Privacy Policy
Brazil Flower Shop takes care of information about the people who buy and receive our gifts. This policy explains how personal data is used in our store, customer service and delivery process. For privacy enquiries, email contato@brazilflowershop.com.
1. Information we use
- Account: name, email address, telephone number, protected password and additional details requested in the form, such as date of birth.
- Delivery: recipient name and telephone number, address, postal code, landmarks and receiving instructions.
- Orders and support: products, options, card message, amounts, order history, transaction information and communications sent to our team.
- Browsing and security: IP address, technical browser information, access logs and session data.
When providing someone else's details for a delivery, share only what is needed and make sure you are entitled to provide it for that purpose. Avoid including sensitive information in the card message or order instructions.
2. Purposes and grounds
We use data to maintain your account, process orders, confirm payments, prepare and deliver gifts, provide support, prevent fraud and meet legal obligations. Depending on the purpose, processing relies on contract performance, legal obligations, the exercise of rights, legitimate interests or consent where required.
3. Sharing to provide the service
Information needed to prepare and deliver your gift may be shared with florists and delivery partners. Hosting, infrastructure and support providers may process data to operate the store. We may also disclose information to meet legal obligations or valid requests from competent authorities.
When you pay with PayPal, you use the provider's own environment. We do not request or store your PayPal password or full card number in this flow. We receive information needed to identify the transaction and its status. The provider also processes data under its own privacy policy.
Postal code address completion uses ViaCEP: the postal code you look up is sent to that service to retrieve address information. Payment and infrastructure providers may process data outside Brazil, depending on the service used and subject to applicable international transfer requirements.
4. Cookies and browser storage
We use cookies to maintain your session, shopping cart and preferences such as language and currency. Dismissing the cookie notice is remembered for 7 days using a cookie and local storage. That notice does not activate advertising or analytics tools.
You can delete or block cookies in your browser settings. Blocking necessary cookies may prevent login, cart use and checkout. External services, such as PayPal, may use their own cookies in their environments.
5. Communications
We may contact you about your account, payment, delivery and order support. You can change your newsletter preference in your account or ask customer service to do so; this preference is separate from messages needed to fulfil your purchase.
6. Retention and protection
We retain data for as long as needed for the purposes described and for legal, tax and legal claims requirements. After that, data should be deleted or anonymised as applicable. Requesting account deletion does not mean immediate removal of records that must be retained for these reasons.
We use safeguards such as access controls, password protection and form validation. No system is entirely risk-free. Keep your password private and do not share your login credentials.
7. Your rights and contact
Under Brazil's LGPD, you may request confirmation and access, correction, sharing information, portability where applicable, and anonymisation, blocking or deletion in legally defined cases. You may also withdraw consent and challenge unlawful processing. Send your request to contato@brazilflowershop.com. We may verify your identity to protect your data.
8. Updates
This policy may be updated to reflect changes to our services or applicable rules. The current version will remain available on this page.
Last updated: 11 November 2026.