Privacy Policy

This Privacy Policy for Personal Data (hereinafter – the Policy) applies to all information that the Fiesta Flowers online store, located at domain name https://jfloo.com/, may obtain about the User during the use of the online store's website, software, and online products.

1. DEFINITIONS
1.1. The following terms are used in this Policy:
1.1.1. "Website Administration (hereinafter – the Administration)", "Operator" – Individual Entrepreneur Savchenko O.V., which alone or jointly with other persons organizes and/or carries out the processing of personal data, and also determines the purposes of processing personal data, the categories of personal data to be processed, actions (operations) performed on personal data.
1.1.2. "Personal Data" – any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data).
1.1.3. "Processing of Personal Data" – any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, alteration), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
1.1.4. "Confidentiality of Personal Data" – a requirement obligatory for the Operator or any other person who has gained access to personal data not to allow their dissemination without the consent of the subject of personal data or in the presence of any other lawful basis.
1.1.5. "User of the Online Store Website (hereinafter – User)" – a person who has access to the Website via the Internet and uses the online store's website.
1.1.6. "Cookies" – a small fragment of data sent by a web server and stored on the user's computer, which the web client or web browser sends back to the web server with each HTTP request when attempting to open a page of the corresponding website.
1.1.7. "IP Address" – a unique network address of a node in a computer network built on the IP protocol.

2. GENERAL PROVISIONS
2.1. The User's use of the online store website signifies consent with this Privacy Policy and conditions for processing the User's personal data.
2.2. In case of disagreement with the terms of the Privacy Policy, the User should cease use of the online store website.
2.3. This Privacy Policy applies exclusively to the online store's website. The online store does not control and is not responsible for third-party sites that the User may access via links available on the online store's website.
2.4. The Administration does not verify the accuracy of personal data provided by the User of the online store website.

3. SUBJECT MATTER OF THE PRIVACY POLICY
3.1. This Policy establishes the obligations of the Administration of the online store website to not disclose and to ensure protection of confidentiality for personal data that the User provides upon request by the Administration during registration on the online store website or when placing an order to purchase goods.
3.2. Personal data permitted for processing under this Privacy Policy is provided by the User by completing the registration form on the online store website in the "Cart", "Checkout", "Request a Call Back", "Buy in 1 Click", and "Custom Order" sections, and includes the following information:

3.2.1. User's last name, first name, and patronymic;
3.2.2. User's contact phone number;
3.2.3. Email address (e-mail);
3.2.4. Goods delivery address;
3.2.5. User's place of residence;
3.3. The website also collects and processes anonymized data about visitors (including "cookie" files) using internet statistics services (Yandex Metrica and others).
3.3.1. Disabling cookies may make it impossible to access parts of the online store website that require authorization.
3.3.2. The online store collects statistics on the IP addresses of its visitors. This information is used to identify and resolve technical issues, and to monitor the legality of financial transactions conducted.
3.4. Any other personal data not specified above (purchase history, browsers and operating systems used, etc.) shall be securely stored and non-disseminated, except for cases specified in paragraphs 5.2. and 5.3. of this Policy.

4. PURPOSES OF COLLECTING USER PERSONAL DATA
4.1. The Administration processes the User's personal data solely for the purpose of concluding and performing contracts with the User, and for the following purposes:
4.1.1. Identification of the User registered on the online store website, for placing an order and/or concluding a distance sales contract.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation.
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.2. Providing the User access to personalized resources of the online store website.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.3. Establishing two-way communication with the User, including sending notifications and inquiries related to the use of the online store website, provision of services, and processing User requests and applications.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address, goods delivery address, User's place of residence;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.4. Creating an account for making purchases, if the User has consented to creating an account.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address, goods delivery address, User's place of residence;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.5. Notifying the User of the online store website about the status of their Order.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address, goods delivery address, User's place of residence;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.6. Providing the User with effective customer and technical support when issues arise related to using the online store website.
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.7. Providing the User, with their consent, product updates, special offers, price information, newsletter, and other details on behalf of the online store;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.
4.1.8. Organizing User participation in loyalty bonus programs.
– Categories of personal data processed: last name, first name, patronymic, phone number, email address, goods delivery address, User's place of residence;
– Categories of subjects whose personal data is processed: website visitors, customers;
– Legal basis for processing personal data: processing is carried out with the consent of the subject of personal data to the processing of their personal data;
– List of actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation;
– Methods of processing personal data: mixed, with transmission over the legal entity's internal network and via the Internet.

