Privacy Policy

2026-10-11

hoalofi ("the shop") collects only what it needs to make and deliver your flowers. This policy describes what the shop actually does.

1. What we collect

When you order: sender’s name and phone; recipient’s name, phone and address; the date you want the flowers to arrive; the message for the card and ribbon; the name on the bank transfer.

Email is optional. You can order without it.

When you sign up: name, phone, password. Email is optional.

When you save an anniversary: its label, the date (solar or lunar), and how many days ahead you want reminding.

Recorded automatically: when you visited, which browser, and which pages you saw. We use this to find errors and improve the site.

If you let us share the photos and message you sent on Zalo: those photos, the message and a display name (for example, "L."). If you withdraw your permission, we take them down right away.

We do not collect your date of birth, gender, or national ID number.

2. Why we use it

To make and deliver the flowers you ordered.

To match your bank transfer and tell you how your order is going.

To answer your questions.

Only if you separately agreed to marketing: to send offers and anniversary reminders. You can withdraw that agreement at any time.

3. How long we keep it

Account data is kept until you delete your account. On deletion we erase your name, phone, email and password.

Transaction records (orders and amounts) are kept for the period required by law, with the link to your account removed.

Transaction records that count as accounting documents are kept for 10 years, as required by Vietnam’s Law on Accounting 2015 (Article 41).

4. Sharing and processors

We do not sell your information or pass it on for advertising.

For delivery we give the courier the recipient’s name, phone and address — only what that delivery needs.

We accept bank transfer only. We never receive or store card details.

To run the site we entrust storage and processing to these companies, who handle it only within the limits we set — Vercel (hosting), Neon (database), Cloudflare (image storage).

Where a court or investigating authority requires it through a lawful process, we provide what is required.

5. Cookies and browser storage

We do not use advertising or tracking cookies.

We use a cookie to keep you signed in. Without it the member pages will not open.

Your basket and language choice are stored only in your browser. They are not sent to our server.

You can clear these in your browser settings. Clearing them empties your basket and signs you out.

6. People under 16

This site is intended for people aged 16 and over.

If we learn that someone under 16 has left information without a parent’s or guardian’s consent, we delete it. If you know of such a case, please tell us.

7. Your rights

You can see, correct and delete your information at any time.

As a member you can delete your account yourself from your account page. If an order is in progress, you can do it once it has been delivered.

You can withdraw marketing consent at any time; you will still receive messages about your orders and deliveries.

You can ask us to explain how we use your information, and you can object to that processing.

Send requests to the contact details below. We reply within 7 working days of receiving them.

8. How we protect it

Passwords are stored in a form that cannot be reversed. Not even we can read your password.

The order status page opens only through a secret link that cannot be guessed. The order code alone will not open it.

Admin accounts see different things depending on their role.

Everything travels over an encrypted connection (HTTPS).

9. Contact

For questions and requests about personal data, use the shop’s email or phone number, shown at the foot of every page.

If you wish to exercise a right under Vietnamese law, please say so in your request.

10. Changes to this policy

When this policy changes we publish the new version on this page with the date it takes effect.

For significant changes we notify members separately.