Policy
Privacy policy
What Fioraa collects, why, and what you can ask us to do about it.
Draft - for owner review, not legal advice
This page was written to give the storefront something functional to link to. It has not been reviewed by a lawyer and must not be published as-is.
What we collect
To take an order we collect your name, email address, phone number and delivery address. To create an account we additionally store a password, held only as a one-way hash.
If you sign in with Google we receive your name, email address and profile picture from Google. We never receive your Google password.
We store a cart identifier in a cookie so a basket survives between visits, including before you sign in.
What we do with it
We use your details to fulfil orders, to contact you about those orders, and to answer support requests.
We do not sell your data, and we do not share it beyond the parties needed to deliver your order and take payment.
Payment data
Card details are handled by our payment provider. Fioraa never sees or stores a full card number.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account. Email us and we will action it.
We keep order records for as long as tax and accounting rules require, even after an account is deleted.
Open questions for the owner
- Name the actual payment provider, analytics and email tools once chosen, and list them here.
- State the legal entity, registered address and grievance officer required under Indian IT Rules.
- Confirm data retention periods with an accountant.
- Decide whether marketing email is offered, and add opt-in wording if so.