Privacy Policy

1.Scope of This Policy

This Privacy Policy explains how Pinas Petals and Blooms ("we", "us", "our") collects, uses, stores, discloses, and protects personal data when you visit pinaspetalsandblooms.com, place an order by phone, WhatsApp, or in person, or otherwise interact with our business in Dubai, United Arab Emirates.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), its executive regulations, and any other applicable UAE federal and Emirate-level legislation. By using our services, you acknowledge that you have read and understood this Policy.

2.Who We Are (Data Controller)

Pinas Petals and Blooms is a florist and floral-services business operating from Warehouse 2 - 3, 12th St, Al Quoz Industrial Area 2, Al Quoz, Dubai, United Arab Emirates. For the purposes of the PDPL, we act as the data controller for personal data collected through our website, WhatsApp ordering line, and in-store transactions.

3.Information We Collect

We collect information that you provide directly to us, information generated automatically as you use our site, and information from delivery and payment partners acting on our behalf.

• Identity and contact details: full name, phone number, email address, and delivery/billing address of you and your gift recipients.
• Order details: products purchased, card messages, delivery instructions, occasion type, and order history.
• Payment information: processed through PCI-DSS compliant payment gateways; we do not store full card numbers on our own servers.
• Account information: if you create an account, your login credentials (stored in encrypted form) and saved addresses.
• Communications: messages sent via our contact form, email, or WhatsApp, including for customer support or complaints.
• Technical data: IP address, browser type, device identifiers, and pages visited, collected via cookies and similar technologies (see our Cookies Policy).

4.Legal Basis and Purpose of Processing

Under the PDPL, we only process personal data where we have a valid legal basis to do so. We rely on the following bases, depending on context:

• Performance of a contract — to accept, process, arrange delivery for, and provide after-sales support for your orders.
• Consent — for marketing communications, newsletters, and non-essential cookies, which you may withdraw at any time.
• Legitimate interest — to prevent fraud, secure our website, improve our products and services, and enforce our Terms & Conditions.
• Legal obligation — to comply with UAE tax law (including VAT record-keeping under Federal Decree-Law No. 8 of 2017), consumer protection law, and requests from competent UAE authorities.

5.Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to keep your cart working, remember your preferences, and understand how our site is used. Full details, including how to manage or disable cookies, are set out in our separate Cookies Policy.

6.How We Share Your Information

We do not sell your personal data. We only share it with trusted third parties where necessary to operate our business, and always under confidentiality and data-protection obligations:

• Delivery partners and independent riders, to complete same-day and scheduled deliveries across Dubai and the wider UAE.
• Payment processors and banks, to securely process card and digital wallet payments.
• IT, hosting, and customer-support service providers who process data strictly on our instructions.
• Government and regulatory authorities, where disclosure is required by UAE law, court order, or to protect our legal rights.
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to the same privacy commitments.

7.International Data Transfers

Where we use service providers located outside the UAE (for example, cloud hosting or email delivery infrastructure), we take steps required under the PDPL to ensure an adequate level of protection, including contractual safeguards, before any personal data is transferred internationally.

8.Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy UAE legal, tax (minimum 5-year VAT record retention), accounting, and reporting requirements. Once retention is no longer necessary, data is securely deleted or anonymised.

9.Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encrypted payment processing, access controls, and staff confidentiality obligations. No online platform can guarantee absolute security, and you share information with us at your own risk.

10.Your Rights Under the PDPL

Subject to applicable exceptions under UAE law, you have the following rights in relation to your personal data:

• Right to access a copy of the personal data we hold about you.
• Right to request correction of inaccurate or incomplete data.
• Right to request erasure of your data where it is no longer necessary for the purpose collected.
• Right to restrict or object to certain processing, including direct marketing.
• Right to data portability, where technically feasible.
• Right to withdraw consent at any time, without affecting processing carried out before withdrawal.

11.Marketing Communications

We will only send you marketing emails, SMS, or WhatsApp messages about seasonal offers and new collections if you have opted in. You may unsubscribe at any time using the link in our emails, by replying "STOP", or by contacting us directly — we will action your request promptly.

12.Children's Privacy

Our services are intended for individuals who are at least 18 years old or otherwise have the legal capacity to contract under UAE law. We do not knowingly collect personal data from children without parental or guardian consent.

13.Third-Party Links

Our website may link to third-party sites, including social media platforms such as Instagram, Facebook, and TikTok. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective policies.

14.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in UAE law. The "Effective date" at the top of this page indicates when it was last revised. Continued use of our services after an update constitutes acceptance of the revised Policy.

15.Governing Law and Complaints

This Policy is governed by the federal laws of the United Arab Emirates. If you believe your data protection rights have been infringed, you may contact us directly to resolve the matter, or lodge a complaint with the UAE Data Office established under the PDPL.

16.Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact us at info@pinaspetalsandblooms.com, call +971 55 866 4457, or write to us at Warehouse 2 - 3, 12th St, Al Quoz Industrial Area 2, Al Quoz, Dubai, United Arab Emirates.