PRIVACY POLICY

Last updated: 16.02.2024

Introduction

This Privacy Policy describes how Hele Flora (the "Site","we", "us" or "our") collects, uses and disclosesyour personal information when you visit, use our services, or make a purchasefrom https://heleflora.com (the "Site") or otherwise communicate withus (collectively, the "Services"). For purposes of this PrivacyPolicy, "you" and "your" means you as a user of theServices, whether you are a customer, website visitor or another person whoseinformation we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of theServices, you agree to the collection, use, and disclosure of your informationas described in this Privacy Policy. If you do not agree to this PrivacyPolicy, do not use or access any of the Services.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time, including to reflectchanges in our practices or for other operational, legal or regulatory reasons.We will post the revised Privacy Policy on the Website, update the "LastUpdated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have over the past 12 months collectedPersonal Information about you from a variety of sources, as set out below. Theinformation we collect and use varies depending on how you interact with us.

In addition to the specific uses set forth below, we may use information wecollect about you to communicate with you, provide the Services, comply withapplicable legal obligations, enforce applicable Terms of Service, and toprotect or defend the Services, our rights, and the rights of our users orothers.

The

types of personal information we collect about you depend on how you interactwith our website and use our services. When we use the term "personalinformation", we are referring to information that identifies, relates to,describes or may be associated with you. The following sections describe thecategories and specific types of personal information we collect.

Information we collect directly from you

Information that you submit directly to us through our Services may include:

-Basic contact information, including name, address, telephone number,email.-Order information, including name, billing address, shipping address,payment confirmation, email address, telephone number.-Account information,including username, password, security questions.-Shopping information,including the items you see, put in shopping cart or add to your wishlist.-Customer support information, including information you choose to includein your communications with us, such as when you send a message through theServices.

Some features of the Services may require you to directly provide us withcertain information about yourself. You can choose not to provide thisinformation, but doing so may prevent you from using or accessing thesefeatures.

Information we collect through cookies

We also automatically collect certain information about your interactions withthe Services ("Usage Data"). To do this, we may use cookies, pixelsand similar technologies ("cookies"). Usage Data may includeinformation about how you access and use the Website and your account,including device information, browser information, information about yournetwork connection, your IP address, and other information about yourinteraction with the Services.

Information We Collect from Third Parties

Finally, we may obtain information about you from third parties, including fromvendors and service providers who may collect information on our behalf, suchas:

-Companies that support our website and services, such as Shopify.-Our paymentprocessors, who collect payment information (e.g., bank account, credit ordebit card information, billing address) to process your payment in order tofulfill your orders and provide you with products or services you haverequested, in order to perform our contract with you.

When you visit our website, open or click on emails we send you, or interactwith our services or advertisements, we, or third parties we work with, mayautomatically collect certain information using online tracking technologiessuch as pixels, web beacons, software developer kits, third-party libraries,and cookies.

All information we collect from third parties will be treated in accordancewith this Privacy Policy. We are not responsible for the accuracy of theinformation provided to us by third parties and are not responsible for thethird party's policies or practices. For more information, see the sectionbelow, Third Party Websites and Links.

How We Use Your Personal Information

– Providing Products and Services. Weuse your personal information to provide you with the Services to perform ourcontract with you, including to process your payments, fulfill your orders,send notifications to you related to your account, purchases, returns,exchanges or other transactions, to create, maintain and otherwise manage youraccount, to arrange shipping, facilitate returns and exchanges and to enableyou to post reviews. We use your personal information for marketing andpromotional purposes, such as sending marketing, advertising and promotionalcommunications by email, text message or post, and to show you advertisementsfor products or services. This may include using your personal information tobetter tailor the services and advertising on our website and otherwebsites.-Security and fraud prevention. We use your personal information todetect, investigate or take action regarding possible fraudulent, illegal ormalicious activity. If you choose to use the Services and register an account,you are responsible for keeping your account credentials secure. We stronglyrecommend that you do not share your username, password or other access detailswith anyone else. If you believe your account has been compromised, pleasecontact us immediately.-Communicate with you. We use your personal data toprovide you with customer support and improve our services. This is in ourlegitimate interests to be responsive to you, to provide effective services toyou and to maintain our business relationship with you.

Like

many websites, we use cookies on our website. For specific information aboutthe cookies that we use in connection with running our store with Shopify, seehttps://www.shopify.com/legal/cookies. We use cookies to operate and improveour website and services (including remembering your actions and preferences),to run analytics and better understand user interactions with the Services (inour legitimate interest to administer, improve and optimise the Services). Wemay also allow third parties and service providers to use cookies on ourwebsite to better tailor the services, products and advertising on our websiteand other websites.

Most browsers automatically accept cookies by default, but you can choose toset your browser to remove or reject cookies through your browser controls.Please note that removing or blocking cookies may adversely affect your userexperience and may cause some of the Services, including certain features andgeneral functionality, to malfunction or no longer be available. In addition,blocking cookies may not completely prevent how we share information with thirdparties such as our advertising partners.

