Free delivery in Chișinău over 700 MDL · Same-day delivery available
RUROEN

Privacy Policy

This Privacy Policy explains how Valeriia Flowers collects, uses, stores and protects your personal data when you visit our website, place an order or contact us. We are committed to processing your data lawfully, fairly and transparently, and to respecting your privacy. Please read this policy together with our Cookie Policy, Terms of Service and Return & Refund Policy.

1. Introduction and Data Controller

The controller responsible for your personal data is:

  • Valeriia Flowers (legal entity: Societatea cu Răspundere Limitată «VALERIIA FLOWERS»), a floristry and flower delivery studio.
  • IDNO: 1025600033947
  • Registered address: bd. Mircea cel Bătrân 43, sector Ciocana, MD-2075, mun. Chișinău, Republica Moldova
  • Address: bd. Mircea cel Bătrân 43B, sector Ciocana, Chișinău, MD-2075, Republica Moldova.
  • Email: [email protected]
  • Phone / WhatsApp / Viber: +373 79 43 49 55
  • Website: valeriiaflowers.md (available 24/7).

We process personal data in accordance with the Law of the Republic of Moldova No. 133 of 08.07.2011 on the Protection of Personal Data (replaced from 23 August 2026 by Law No. 195 of 25 July 2024, which transposes EU Regulation 2016/679) and, for data subjects located in the European Union (we serve diaspora customers in the EU), the EU General Data Protection Regulation 2016/679 (GDPR).

2. What Personal Data We Collect

We collect only the data we need to fulfil your order and operate our service:

Order and contact data

  • Your name, phone number and email address (email is optional);
  • Delivery address, and the recipient's name and phone number;
  • Requested delivery date and time;
  • The text of your greeting card or message.

Payment data

Payments are processed by the PayNet payment system. Your bank card details are never stored by or visible to our shop — they are handled entirely by PayNet. We only retain the payment status, the amount, and the PayNet transaction identifiers.

AI chat assistant data

When you use our AI chat assistant, we process the text of the messages you send and a random session identifier stored in your browser's local storage (key vf-chat-sid). Your messages are transmitted to the OpenRouter service to generate the AI response.

Technical data

IP address, browser and device information, and access logs, collected through our hosting provider (DigitalOcean) and our CDN/security provider (Cloudflare).

Browser local storage (not tracking cookies)

Your shopping cart (vf_cart), your wishlist / favourites (vf_wish) and your chat session (vf-chat-sid).

Newsletter

If you subscribe, we collect your email address.

Important: we use Google Analytics 4 and Google Ads, but only after you consent to analytics and advertising cookies — until then they store nothing and send no identifiers (Google Consent Mode v2). We use no Yandex.Metrica, Facebook Pixel or comparable tracker, and we do not sell or share your data with third parties for their own marketing. See our Cookie Policy for the full list and for how to withdraw consent.

2.7. The recipient's data

When the bouquet is meant for someone else, we process their name, phone number and delivery address, along with the card message. We receive this data not from the recipient but from the Buyer placing the order.

  • Why: solely to hand over the order — to reach the recipient, agree a time and deliver the bouquet.
  • Legal basis: the legitimate interest of the Buyer and ourselves in delivering the gift to its addressee (Art. 6(1)(f) GDPR / Art. 5 of Moldovan Law No. 133 / Art. 6 of Law No. 195/2024).
  • Who we share it with: only the courier carrying out the delivery.
  • How long we keep it: as part of the order record — for as long as accounting and tax obligations require.
  • What we do NOT do: we do not add the recipient to any mailing list, do not use their contacts for advertising and do not pass them to anyone except the courier.

The recipient has every data-subject right listed in section 7 — including the right to learn where we obtained their data, to have it corrected or erased, and to object to the processing. Writing to [email protected] is enough. We also ask the Buyer to make sure they are entitled to give us the recipient's contact details.

3. Purposes of Processing and Legal Bases

We process your personal data for the following purposes, each on the legal basis indicated (Article 6 GDPR / Article 5 of Law No. 133, from 23.08.2026 No. 195/2024):

  • Placing, paying for and delivering your order, and providing customer support — performance of a contract.
  • Sending order confirmations and status updates by email — performance of a contract.
  • Answering chat messages and enquiries — pre-contractual measures / legitimate interest.
  • Sending newsletters, news and promotions — your consent, which you may withdraw at any time.
  • Security, fraud prevention and keeping logs — legitimate interest.
  • Accounting, tax and legal obligations (invoices, reporting) — legal obligation.

4. Who We Share Your Data With

We share your data only with the processors listed below, and only to the extent necessary for their function:

  • PayNet (paynet.md) — payment processing (Moldova).
  • Resend (resend.com) — delivery of transactional emails.
  • OpenRouter (openrouter.ai) — processing of AI chat messages.
  • Cloudflare — CDN, security and DDoS protection.
  • DigitalOcean — server hosting (data storage).
  • Courier / delivery service — receives the recipient's name, address and phone number in order to complete delivery.

We do not sell your personal data and we do not use advertising or analytics trackers.

5. International Data Transfers

Some of our processors (Resend, OpenRouter, Cloudflare) may process data outside Moldova or the EU. Such transfers are protected by the relevant processors' data processing terms and standard contractual clauses.

6. Data Retention Periods

  • Order data — kept for as long as necessary to fulfil the order and to comply with accounting and tax obligations (several years, as required by law).
  • Chat conversations — kept for a limited period for quality and support purposes.
  • Newsletter subscription — kept until you unsubscribe.
  • Technical logs — kept for a short period.

7. Your Rights

Subject to the applicable law (Articles 15–22 GDPR / Law No. 133, from 23.08.2026 No. 195/2024), you have the right to:

  • access your personal data;
  • have inaccurate data corrected (rectification);
  • have your data erased (the «right to be forgotten»);
  • obtain restriction of processing;
  • data portability;
  • object to the processing of your data;
  • withdraw your consent at any time;
  • not be subject to a decision based solely on automated processing that produces legal effects concerning you;
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable period in accordance with the law.

8. Automated Decision-Making and Profiling

Our AI chat assistant helps you find and choose products, but it does not make decisions that produce legal effects or similarly significantly affect you. We do not carry out automated decision-making with legal consequences.

9. Data Security

We take appropriate measures to protect your data, including:

  • encrypted connections over HTTPS/TLS;
  • access controls;
  • the use of vetted processors;
  • card data protected on PayNet's side in accordance with the PCI DSS standard.

10. Children

Our service is not intended for persons under the age of 18. We do not knowingly collect personal data from minors.

11. Cookies and Local Storage

We do not use advertising or analytics cookies. We use:

  • Functional local storage: vf_cart (shopping cart), vf_wish (favourites) and vf-chat-sid (chat session);
  • Technical / security cookies from Cloudflare (for example __cf_bm, cf_clearance), which are necessary for the security and operation of the website.

You can manage or clear these through your browser settings. For more details, please see our Cookie Policy.

12. Supervisory Authority

If you believe your rights have been infringed, you may lodge a complaint with the supervisory authority. In Moldova this is the National Centre for Personal Data Protection of the Republic of Moldova (Centrul Național pentru Protecția Datelor cu Caracter Personal, CNPDCP), Chișinău — website datepersonale.md. If you are resident in the EU, you may also contact the supervisory authority of your country.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, and the «Last updated» date below will be revised accordingly. We encourage you to review this policy periodically.

14. Data Protection Contacts

If you have any questions about this policy or about how we handle your personal data, please contact us:

  • Valeriia Flowers, bd. Mircea cel Bătrân 43B, sector Ciocana, Chișinău, MD-2075, Republica Moldova;
  • Email: [email protected];
  • Phone / WhatsApp / Viber: +373 79 43 49 55.

Last updated: 25 July 2026

Related documents