Privacy Policy

1. Introduction

This Privacy Policy explains how Flowertime Zeng (“we”, “our”, “us”) collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR). If you have any questions, please contact us at +47 992 63 558.

2. Data We Collect

We may collect the following types of personal data:

Order information: Name, address, email, phone number.
Payment details: Payments are processed securely by third-party providers (Nets / Stripe / Vipps / PayPal). We do not store full card details.
Delivery information: Shipping address and contact details required for logistics.
Technical data: IP address, browser type, cookies, and analytics information.

3. Purpose of Processing

We process personal data for the following purposes:

To process and deliver orders
To handle payments and invoicing
To provide customer support
To comply with legal and accounting obligations
With consent: to send newsletters or marketing communications
To maintain website security and prevent fraud

4. Legal Basis for Processing

We rely on the following legal grounds under GDPR:

Contract: Processing necessary to fulfill your order.
Legal obligation: Compliance with accounting and tax regulations.
Consent: For marketing or newsletter subscriptions.
Legitimate interest: Website security, business analysis, prevention of misuse.

5. Data Storage & Retention

Order-related information is stored for 5 years in accordance with accounting laws.
Marketing data is kept until you unsubscribe or withdraw consent.
Technical data (cookies/analytics) is stored for up to 26 months or as required by law.

6. Sharing of Data

We do not sell your personal data. We only share information with trusted third parties when necessary:

Payment providers (Nets, Stripe, Vipps, PayPal)
Shipping and logistics companies (Posten, DHL, Bring, etc.)
IT and hosting providers (e.g. WordPress, ChemiCloud)
Public authorities when required by law

7. Data Security

We use secure servers, SSL encryption, and industry-standard technical and organizational measures to protect your data. Payment transactions are handled by PCI-DSS certified providers. Access to personal data is restricted to authorized personnel only.

8. Cookies & Tracking

Our website uses cookies for functionality, analytics, and (if applicable) marketing purposes. You can disable cookies in your browser settings, but some features may not function properly.

9. Your Rights

Under GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing of your data
Data portability (receive a copy in a portable format)
Object to processing, including for direct marketing

To exercise these rights, please contact us at [Email].

10. International Transfers

If data is transferred outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) to maintain GDPR compliance.

11. Complaints

If you believe your data has been misused, you may contact us directly or file a complaint with the Norwegian Data Protection Authority (Datatilsynet).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

13. Contact Information

Flowertime Zeng
Org.nr: 934 609 182
Address: Fisker Syversens vei 10, 0198 Oslo, Norway
Phone: +47 992 63 558