Privacy Policy for Palapetals.com

1. Who We Are

Palapetals.com is a fresh flower boutique based in Kampala, Uganda. We offer same-day flower delivery across Kampala, Entebbe, Wakiso via boda boda. Contact: hello@palapetals.com / +256 784 767107.

2. What Data We Collect

When you order or contact us, we collect:

• Account info: Name, email, phone number (WhatsApp number where photos are sent)
• Order info: Recipient name, delivery address (suburb, e.g., Ntinda, Kololo), card message, order history
• Payment info: We DO NOT store card details. Payments via MTN Mobile Money, Airtel Money, Visa/Mastercard are processed by Flutterwave / Pesapal / PayPal - they handle your card data securely.
• Technical: IP address, browser, device, cookies for cart and analytics
• Communications: WhatsApp chats, emails, contact form messages

3. How We Use Your Data

• To process and deliver your flower orders in Kampala & Entebbe
• To send WhatsApp photo confirmation of your bouquet before dispatch on +256 784 767107
• To communicate delivery status via SMS / WhatsApp / Call
• To improve our website, prevent fraud, and comply with Ugandan law
• For marketing only if you opt-in (e.g., Valentine's offers). You can unsubscribe anytime

4. WhatsApp Photo Confirmation

We use your WhatsApp number solely to send you a real photo of your bouquet before delivery and delivery updates. Your WhatsApp number is marked as “WhatsApp number where photos are sent” in your profile. We never add you to groups or share your number with third parties for marketing.

5. Cookies

Palapetals.com uses cookies to keep your cart, remember login, and analyze traffic via Google Analytics. You can disable cookies in your browser, but cart may not work.

6. Who We Share Data With

We only share necessary data with:

• Boda riders (recipient name, phone, address only for delivery)
• Payment gateways (Flutterwave, Pesapal, MTN MoMo, PayPal)
• Google Analytics (anonymized visits)

We never sell your data. We never share your email or WhatsApp with marketers.

7. Data Retention

Order data is kept for 5 years for accounting under Ugandan law. Contact messages for 2 years. You can request deletion of your account by emailing hello@palapetals.com, but we must keep invoices for URA compliance.

8. Your Rights

You have right to access, correct, or delete your personal data. To update your phone number (WhatsApp where photos are sent), go to My Account > Profile. For full deletion or complaint, email hello@palapetals.com or WhatsApp +256 784 767107.

9. Security

We use SSL (https), hashed passwords (bcrypt), and secure servers. Temp passwords expire in 30 minutes. If you suspect misuse of your Palapetals.com account, change password immediately via My Account > Change Password.

10. Children's Privacy

We do not knowingly collect data from children under 18. Orders must be placed by adults.

11. Changes to This Policy

We may update this policy. Updates will be posted at palapetals.com/privacy-policy with new date. Continued use after changes means acceptance.