Your Flower Stories ("we", "our", or "us") is a premium floral gifting service based in Hyderabad, Telangana, India. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, why we collect it, and how we use and protect it when you visit our website yourflowerstories.com or place an order with us.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

Information you provide directly:

• Account details — name, email address, mobile number, and password when you create an account.
• Order information — delivery address, recipient name, delivery instructions, and any personalised message.
• Payment information — billing details processed securely via Razorpay. We do not store your full card number on our servers.
• Communication — messages sent to our support team, return or refund requests, and feedback forms.

Information collected automatically:

• Device & log data — IP address, browser type, operating system, pages visited, and timestamps.
• Cookies & usage data — session cookies, preference cookies, and analytics data (see Section 4).
• Location data — pincode or area entered during checkout for delivery availability checks.

We use the information we collect to:

• Process and fulfil your orders and send order confirmations, dispatch notifications, and invoices.
• Send delivery updates via SMS and email through AWS SNS and SES.
• Manage your account and provide customer support.
• Process payments and prevent fraudulent transactions.
• Send promotional communications and offers — only if you have opted in. You may unsubscribe at any time.
• Improve our website, products, and services through aggregate analytics.
• Comply with legal obligations under applicable Indian law.

We share your data only with trusted service providers who help us operate our business:

• Razorpay — payment processing. Your payment data is governed by Razorpay's privacy policy.
• Amazon Web Services (AWS) — transactional email (SES), SMS notifications (SNS), and file storage (S3) in India regions.
• Delivery partners — name, phone number, and delivery address shared with delivery personnel to fulfil your order.
• Legal authorities — we may disclose information when required by law, court order, or government authority.

All service providers are contractually bound to keep your data confidential and use it solely for the purpose of providing services to us.

We use cookies to:

• Session cookies — keep you signed in while you browse.
• Preference cookies — remember your cart, delivery pincode, and UI preferences.
• Analytics cookies — understand how visitors use our website (page views, traffic sources) using aggregate, anonymised data.

You can control cookies through your browser settings. Disabling cookies may affect certain features such as staying logged in or maintaining your cart.

We implement industry-standard security measures to protect your personal information:

• All data is transmitted over HTTPS with TLS encryption.
• Passwords are stored using strong one-way hashing algorithms (bcrypt).
• Database access is restricted to authorised services and personnel only.
• Payment data is handled exclusively by Razorpay (PCI-DSS compliant) and never stored on our servers.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach, we will notify affected users promptly in accordance with applicable law.

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data — retained until you request deletion.
• Order data — retained for 7 years for accounting, tax, and legal compliance under Indian law.
• Communication records — retained for 2 years.
• Marketing preferences — updated immediately upon unsubscription.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and personal data (subject to legal retention requirements).
• Opt-out — unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.
• Data portability — request your data in a structured, machine-readable format.

To exercise any of these rights, please write to us at privacy@yourflowerstories.com. We will respond within 30 days.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by prominently posting a notice on our website. The updated policy will be effective from the date it is published.

For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at:

Your Flower Stories
Hyderabad, Telangana, India
Email: privacy@yourflowerstories.com
Phone: +91 98765 43210