Free delivery in Chișinău over 700 MDL · Same-day delivery available
RUROEN

Privacy Policy

This Privacy Policy explains how Valeriia Flowers collects, uses, stores and protects your personal data when you visit our website, place an order or contact us. We are committed to processing your data lawfully, fairly and transparently, and to respecting your privacy. Please read this policy together with our Cookie Policy, Terms of Service and Return & Refund Policy.

1. Introduction and Data Controller

The controller responsible for your personal data is:

  • Valeriia Flowers (legal entity: SRL «Valeriia Flowers»), a floristry and flower delivery studio.
  • Address: str. Mircea cel Bătrân 43, sector Ciocana, Chișinău, MD-2075, Republica Moldova.
  • Email: [email protected]
  • Phone / WhatsApp / Viber: +373 79 43 49 55
  • Website: valeriiaflowers.md (available 24/7).

We process personal data in accordance with the Law of the Republic of Moldova No. 133 of 08.07.2011 on the Protection of Personal Data and, for data subjects located in the European Union (we serve diaspora customers in the EU), the EU General Data Protection Regulation 2016/679 (GDPR).

2. What Personal Data We Collect

We collect only the data we need to fulfil your order and operate our service:

Order and contact data

  • Your name, phone number and email address (email is optional);
  • Delivery address, and the recipient's name and phone number;
  • Requested delivery date and time;
  • The text of your greeting card or message.

Payment data

Payments are processed by the PayNet payment system. Your bank card details are never stored by or visible to our shop — they are handled entirely by PayNet. We only retain the payment status, the amount, and the PayNet transaction identifiers.

AI chat assistant data

When you use our AI chat assistant, we process the text of the messages you send and a random session identifier stored in your browser's local storage (key vf-chat-sid). Your messages are transmitted to the OpenRouter service to generate the AI response.

Technical data

IP address, browser and device information, and access logs, collected through our hosting provider (DigitalOcean) and our CDN/security provider (Cloudflare).

Browser local storage (not tracking cookies)

Your shopping cart (vf_cart), your wishlist / favourites (vf_wish) and your chat session (vf-chat-sid).

Newsletter

If you subscribe, we collect your email address.

Important: our website does not use advertising networks, does not use analytics trackers (there is no Google Analytics, Yandex.Metrica, Facebook Pixel or similar), and we do not sell or share your data with third parties for marketing purposes.

3. Purposes of Processing and Legal Bases

We process your personal data for the following purposes, each on the legal basis indicated (Article 6 GDPR / Article 5 of Law No. 133):

  • Placing, paying for and delivering your order, and providing customer support — performance of a contract.
  • Sending order confirmations and status updates by email — performance of a contract.
  • Answering chat messages and enquiries — pre-contractual measures / legitimate interest.
  • Sending newsletters, news and promotions — your consent, which you may withdraw at any time.
  • Security, fraud prevention and keeping logs — legitimate interest.
  • Accounting, tax and legal obligations (invoices, reporting) — legal obligation.

4. Who We Share Your Data With

We share your data only with the processors listed below, and only to the extent necessary for their function:

  • PayNet (paynet.md) — payment processing (Moldova).
  • Resend (resend.com) — delivery of transactional emails.
  • OpenRouter (openrouter.ai) — processing of AI chat messages.
  • Cloudflare — CDN, security and DDoS protection.
  • DigitalOcean — server hosting (data storage).
  • Courier / delivery service — receives the recipient's name, address and phone number in order to complete delivery.

We do not sell your personal data and we do not use advertising or analytics trackers.

5. International Data Transfers

Some of our processors (Resend, OpenRouter, Cloudflare) may process data outside Moldova or the EU. Such transfers are protected by the relevant processors' data processing terms and standard contractual clauses.

6. Data Retention Periods

  • Order data — kept for as long as necessary to fulfil the order and to comply with accounting and tax obligations (several years, as required by law).
  • Chat conversations — kept for a limited period for quality and support purposes.
  • Newsletter subscription — kept until you unsubscribe.
  • Technical logs — kept for a short period.

7. Your Rights

Subject to the applicable law (Articles 15–22 GDPR / Law No. 133), you have the right to:

  • access your personal data;
  • have inaccurate data corrected (rectification);
  • have your data erased (the «right to be forgotten»);
  • obtain restriction of processing;
  • data portability;
  • object to the processing of your data;
  • withdraw your consent at any time;
  • not be subject to a decision based solely on automated processing that produces legal effects concerning you;
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable period in accordance with the law.

8. Automated Decision-Making and Profiling

Our AI chat assistant helps you find and choose products, but it does not make decisions that produce legal effects or similarly significantly affect you. We do not carry out automated decision-making with legal consequences.

9. Data Security

We take appropriate measures to protect your data, including:

  • encrypted connections over HTTPS/TLS;
  • access controls;
  • the use of vetted processors;
  • card data protected on PayNet's side in accordance with the PCI DSS standard.

10. Children

Our service is not intended for persons under the age of 18. We do not knowingly collect personal data from minors.

11. Cookies and Local Storage

We do not use advertising or analytics cookies. We use:

  • Functional local storage: vf_cart (shopping cart), vf_wish (favourites) and vf-chat-sid (chat session);
  • Technical / security cookies from Cloudflare (for example __cf_bm, cf_clearance), which are necessary for the security and operation of the website.

You can manage or clear these through your browser settings. For more details, please see our Cookie Policy.

12. Supervisory Authority

If you believe your rights have been infringed, you may lodge a complaint with the supervisory authority. In Moldova this is the National Centre for Personal Data Protection of the Republic of Moldova (Centrul Național pentru Protecția Datelor cu Caracter Personal, CNPDCP), Chișinău — website datepersonale.md. If you are resident in the EU, you may also contact the supervisory authority of your country.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, and the «Last updated» date below will be revised accordingly. We encourage you to review this policy periodically.

14. Data Protection Contacts

If you have any questions about this policy or about how we handle your personal data, please contact us:

  • Valeriia Flowers, str. Mircea cel Bătrân 43, sector Ciocana, Chișinău, MD-2075, Republica Moldova;
  • Email: [email protected];
  • Phone / WhatsApp / Viber: +373 79 43 49 55.

Last updated: 25 July 2026

Related documents