1. Who we are
Blouma Flowers is the controller of your personal data under the Saudi Personal Data Protection Law (Royal Decree M/19 of 1443H) and its Implementing Regulations. Our details are in our Terms & Conditions.
2. Data we collect
- Account data: first and last name, mobile number, email address and preferred language.
- Order data: delivery addresses, recipient name and phone number, gift messages, order history and invoices.
- Payment data: payment references from Moyasar. Card details go directly to Moyasar; we never see or store full card numbers or CVV. If you use Tabby or Tamara, we receive their payment references.
- Location data: the pin you place on the delivery map. We only use your device location if you allow it.
- Device and usage data: IP address, device and browser type, pages visited and times, collected through cookies (see section 5).
- Communications: WhatsApp messages, support tickets and reviews.
3. Why we use it
- To fulfil your order: take payment, prepare and deliver your order, and send updates and invoices.
- Legitimate interests: preventing fraud, keeping the platform secure, and improving our service.
- Your consent: marketing messages, device location and analytics cookies. You can withdraw consent at any time.
- Legal obligations: keeping records required by Saudi law.
4. Who we share it with
We share only what each provider needs, under confidentiality and data-protection commitments:
- Moyasar: card payment processing (and Apple Pay, when offered).
- Tabby or Tamara: buy-now-pay-later payments, if you choose them.
- Vercel: website and app hosting.
- Neon: database hosting.
- Resend: order and account emails.
- WhatsApp Business (Meta) and our SMS provider: login codes, order updates and support.
- Google Analytics: anonymous visit statistics, only if you accept analytics cookies.
- OpenStreetMap / MapTiler: the delivery map.
- Delivery drivers: only the recipient's name, address and phone number.
We never sell your data.
5. Cookies
We use strictly necessary cookies for your cart, login and language; the site can't work without them. With your permission we also use Google Analytics cookies to understand, in aggregate, how the site is used. These are set only if you choose "Accept all" or turn on Analytics in the cookie settings. You can change your choice at any time from "Cookie settings" at the bottom of every page, or in your browser settings.
6. Data stored outside Saudi Arabia
Some of our providers (such as hosting, database, email and analytics) store or process data on servers outside Saudi Arabia, for example in the United States, Europe or Asia. We transfer only the data needed to run the service, and only to providers with appropriate safeguards, in line with the PDPL and the rules of the Saudi Data & AI Authority (SDAIA).
7. How long we keep it
- Orders and invoices: 10 years, as required by Saudi record-keeping rules.
- Account profile: while your account is active, plus 2 years after it is closed.
- Marketing consent records: 2 years after you withdraw consent.
- Support conversations: 2 years.
8. Your rights
Under the PDPL you have the right to:
- know how your data is used;
- access your data and get a copy;
- correct inaccurate data;
- ask us to delete your data, subject to the records we must keep by law;
- withdraw consent you have given;
- complain to the Saudi Data & AI Authority (SDAIA).
To make a request, message us on WhatsApp or email us (details below). We reply within 30 days at most.
9. Security
We use encryption in transit (HTTPS), encrypted storage at our database provider, scrambled (hashed) passwords, role-based admin access and security monitoring. No system is 100% secure; if a serious breach affects your data, we'll notify you and SDAIA as the law requires.
10. Children
Our service is not intended for anyone under 18, and we don't knowingly collect their data. If you believe a minor has given us data, contact us and we'll delete it.
11. Changes
We may update this policy from time to time. The current version is always on this page.
12. Contact us
WhatsApp: +966 5X XXX XXXX
Email: support@bloumaflowers.com