Effective from 30 October 2026
1. Our commitment
DANA Flor is the controller and processor of the personal data you provide when buying flowers. This policy explains what we collect, why, and your rights under Vietnam's Decree 13/2023/ND-CP on personal data protection.
2. Data we collect
- Buyer details: name, phone number, email and account details (if any).
- Recipient details: name, phone number, delivery address, card message and delivery notes.
- Order and payment data: products, amounts, order code, and the transfer time and note sent by the bank/SePay for reconciliation. We never collect card numbers, banking passwords or OTP codes.
- Technical data: cookies, IP address, device and browser type, used to run and secure the website.
3. Why we use it
- To arrange and deliver your order, send bouquet approval photos and order updates.
- To confirm payment and meet accounting and tax obligations.
- To provide customer care and handle complaints, remakes and refunds.
- To prevent fraud and keep our systems secure.
- To send offers or occasion reminders only with your consent, which you can withdraw at any time.
4. Legal basis
We process data based on your consent when ordering, to perform our sales contract with you, and to comply with legal obligations.
5. Recipients' data
When you give us a recipient's details you confirm they agreed or that you are otherwise entitled to share them. We only use them to deliver flowers and contact them about that delivery.
7. Retention
Order data is kept as long as needed to serve you and for the periods required by accounting and tax law. Account data is kept until you ask us to delete it. Afterwards data is deleted or anonymised.
8. Your rights
Under Decree 13/2023/ND-CP you have the right to:
- Be informed about processing, and give or withdraw consent.
- Access, correct and obtain a copy of your personal data.
- Request deletion, restrict processing or object to processing.
- Complain, report, take legal action and claim compensation as provided by law.
10. Security
The site uses HTTPS encryption, passwords are one-way hashed and internal access is role-based. If a data breach occurs we will notify the authorities and affected people as required by law.
11. Children
Our service is for people aged 16 and over. If you are under 16, please order with a parent or guardian.
12. Contact and updates
To exercise these rights or ask about your data, email [email protected] or call 0901 234 567. We respond within the time limits set by law.
We may update this policy; the effective date at the top shows the current version.