Privacy Policy for Estuary Petals

Introduction

Estuary Petals is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, process, and disclose your information when you visit our online platform, purchase our products, utilize our services, or interact with us. Our services include fresh flower arrangements, bespoke bouquet creation, plant sales, floral subscriptions, event floral styling, wedding floristry, corporate floral services, delivery services, and floristry workshops.

Information We Collect

We collect various types of information to provide and improve our services, including:

• Personal Identification Information: Name, shipping address, billing address, email address, phone number, and payment details when you make a purchase or subscribe to our services.
• Recipient Information: If you send a gift or arrangement, we collect the recipient's name, address, and contact information to fulfill the order. We assume you have the recipient's consent to provide their details.
• Order Details: Information related to your purchases, preferences for floral designs, event planning details, and any special requests.
• Communications: Records of your interactions with us, such as emails, chat messages, or phone calls, for customer service and support.
• Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access our site.
• Usage Data: Information about how you use our online platform, products, and services.

How We Use Your Information

We use the information we collect for various purposes, including:

• To Fulfill Orders: Processing and delivering your floral orders, managing subscriptions, and providing event styling services.
• Customer Service: Responding to your inquiries, providing support, and communicating updates about your orders or services.
• Personalization: Customizing your experience on our online platform and offering products and services tailored to your preferences.
• Marketing and Promotions: Sending you information about our new products, special offers, workshops, and events, where you have consented to receive such communications.
• Website Improvement: Analyzing usage patterns to improve the functionality and user experience of our online platform.
• Legal and Security: Complying with legal obligations, preventing fraud, and ensuring the security of our services.

Legal Basis for Processing Personal Data

We will only process your personal data when we have a lawful basis to do so. This includes:

• Performance of a Contract: When processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., fulfilling your orders).
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, and your interests and fundamental rights do not override those interests (e.g., improving our services, preventing fraud).
• Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You have the right to withdraw consent at any time.
• Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

Sharing Your Information

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service Providers: Third-party vendors who provide services on our behalf, such as payment processing, delivery services, website hosting, analytics, and marketing assistance. These service providers are obligated to protect your information and use it only for the purposes for which it was disclosed.
• Legal Compliance: When required by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new entity.

International Data Transfers

As Estuary Petals operates within Singapore, your data will primarily be processed within Singapore. However, some of our third-party service providers may operate globally, meaning your data may be transferred to, and stored at, a destination outside of Singapore. When this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Data Security

We have implemented appropriate technical and organizational security measures designed to protect your personal data from accidental loss, unauthorized access, misuse, alteration, or disclosure. These measures include data encryption, firewalls, and secure access controls. Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure ( "Right to be Forgotten"): To request the deletion or removal of your personal data under certain circumstances.
• Right to Restrict Processing: To request that we suspend the processing of your personal data under certain circumstances.
• Right to Data Portability: To request your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: To object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
• Right to Withdraw Consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below.

Third-Party Links

Our online platform may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Estuary Petals