custom messaging instructions for gift cards.
• Technical Data: IP address, browser type, and cookies collected when browsing our website.

Note: We do not store complete debit/credit card details on our servers. Payment processing is handled by certified PCI-DSS compliant Sri Lankan payment gateways.

3. Purpose & Legal Basis for Data Processing

We process your personal data for the following lawful reasons:

• Contract Fulfillment: To fulfill, package, and deliver your orders to you or your designated recipient.
• Customer Support: To communicate regarding order updates, delivery issues, or refunds.
• Marketing Communications: Sending promotional materials or seasonal gift offers (only if explicit consent has been given).
• Legal Compliance: To maintain business accounts, receipts, and records as mandated by Sri Lankan commercial laws.

4. Sharing & Disclosure of Data

We do not sell or rent your personal data to third parties. We share data only with necessary service providers bound by strict confidentiality:

• Registered Sri Lankan courier services to deliver packages.
• Bank payment gateway providers to process transactions securely.
• IT and web hosting service providers managing our e-commerce platform.

5. Data Retention & Security

• We implement administrative, technical, and physical safeguards to protect your personal data against unauthorized access, loss, or alteration.
• Personal data will be retained only as long as necessary to fulfill the ordering process and legal accounting requirements.

6. Your Data Rights

Under the Sri Lanka PDPA, you have the following rights regarding your personal data:

• The right to access, review, or correct your personal data held by us.
• The right to withdraw consent for marketing messages at any time.
• The right to request the deletion of your account/data, subject to statutory record-keeping obligations.

7. Contact Information & Data Inquiries

For queries, data access requests, or complaints regarding this Privacy Policy, contact:

• Company Name: Flowers Everywhere
• Address: No 25,27 Bankshall Street, Colombo 11
• Email: flowercentre@gmail.com
• Phone/WhatsApp: +94 77 788 8870