Rainforest Petals Privacy Policy

At Rainforest Petals, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect the information you provide when using our site and services. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

We collect various types of information from and about users of our online platform and services, including:

• Personal Data You Provide Directly: This includes information you give us when you register for an account, place an order, subscribe to our newsletter, participate in workshops, or contact us. This may include your name, shipping address, billing address, email address, phone number, payment information (processed by secure third-party payment processors), and any specific delivery instructions or gift messages.
• Transaction Data: Details about the products and services you have purchased from us.
• Communication Data: Records of your correspondence with us, including emails, chat conversations, and phone calls.
• Usage Data: Information about how you access and use our site, such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This helps us understand how users interact with our online platform.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

2. How We Use Your Information

We use the information we collect for various purposes, primarily based on the legal bases of contract performance, legitimate interests, and consent:

• To Provide Services: To process your orders for fresh cut flowers, floral arrangements, plants, workshop bookings, and floral subscriptions, including national and international delivery. This involves sharing your delivery details with our trusted delivery partners.
• To Communicate With You: To send order confirmations, delivery updates, respond to your inquiries, and provide customer support.
• For Marketing & Promotions: With your consent, to send you newsletters, promotional offers, and information about new products or workshops we think you might be interested in. You can opt-out at any time.
• To Improve Our Services: To analyze usage patterns, personalize your experience on our site, and improve the functionality, offerings, and user experience of our online platform.
• For Security and Fraud Prevention: To detect and prevent fraud, unauthorized access, and other malicious activities.
• To Comply with Legal Obligations: To meet our legal and regulatory requirements.

3. Disclosure of Your Information

We may share your personal information with third parties in the following circumstances:

• Service Providers: We use trusted third-party service providers to perform functions on our behalf, such as payment processing, order fulfillment, delivery services, website hosting, analytics, and marketing assistance. These providers only have access to personal information necessary to perform their functions and are contractually obligated to maintain its confidentiality and security.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• With Your Consent: We may share your information for any other purpose disclosed to you at the time we collect the information or with your explicit consent.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data from accidental loss, unauthorized access, use, alteration, or disclosure. This includes using SSL encryption for data transmission, securing our servers, and regularly reviewing our security practices. However, no internet transmission is entirely secure, and we cannot guarantee absolute security of your information.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Data Protection Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.

7. Cookies

Our site uses cookies to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small data files stored on your device. We use both session cookies (which expire when you close your browser) and persistent cookies (which stay on your device until they expire or you delete them). You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the site.

8. Third-Party Websites

Our site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personally identifiable information from anyone under 16 years of age. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise any of your rights, please contact us: