This policy explains what personal data seoflower collects through this website and when you buy from us, why we collect it, who sees it and what your rights are. We keep it short on purpose.
1. Who we are
The controller of your personal data is seoflower, [[CLIENT: legal form and full registered business name]], IČO [[CLIENT: IČO]], Aloise Gavlase 40/18, 700 30 Ostrava-jih-Dubina, Czechia. Email: support@seoflower.com. Phone: +420 602 575 587. Send any privacy request to the email address above.
2. What we collect, why and for how long
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Answering your enquiry | Name, email, company, website, the content of your message | Steps at your request before a contract, and our legitimate interest in replying to you (GDPR Art. 6(1)(b) and (f)) | Until the matter is closed, then up to 3 years in case of follow-up questions |
| Taking and delivering your order | Name, email, phone, company, billing address, IČO and DIČ, website address, notes, order contents | Performance of the contract (Art. 6(1)(b)) | Until the contract is complete, then as the next row requires |
| Invoicing and accounting | Invoice data: name, billing address, IČO and DIČ, order and payment details | Legal obligation (Art. 6(1)(c)) under Czech accounting and tax law | Up to 10 years, as the law requires |
| Handling payments | Payment status and reference. Your card details go to the payment provider and not to us | Performance of the contract (Art. 6(1)(b)) | Payment records as in the invoicing row |
| Understanding which pages are useful | Pages viewed, device and browser type, approximate location, pseudonymous identifiers from Google Analytics 4 | Your consent (Art. 6(1)(a)), only if you accept analytics cookies | Up to 14 months |
| Remembering your cookie choice | A record of your choice | Our legitimate interest in respecting it (Art. 6(1)(f)) | 6 months |
| Keeping the site secure | IP address and request data in server logs kept by our hosting provider | Legitimate interest in security (Art. 6(1)(f)) | Short, as set by the hosting provider |
We do not sell personal data. We do not use it for automated decisions with legal effects.
3. The contact form
The contact form does not send anything to a server. It prepares an email in your own email app. We receive only what you choose to send, when you press Send there. This site stores nothing about the message.
4. The cart and checkout
Your cart is kept in your browser’s local storage so it survives a page reload. It is not sent to us until you place an order. When you place an order, the details you enter are used to process and deliver it. Card data is entered with, and handled by, our payment provider. We never see or store your full card number.
5. Who we share data with
- Hosting and email providers that run this website and our mailbox, acting on our instructions.
- Our payment provider, to take payment.
- Google, only if you accept analytics cookies. Google Analytics 4 receives usage data from your browser.
- Accountants and legal advisers, under confidentiality.
- Authorities, where the law requires it.
6. Transfers outside the EU
Google may process analytics data outside the European Economic Area, including in the United States. Where it does, the transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
7. Cookies
Our use of cookies and local storage is described in the Cookie policy. Analytics cookies are off unless you accept them, and you can change your choice at any time with Cookie settings in the footer.
8. Your rights
You have the right to access your data, correct it, have it erased, limit how we use it, receive it in a portable form and object to processing based on legitimate interest. Where processing relies on your consent, you can withdraw it at any time, and doing so does not affect what happened before. To use any of these rights, write to support@seoflower.com. We answer within one month.
You also have the right to complain to the supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
9. Security
We use HTTPS on the whole site, limit access to personal data to what the work needs, and ask our providers to do the same. No system is perfectly secure, and if a breach affects you we will tell you as the law requires.
10. Children
This site is for businesses. It is not directed at children under 15, and we do not knowingly collect their data.
11. Changes
If we change this policy in a way that matters, we will update the date at the top. Earlier versions are available on request.