Privacy Policy

Last Updated: January 3, 2026

1. Introduction

NuiFlowers ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit nuiflowers.com ("Website") or make a purchase from us.

We comply with applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA) and the European Union's General Data Protection Regulation (GDPR) for European users.

2. Data Controller

NuiFlowers is the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your data rights, please contact us at [email protected]

3. Information We Collect

Information you provide directly:

  • Account information: name, email, password
  • Order information: delivery address, phone number, gift messages
  • Payment information: processed securely by Omise (we do not store card details)
  • Communications: emails or messages you send to us

Information collected automatically:

  • Device information: IP address, browser type, operating system
  • Usage information: pages visited, time spent, links clicked
  • Cookies and similar technologies (see Cookies section below)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: To fulfill orders and provide services to you
  • Consent: For marketing communications and non-essential cookies
  • Legitimate interests: To improve our services and prevent fraud
  • Legal obligation: To comply with tax and accounting laws

5. How We Use Your Information

  • Process and deliver your orders
  • Communicate about your orders and account
  • Send marketing emails (with your consent)
  • Improve our Website and services
  • Prevent fraud and maintain security
  • Comply with legal obligations

6. Cookies

We use cookies and similar technologies to:

  • Essential cookies: Provide basic website functionality (sessions, shopping cart, security)
  • Analytics cookies: Help us understand how visitors use our Website (Google Analytics)

7. Data Sharing

We may share your personal data with:

  • Payment processor: Omise for payment processing
  • Delivery partners: To deliver your orders
  • Analytics providers: Such as Google Analytics
  • Law enforcement: When required by law

We do not sell your personal data to third parties.

8. International Data Transfers

Your data may be transferred to and processed in countries outside Thailand. We ensure appropriate safeguards, such as standard contractual clauses, are in place when transferring data to countries without equivalent data protection laws.

9. Data Retention

We retain your personal data for as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Comply with legal obligations (e.g., tax records for 7 years)
  • Resolve disputes

10. Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request restriction of processing your data
  • Portability: Request to receive data in a machine-readable format
  • Object: Object to certain types of processing
  • Withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us at [email protected]

11. Security

We implement appropriate technical and organizational security measures to protect your personal data, including SSL encryption, secure servers, and access controls. However, no internet transmission is 100% secure.

12. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on the Website with an updated date.

14. Contact & Complaints

If you have questions about this Privacy Policy or wish to make a complaint, please contact us at:

Email: [email protected]

You also have the right to lodge a complaint with a data protection supervisory authority (the Personal Data Protection Committee in Thailand, or your local supervisory authority for EU users).

← Back