5. METHODS AND TERMS OF PERSONAL DATA PROCESSING
5.1. Processing of the User's personal data is carried out without time limitation, by any lawful means, including in information systems of personal data with the use of automation tools or without such tools.
5.2. The User agrees that the Administration may transfer personal data to third parties, specifically courier services, postal organizations, and telecommunications operators, solely for the purpose of fulfilling the User's order placed on the online store website, including delivery of goods.
5.3. The User's personal data may be transferred to authorized state bodies of the Russian Federation only on the grounds and in the manner established by legislation of the Russian Federation.
5.4. In the event of loss or disclosure of personal data, the Administration informs the User of such loss or disclosure.
5.5. The Administration takes necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, alteration, blocking, copying, dissemination, as well as from other unlawful actions by third parties.
5.6. The Administration, together with the User, takes all necessary measures to prevent losses or other adverse consequences caused by loss or disclosure of the User's personal data.
5.7. The Operator does not process Personal Data relating to special categories concerning racial or national origin, political views, religious or philosophical beliefs, health status, intimate life of the Subject of personal data, or membership of the Subject of personal data in public associations, except as expressly provided by Legislation.
5.8. The Operator does not carry out cross-border transfer of Users' Personal Data.

6. OBLIGATIONS OF THE PARTIES
6.1. The User is obliged to:
6.1.1. Provide information about personal data necessary for using the online store website.
6.1.2. Update and supplement the provided information about personal data in case of changes to such information.
6.2. The Administration is obliged to:
6.2.1. Use the received information solely for the purposes specified in Section 4 of this Privacy Policy.
6.2.2. Keep confidential information secret, not disclose it without the prior written consent of the User, and not sell, exchange, publish, or disclose in any other possible way the personal data provided by the User, except as specified in paragraphs 5.2. and 5.3. of this Privacy Policy.
6.2.3. Take precautionary measures to protect the confidentiality of the User's personal data according to the order normally used to protect such type of information in existing business practice.
6.2.4. Block personal data relating to the corresponding User from the moment of the User's or their legal representative's request, or that of an authorized body for the protection of subjects' personal data, in the event of discovery of inaccurate personal data or unlawful actions.

7. RESPONSIBILITY OF THE PARTIES
7.1. The Administration that has failed to fulfill its obligations is liable for damages incurred by the User due to unlawful use of personal data, in accordance with legislation of the Russian Federation, except for cases specified in paragraphs 5.2., 5.3., and 7.2. of this Policy.
7.2. In the event of loss or disclosure of Confidential Information, the Administration is not liable if such confidential information:
7.2.1. Became publicly available prior to its loss or disclosure.
7.2.2. Was obtained from a third party prior to the moment it was received by the Administration.
7.2.3. Was disclosed with the User's consent.

8. DISPUTE RESOLUTION
8.1. Prior to filing a lawsuit in court regarding disputes arising from the relationship between the User of the online store website and the Administration, a claim (written proposal for voluntary dispute resolution) must be presented.
8.2. The recipient of the claim shall notify the claimant in writing within 30 calendar days from the date of receiving the claim about the results of its consideration.
8.3. If an agreement cannot be reached, the dispute shall be referred to a judicial body in accordance with current legislation of the Russian Federation.

9. ADDITIONAL TERMS
9.1. The Operator may amend this Policy without the User's consent.
9.2. Amendments to the Privacy Policy take effect from the moment they are posted on the online store website.
9.3. The current Policy is posted at the page address https://jfloo.com/privacy-policy
9.4. All proposals or questions regarding this Privacy Policy should be sent to the company's email address seoul@jfloo.com

10. CONSENT TO PERSONAL DATA PROCESSING
By providing their personal data, the User consents to their processing by the Operator, including for the purposes specified in Section 4 of this Policy, fulfillment of obligations under the relevant agreement, customer support, organization of goods delivery, conducting marketing events, and two-way communication.
This consent is granted for carrying out any actions with personal data that are necessary or desirable to achieve the aforementioned purposes, including (without limitation) collection, systematization, accumulation, storage, clarification (updating, alteration), use, dissemination (including transfer to third parties), anonymization, blocking, as well as any other actions with personal data provided by current legislation of the Russian Federation.
The Operator guarantees that data processing is carried out in accordance with current legislation of the Russian Federation and this Policy, which the User has been made aware of.