Privacy policy

Flora & Flames

Last updated: 31/01/2026

Flora & Flames (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, make a purchase, or interact with us.

We comply with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection laws.

1. Who We Are

Business name: Flora & Flames
Location: Monte Estoril, Portugal
Email:info@floraandflames.com
Website: [www.floraandflames.pt]

For any privacy-related questions, you can contact us using the details above.

2. What Personal Data We Collect

We may collect the following personal data:

a) Information You Provide

Full name
Email address
Phone number
Delivery address
Billing information (processed securely via third-party payment providers – we do not store card details)
Order details and preferences
Messages you send us (via forms, email, or social media)

b) Information Collected Automatically

IP address
Browser type and device information
Pages visited and interactions on our website
Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Data

We use your personal data to:

Process and deliver orders (candles, flowers, local delivery)
Communicate with you about your orders or enquiries
Provide customer support
Improve our website, products, and services
Comply with legal and accounting obligations
Send marketing communications only if you have given consent

4. Legal Basis for Processing (GDPR)

We process your data based on one or more of the following legal grounds:

Performance of a contract (e.g. fulfilling your order)
Consent (e.g. marketing emails)
Legal obligation (e.g. tax and accounting records)
Legitimate interest (e.g. improving our services and preventing fraud)

5. Sharing Your Data

We only share your data when necessary, including with:

Payment service providers
Delivery partners (for local deliveries within a 5 km radius)
Website hosting and IT service providers
Accounting or legal advisors (when required by law)

All third parties are required to protect your data and process it in line with GDPR.

We never sell your personal data.

6. Data Retention

We retain your personal data only for as long as necessary:

Order and invoice data: as required by Portuguese law
Customer communications: up to 24 months
Marketing data: until you withdraw consent

After this, data is securely deleted or anonymised.

7. Your Rights Under GDPR

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Data portability
Lodge a complaint with the Portuguese Data Protection Authority (CNPD)

To exercise your rights, contact us at [privacy@floraandflames.pt].

8. Cookies

Our website uses cookies to:

Ensure the website functions properly
Improve user experience
Analyse website traffic

You can manage or disable cookies via your browser settings.
A separate Cookie Policy may apply.

9. Data Security

We take appropriate technical and organisational measures to protect your data, including:

Secure hosting
Encrypted communications (HTTPS)
Limited access to personal data

However, no online system is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites (e.g. Instagram). We are not responsible for their privacy practices and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated date shown at the top.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Flora & Flames
info@floraandflames.com