How We Disclose Personal Information

Under certain circumstances, we may disclose your personal information to thirdparties for legitimate purposes subject to this Privacy Policy. Suchcircumstances may include:

-With vendors or other third parties who perform services on our behalf (e.g.,IT administration, payment processing, data analytics, customer support, cloudstorage, fulfillment, and shipping).-With business and marketing partners,including Shopify, to provide services and advertise to you. Our business andmarketing partners will use your information in accordance with their ownprivacy policies.-When you direct, ask us to, or otherwise manner consents tous disclosing certain information to third parties, for example to send youproducts or through your use of social media widgets or login integrations,with your consent.-With our affiliates or otherwise within our corporate group,in our legitimate interests to run a successful business.

In connection with a business transaction such as a merger or bankruptcy, tocomply with applicable legal obligations (including responding to subpoenas,search warrants, and similar requests), to enforce applicable Terms of Use, andto protect or defend the Services, our rights, and the rights of our users orothers.

Over the past 12 months, we have disclosed the following categories of personalinformation about users for the purposes set out above in "How we collectand use your personal information" and "How we disclose personalinformation":

Category:

-Identifiers such as basic contact details and certain order and accountinformation-Commercial information such as order information, shoppinginformation, and customer support information-Internet or other similar networkactivity, such as usage data

Categories of recipients:

-Vendors and third parties who perform services on our behalf (such as Internetservice providers, payment processors, fulfillment partners, customer supportpartners, and data analytics providers) -Business and marketingpartners-Partners

We do not use or disclose personal information for the purpose of derivingcharacteristics about you.

The

User-Generated Content Services mayenable you to post product reviews and other user-generated content. If youchoose to submit user-generated content to a public area of the Services, thatcontent will be public and available to everyone.-We do not control who hasaccess to the information you choose to make available to others, and cannotensure that parties who have access to such information respect your privacy orkeep it secure. We are not responsible for the privacy or security ofinformation that you make publicly available, or for the accuracy, use, ormisuse of information you disclose or receive from third parties.

Third Party Websites and Links

Our website may contain links to websites or other online platforms operated bythird parties. If you follow links to websites that are not affiliated with orcontrolled by us, you should read their privacy and security policies and otherterms and conditions.

We do not warrant and are not responsible for the privacy or security of suchwebsites, including the accuracy, completeness or reliability of theinformation contained in those websites. Information you provide in public orsemi-public places, including information you share on third party socialnetworking platforms, may also be visible to other users of the Services and/orusers of those third party platforms without restriction in respect of your useby us or by a third party. Our inclusion of such links does not in itself implyany endorsement of the content of such platforms or of their owners oroperators, except as described on the Services.

The

Services are not intended for use by children, and we do not knowingly collectpersonal information from children. If you are the parent or guardian of achild who has provided us with their personal information, please contact ususing the contact details below to request that it be deleted.

As of the effective date of this Privacy Notice, we have no actual knowledgethat we "share" or "sell" (as those terms are defined byapplicable law) personal information about individuals under the age of 16.

Security and Retention of Your Information

Please note that no security measures are perfect or impenetrable, and wecannot guarantee "perfect security". In addition, any information yousend to us may not be secure in transit. We recommend that you do not useinsecure channels to communicate sensitive or confidential information to us.

How long we keep your personal information depends on various factors, such aswhether we need the information to maintain your account, to provide theServices, comply with legal obligations, resolve disputes, or enforce otherapplicable contracts and policies.

Your rights and choices

As a Norwegian website, we comply with the European General Data ProtectionRegulation (GDPR). The GDPR gives you a number of rights regarding the handlingof your personal data, including the right to access, correct, restrict ordelete your personal data.

Your fundamental rights are as follows:

-Right of access/know. You have the right to request access to personalinformation that we hold about you, including details relating to the ways inwhich we use and share your information.
-Right to erasure. You have the right to request that we delete personal data we hold about you.
-Right to rectification. You have the right to request that we correct inaccurate personal data we hold about you.
-Right to portability. You have the right to receive a copy of the personal data we hold about you.
-Restriction of processing: You have the right to ask us to stop or restrict our processing of your personal data.
-Withdrawal of consent: Where we rely on consent to process your personal information, you have the right to withdraw that consent.
-Complain:  You have the right to appeal our decision if we decline to process your request. You can do so by responding directly to our denials.
-Manage your communication preferences: We may send you promotional emails and you may opt out of receiving these at any time by using the unsubscribe option shown in our emails to you. If you unsubscribe, we may still send you non-promotional emails, such as those about your account or orders you have made.

You can exercise any of these rights where set out on our website or bycontacting us using the contact details at the bottom of this Privacy Policy.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a factual response to your request. In accordance with applicable law, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof that you have authorized them to act on your behalf, and we may require you to verify your identity directly with us. We will respond to your request within a reasonable time as required by applicable law.

Complaints

If you have any complaints about how we process your personal data, please contact us using the contact details below. If you are not satisfied with our response to your complaint, you have the right to appeal our decision by contacting us using the contact details at the bottom of the Privacy Notice, or submitting your complaint to your local data protection authority.

International users

Please note that we may transfer, store and process your personal information outside of your country of residence, including the United States. Your personal data is also processed by employees and third party service providers and partners in these countries. If we transfer your personal information outside of Europe, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority in the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact

If you have any questions about our privacy practices or this Privacy Notice,or if you would like to exercise any of the rights available to you, please email us at post@heleflora.com.