Privacy Policy

Prestige Flowers Singapore ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore and international data protection standards including the General Data Protection Regulation (GDPR).

1. Information We Collect

1.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email address, phone number, mailing address)
• Delivery information for recipients
• Payment information (processed securely through third-party payment processors)
• Order history and preferences
• Communication preferences

1.2 Automatically Collected Information

When you access our website, we may automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, links clicked)
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Sending marketing communications (with your consent)
• Improving our website and services
• Complying with legal obligations
• Preventing fraud and ensuring security

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: Processing necessary to fulfill our contract with you
• Legitimate Interest: Processing necessary for our legitimate business interests
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required by law

4. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist us (payment processors, delivery services)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you authorize us to share your information

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure payment processing through PCI-DSS compliant providers
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

6. Your Rights

6.1 Singapore (PDPA) Rights

Under the PDPA, you have the right to:

• Access your personal data
• Correct inaccurate personal data
• Withdraw consent for marketing communications
• Request information about how your data is used

6.2 GDPR Rights (EEA Users)

If you are in the EEA, you have additional rights:

• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Singapore. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities, to protect your personal data during international transfers.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. For more information, please refer to our Cookie Policy.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: