Last updated 10 Nov 2026 · Operated by [Registered business name] (trading as Flowernet)
1. Who is responsible
[Registered business name], trading as Flowernet, [Registered office address], [City], Pakistan, is responsible for your personal data. Contact: [email protected].
2. What we collect
- Account details: name, email, password (stored only as a secure hash), phone number and city if you add them.
- Orders and payments: what you bought, amounts, receipts; for payments, the method, the mobile number you entered for JazzCash/Easypaisa, the payment reference and the account title our payment provider reports. We never receive your PIN, OTP, card number or banking password.
- Project information: briefs, files and messages you send us to deliver a service.
- Support: messages you send us and our replies.
- Security logs: IP address, browser type, sign-in times and actions on your account, to keep accounts and payments safe.
Invitation details: names, family names, dates, venues, wording and photos you send for your invitation, used only to make it.
RSVP replies: if you order an RSVP page, the names, numbers attending and any optional details your guests choose to submit. Only you, people you share your results link with, and our staff can see them.
3. Why we use it (and our legal basis)
- To provide what you ordered and support you (performing our contract with you).
- To take payments, prevent fraud and money laundering, and keep records for tax and accounting (legal obligations and legitimate interests).
- To keep the Site secure and working (legitimate interests).
- To send you news or offers — only if you opted in. You can opt out at any time from your profile or any such email.
4. Who we share it with
- Our payment provider and the banks/wallets involved, to process payments and refunds.
- Our hosting and email providers, who store and send data for us under contract.
- Professional advisers (lawyers, accountants, auditors) where needed.
- Authorities, when the law requires it — for example tax authorities or the Financial Monitoring Unit.
We don’t sell your personal data or share it for advertising.
5. How long we keep it
- Account data: while your account is open. When you delete your account we remove or anonymise your profile.
- Order, invoice and payment records: for the period tax and anti-money-laundering laws require (generally up to 10 years), even after you delete your account.
- Security logs: up to 12 months. Support messages: up to 3 years.
6. Your rights
You can access, correct, download (Account → Privacy & data → Download my data) or delete your data, object to marketing, and ask us questions about how we use it. If you’re not satisfied with our answer, you may complain to the relevant authority in Pakistan.
7. Security
We use HTTPS everywhere, hash passwords, encrypt sensitive data (such as payment credentials and identity documents) at rest, offer two-factor sign-in, and limit staff access to what they need. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.
8. Cookies
We use only essential cookies. See our Cookie Policy.
## Photos and guest data
Photos and invitation details are stored on your private project page, outside the public website, and are visible only to you and our designers. We delete them 90 days after final delivery. RSVP guest replies are deleted 30 days after the RSVP page closes. We never sell or share guest details, and never contact your guests.
9. Changes
We’ll post any changes here and update the date at the top. Significant changes will be emailed to account holders.
Questions about this policy? Email [email protected] or write to [Registered business name], [Registered office address], [City], Pakistan.