Privacy policy
The controller. Evelena Bloom S.R.L., tax ID RO41666856, registered office at Str. Poligonului nr. 2, Sp. C5, Ploiești, Prahova County, processes the personal data of customers and recipients in accordance with Regulation (EU) 2016/679 (GDPR). Contact for personal data: boutiqcuflori@gmail.com, +40 760 993 439.
What data we process and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Customer's name, email, phone, billing address | taking and paying for the order, the invoice, communication about the order | performance of a contract (para. 1(b)) |
| Recipient's name, phone, address; the card message | delivering and handing over the flowers | performance of a contract and legitimate interest in delivering ((b) and (f)) |
| Invoice data and payment history | accounting and tax records | legal obligation ((c)) |
| Customer account (email, encrypted password, previous orders) | quick access to orders and saved addresses | performance of a contract ((b)) |
| Chat or email messages | answering questions and complaints | legitimate interest ((f)) |
| Browsing data and cookies | site operation (cart, account, payment) and, only with your consent, visit statistics | see the Cookie policy |
We receive the recipient's details from the customer. The customer confirms they are entitled to share them with us for delivery. We do not use the recipient's data for any other purpose.
Who we share data with. Only the providers we need for the order, acting as processors: Wix.com (shop platform, website hosting, accounts, chat), Stripe (card payment processing), the couriers (flower delivery), the invoicing provider, the company's accountant and the authorities, when required by law. Some providers process data outside the European Economic Area; in that case the transfer is based on European Commission adequacy decisions or standard contractual clauses.
How long we keep data. Order data, for as long as needed for delivery and complaints. Invoices and other accounting documents containing your data are kept for 5 years, counted from 1 July of the year following the one in which they were issued, as required by Accounting Law no. 82/1991. We keep the customer account until you delete it.
Your rights. You have the right of access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent, under GDPR art. 15–22. Write to us at boutiqcuflori@gmail.com; we reply within one month at most. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).
Statistics only with your consent. If you choose “Accept” in the cookie banner, we use Wix Analytics to count visits and pages viewed. We do not use advertising tools (for example Meta Pixel) and we do not profile visitors.
Security. The website uses an encrypted connection (HTTPS). Card details are entered directly on the secure payment page and never reach us.
Minors. The website is not intended for people under 18.
Last updated: 22 October 2026.