Vallimayil Flowers Privacy Policy

---

Vallimayil Flowers, your trusted flower shop, last updated: 10-09-2026.

At Vallimayil Flowers, we respect your privacy. This privacy policy outlines the personal information we collect, the purpose behind this collection, how we utilize and safeguard this data, and the rights you possess regarding your information.

This privacy policy is applicable to our website [www.vallimayilflowers.com], our flower shop in Madurai, and all orders placed with us via phone, WhatsApp, email, or in person.

We manage personal data in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000, along with associated regulations.

1. Who We Are  

For the purposes of data protection law, we are the Data Fiduciary — the business that determines how and why your personal data is used.

2. Information We Collect

2.1 Information you give us  

Your details: name, phone number, email address, billing address.  

Recipient details: name, delivery address, phone number, and any occasion details you provide us.  

Order details: items ordered, delivery date and time, message card wording, special instructions.  

Event details: for weddings and functions — venue, date, timings, contact persons, design preferences.  

Communications: messages you send us via WhatsApp, email, contact form, or phone.

2.2 Information collected automatically  

When you visit our website, we may collect your IP address, browser, device type, pages viewed, and referring website through cookies and similar technologies. See Section 8.

2.3 Payment information  

Payments are processed by our payment gateway partner [name of gateway]. We do not collect or store your card number, CVV, UPI PIN, or net banking credentials. We receive only confirmation of whether a payment succeeded and a transaction reference.

2.4 A note about recipient details  

When you provide us with a recipient's name, address, and phone number, you confirm that you are authorized to share those details with us for the purpose of delivering your order. We use recipient details solely to complete that delivery.

3. Why We Use Your Information  

We utilize your personal data for:  

- Preparing, confirming, and delivering your order.  

- Contacting you or the recipient about a delivery — for instance, to confirm the address or arrange a delivery time.  

- Processing payments and issuing invoices and receipts.  

- Responding to enquiries, quotes, and complaints.  

- Planning and delivering wedding and event work.  

- Maintaining records as required under tax and accounting law.  

- Enhancing our products, website, and services.  

- Sending you offers and updates about seasonal collections — only where you have agreed to receive them (see Section 4).

We do not use your personal data for automated decision-making or profiling.

4. Marketing Communications  

4.1 We will send you promotional messages via WhatsApp, SMS, or email only with your consent.

4.2 You can withdraw that consent at any time — simply reply STOP to a message, use the unsubscribe link in an email, or contact us at 7418833434. We will respond to your request promptly.

4.3 Withdrawing marketing consent does not affect messages we need to send you concerning an order you have placed, such as delivery confirmations.

5. Who We Share Your Information With  

We do not sell your personal data. We only share it with:  

- Delivery partners and courier services, to fulfill your order — this includes the recipient's name, address, and phone number.  

- Payment gateways and banks, to process payments.  

- Our IT and website service providers, who host our site and support our systems.  

- Our accountants and tax advisers, when necessary.  

- Government authorities, courts, or law enforcement, when we are legally required to disclose information.

Everyone we share data with is obligated to keep it confidential and use it solely for the stated purpose.

Your personal data is stored and processed in India. If we ever transfer data outside India, we will do so only as permitted under applicable law.

6. How Long We Keep Your Information  

Order records: kept for [X] years, to manage repeat orders, warranty-type inquiries, and disputes.  

Invoices and tax records: retained for 8 years, as required under Indian tax law.  

Event and wedding files: stored for [X] years after the event.  

Marketing contacts: maintained until you withdraw consent or after [X] years of inactivity.  

Website analytics: retained for [X] months.

When personal data is no longer needed, we delete it or anonymize it.

7. How We Protect Your Information  

We implement reasonable security measures to shield your personal data, such as restricting access to staff who require it, utilizing password-protected systems and secure connections for online transactions, and partnering only with payment providers who uphold their security standards.

No system is infallible. If a personal data breach occurs, we will notify you and the Data Protection Board of India as required under the DPDP Rules, 2025.

8. Cookies  

Our website utilizes cookies to ensure the site functions correctly, remembers your preferences, and helps us comprehend how visitors engage with our site.

Essential cookies are necessary for the site and checkout to operate properly.  

Analytics cookies assist us in determining which pages are popular. [Name the tool, e.g., Google Analytics.]  

Marketing cookies might be used to display relevant advertising. [Delete if not applicable.]

You can block or delete cookies through your browser settings, though some parts of the site may not work correctly if you do.

9. Your Rights  

You have the right to:  

- Access — request a summary of the personal data we hold about you and how we utilize it.  

- Correction — request us to amend data that is inaccurate or complete data that is incomplete.  

- Erasure — request us to delete your data, where we are not mandated to retain it by law.  

- Withdraw consent — for marketing, at any time.  

- Nominate — another person to exercise your rights on your behalf in the event of your death or incapacity.  

- Grievance redressal — raise a complaint with us regarding our handling of your data.

10. Grievance Redressal  

If you are dissatisfied with how we have addressed your personal data, please contact us:

We will acknowledge your complaint and aim to resolve it within [30] days.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

11. Children's Data  

Our website and services are intended for adults. We do not knowingly collect personal data of children under 18 without verifiable consent from a parent or guardian, and we do not use children's data for advertising or tracking. If you believe a child has provided us with personal data, please contact us, and we will delete it.

12. Third-Party Links  

Our website and social media pages may link to other websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing information with them.

13. Changes to This Policy  

We may update this policy from time to time. The current version will always be available on this page with the date it was last updated. Significant changes will be communicated to you where required by law.