Privacy Policy

1. Who operates the site

The website missflowers.md is operated under the name MissFlowers.

You can contact us at: address — 45 Mircea cel Bătrân Blvd., Chișinău, Republic of Moldova; phone — +373 67 269 512; email — contact@missflowers.md.

Data processing is carried out in accordance with Law No. 195/2024 on personal data protection and other applicable norms of the Republic of Moldova.

2. What data we may process

Do not include sensitive data or information that is not needed to fulfil the order in the greeting or delivery instructions.

• the customer's first and last name;
• phone number and email address;
• the recipient's name and phone number;
• delivery address, date and requested time slot;
• the ordered products, order value, discounts and payment method;
• payment status and transaction identifier, without storing full card data;
• the greeting message and delivery instructions;
• the anonymous delivery option;
• the content of messages sent via the form, phone, email or other channels shown on the site;
• information needed for invoicing and handling complaints;
• technical data needed for the operation and security of the site, such as IP address, date and time of access, and general information about the browser or device;
• cookie preferences.

3. Recipient data

If you place an order for another person, you provide us with the recipient's data so we can make the delivery. The customer must provide only the necessary information, make sure it is correct, and have a legitimate reason for sharing it with us.

For anonymous delivery, MissFlowers may know the customer's identity in order to process the order, but will not disclose it to the recipient, except where required by law, necessary for security, or needed to handle a complaint.

4. Why we use the data

Order data is not automatically used for newsletters or advertising without a separate legal basis.

• creating and managing the cart and the order;
• confirming product availability;
• processing the payment;
• preparing, personalising and delivering the order;
• contacting the customer or the recipient regarding the delivery;
• issuing accounting documents;
• handling cancellations, refunds and complaints;
• answering questions sent via the form or other channels;
• preventing fraud and protecting the site;
• complying with legal obligations and defending MissFlowers' rights;
• sending promotional communications only if consent or another appropriate legal basis exists;
• measuring site usage only after optional cookies are accepted, if such tools are used.

5. Legal bases for processing

Depending on the situation, processing is based on:

• the steps requested by the customer before entering into the contract;
• the performance of the order and of the sale and delivery contract;
• the fulfilment of legal obligations, including accounting and tax obligations;
• the legitimate interest to respond to requests, secure the site, prevent fraud and defend our rights;
• consent, where required for optional cookies, marketing or external services.

6. To whom the data may be transferred

The data is not sold and is not provided to other persons for their own advertising.

• authorised persons within MissFlowers;
• couriers or persons performing the delivery;
• the bank and the payment processor for online payments;
• hosting, maintenance, security, email and other IT service providers;
• accounting or consulting providers;
• providers of external services accepted by the user, if any exist on the site;
• public authorities, when disclosure is required by law.

7. Online payments

When paying by card, the data needed to authorise the payment is entered and processed in the secure environment of the bank or payment processor. MissFlowers receives the information needed to confirm the transaction, such as payment status, amount and transaction identifier, but does not receive or store the full card number, CVV code or banking authentication data.

8. Transfers to other countries

Some technical providers may process data in other countries. If such services are used, MissFlowers will apply the measures required by law and provide information about the relevant providers. Optional services that require consent are not loaded before the user makes a choice.

9. How long we keep the data

After the applicable period expires, the data is deleted, anonymised or archived when the law requires retention.

• requests that do not lead to an order: generally no more than 12 months from the last communication;
• order, payment and accounting data: for as long as needed to fulfil the order, then according to the applicable legal retention periods;
• recipient data and delivery instructions: as long as needed for the delivery, handling any complaints and complying with legal obligations;
• complaint or dispute correspondence: until resolution and expiry of legal deadlines;
• technical security logs: for a limited period needed to protect the site;
• cookie preference: 180 days;
• data used for marketing: until consent is withdrawn or the legal basis ends.

10. Data security

We apply appropriate technical and organisational measures to protect the data against unauthorised access, loss, alteration or unlawful disclosure. Access is limited to persons who need the data to perform their duties.

11. Your rights

You may also lodge a complaint with the National Centre for Personal Data Protection or apply to the competent court.

To exercise your rights, write to contact@missflowers.md or call +373 67 269 512. We may request reasonable information to verify the requester's identity.

• information about and access to your personal data;
• rectification of inaccurate data;
• erasure of the data;
• restriction of processing;
• objection to certain processing;
• data portability, where applicable;
• withdrawal of consent, without affecting processing carried out before the withdrawal.

12. Policy updates

The policy may be updated if the site, the services used or the legal requirements change. The current version and the update date are published on this page.