Privacy Policy for Northblomst global flower delivery
This Privacy Policy explains how Northblomst collects, uses, stores, shares and protects personal information when customers visit our website, place flower orders, send gifts internationally, contact customer support, subscribe to marketing or use our online flower delivery services.
1. Who we are
Northblomst is an online flower shop offering flower delivery, bouquets, roses, sympathy flowers, funeral flowers, gift baskets and add-ons in Denmark and selected international destinations where local florist and delivery capacity is available.
In this Privacy Policy, “Northblomst”, “we”, “us” and “our” refer to the company responsible for operating the website and processing personal information for orders and customer services.
[TODO: legal company name]
[TODO: company address]
[TODO: CVR / company number]
[TODO: privacy email]
2. Personal information we collect
We collect personal information that customers provide directly, information collected automatically when using our website, and information received from service providers where necessary to process orders, delivery and support.
Information you provide
- Name, email address and phone number
- Billing address and delivery address
- Recipient name, recipient phone number and recipient address
- Order details, selected products, card messages and delivery notes
- Company name, if ordering for a business
- Customer support messages and communication history
- Marketing subscription preferences
Information collected automatically
- IP address, browser type, device type and approximate technical location
- Pages visited, referral source, cart and checkout activity
- Cookie identifiers, analytics data and advertising interaction data
- Security, fraud prevention and website performance data
3. How we use personal information
We use personal information to operate our website, process orders, arrange flower delivery, provide customer support, improve services and comply with legal obligations.
- To receive, process and confirm orders
- To prepare bouquets, flowers, gift baskets and add-ons
- To arrange delivery to the recipient
- To contact the customer about the order
- To contact the recipient if needed for delivery
- To handle substitutions, availability changes or delivery issues
- To process payments, refunds and chargebacks
- To send order confirmations and delivery updates
- To provide customer support
- To prevent fraud, misuse and security issues
- To improve the website, products and customer experience
- To send marketing emails where permitted
- To comply with accounting, tax, legal and regulatory requirements
4. Legal bases for processing
Where GDPR, UK GDPR or similar privacy laws apply, we rely on one or more legal bases depending on the situation.
To process, prepare and deliver your order.
To operate, improve and protect our business, provide support and prevent fraud.
For marketing, optional cookies or optional communications where required.
For tax, accounting, consumer protection, fraud prevention and regulatory duties.
5. Payments, Shopify and ecommerce providers
Payments are processed by secure third-party payment providers. Northblomst does not store your full payment card number.
Payment providers may process card details, billing address, transaction amount, authentication data and fraud prevention information. Their processing may be subject to their own privacy policies and security standards.
Our online store may be hosted and operated through Shopify or other ecommerce technology providers. These providers help us run the website, manage products, process orders, operate checkout, prevent fraud, provide analytics and manage customer interactions.
6. Florists, delivery partners and fulfilment partners
To complete orders, we may share necessary order and delivery information with selected florists, local flower partners, couriers, delivery companies, fulfilment partners or customer support providers.
- Customer name and contact details
- Recipient name and contact details
- Delivery address and delivery date
- Product ordered and order reference
- Card message and delivery notes
- Special instructions needed to complete delivery
For international flower delivery, the order may be fulfilled by local florist capacity in or near the delivery destination where available. Delivery availability depends on country, city, local area, season, product availability and local delivery capacity.
7. Marketing, cookies and tracking technologies
If you subscribe to our newsletter, accept marketing cookies or otherwise give permission, we may send emails, offers, updates, seasonal campaigns and product recommendations.
You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us.
Cookies may include
- Strictly necessary cookies
- Performance and analytics cookies
- Functional cookies
- Advertising and marketing cookies
- Security and fraud prevention cookies
We may use analytics and advertising tools such as Google Analytics, Google Ads, Meta/Facebook Pixel, TikTok Pixel, Pinterest, Klaviyo or similar providers, depending on our current setup.
8. International transfers
Northblomst operates internationally and may use service providers, technology platforms, florists, delivery partners and support tools located in different countries.
This means personal information may be transferred to, stored in or processed in countries outside your own country, including countries outside the European Economic Area.
- Data processing agreements
- Standard contractual clauses where required
- Adequacy decisions where applicable
- Security measures and access controls
- Processor obligations and confidentiality requirements
9. Retention and security
We keep personal information only for as long as reasonably necessary for order processing, delivery support, customer service, accounting, tax, legal, fraud prevention and business record purposes.
- Order and invoice records are kept as required by accounting and tax laws.
- Customer support messages are kept as long as needed to resolve issues and protect business interests.
- Marketing subscription data is kept until you unsubscribe or request deletion, unless legally required otherwise.
- Cookie and analytics data are kept according to cookie settings and provider retention periods.
- Fraud prevention records are kept as necessary to protect customers and the business.
We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
10. Your privacy rights
Depending on your location and applicable law, you may have rights over your personal information.
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request restriction of processing
- Object to processing
- Request data portability
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
- Complain to a data protection authority
- Request information about sharing of your personal information
11. Regional privacy notices
EU, EEA and United Kingdom
If you are located in the European Union, European Economic Area or United Kingdom, you may have rights under GDPR or UK GDPR, including access, correction, deletion, restriction, portability, objection and withdrawal of consent.
California
If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These may include the right to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights.
Northblomst does not sell personal information in the traditional sense. However, certain advertising or analytics cookies may be considered “sharing” under California privacy law. Where required, you may opt out through cookie settings or by contacting us.
Canada
If you are located in Canada, you may have rights under Canadian privacy laws, including access and correction rights where appropriate.
Brazil
If you are located in Brazil, you may have rights under Brazilian data protection law, including rights to confirm processing, access data, correct incomplete or inaccurate data, request anonymization, blocking or deletion where applicable, request portability, receive information about sharing and withdraw consent where applicable.
12. Recipient privacy, card messages and reviews
When a customer sends flowers or gifts to a recipient, we process recipient information only to prepare, deliver and support the order. The recipient may be contacted if necessary to complete delivery, confirm address details or resolve delivery issues.
We do not use recipient information for marketing unless the recipient separately gives permission.
Customers may add personal messages and delivery notes to orders. Please do not include unnecessary sensitive information, confidential business information, medical details or highly private information in card messages or delivery notes.
If you submit a review, testimonial, photo, comment or social media mention, we may use it to improve or promote our services where permitted by law and platform rules.
13. Privacy FAQ
Does Northblomst store my full card number?
No. Payments are processed by secure third-party payment providers. Northblomst does not store your full payment card number.
Why do you collect recipient information?
We collect recipient information so florists and delivery partners can prepare and deliver the order to the correct person and address.
Do you share my order with local florists?
Yes, where necessary. To complete flower delivery, we may share necessary order details with florists, couriers, fulfilment partners or local delivery partners.
Can I ask you to delete my personal information?
You may request deletion depending on your location and applicable law. Some data may need to be kept for legal, tax, accounting, fraud prevention or order-related reasons.
Can recipients receive marketing emails?
No, not unless the recipient separately gives permission. Recipient information is used for delivery and order support.
Do you use cookies?
Yes. We use cookies for website operation, cart and checkout functionality, analytics, security and marketing where permitted.
Do you process data internationally?
Yes. Because Northblomst operates globally and uses international platforms and partners, personal information may be processed in different countries with appropriate safeguards where required.
14. Contact us
For privacy questions, requests or complaints, contact:
Northblomst / [TODO: legal company name]
[TODO: privacy email]
[TODO: company address]
Northblomst.com
Northblomst protects customer and recipient information
We use personal information to process orders, arrange flower delivery, support customers, improve our services and comply with legal obligations.