At Flora The Gifting Studio(“Flora TGS”, “we”, “us”, or “our”), we respect your privacy and are committed to safeguarding the personal data of both our valued customers (senders) and gift recipients.
Flora TGS operates as a luxury floral and bespoke gifting studio based in Karachi, Pakistan, serving both local customers and international patrons living across the United Kingdom, European Union, United States, United Arab Emirates, Kingdom of Saudi Arabia, Qatar, Australia, Canada, and worldwide.
The data controller responsible for the collection and processing of your personal data under this policy is:
Flora The Gifting Studio
Clifton, Karachi, Sindh 75600, Pakistan
Data Protection Officer & Inquiries: privacy@flora-tgs.com
Customer Support & Verification Desk: +92 314 500 5743
Given the nature of personalized floral arrangements, customized hampers, and surprise gift deliveries, we collect information in several distinct categories:
Payment Card Security: Flora TGS does not collect or store raw credit or debit card numbers, expiration dates, or CVV security codes on our servers. All digital payments are processed through certified, PCI-DSS compliant banking partners and gateways (e.g. Bank Alfalah, PayFast, Stripe).
When a customer places an order to send flowers or gifts to a friend, family member, or colleague in Karachi, the customer provides the recipient's personal contact details.
1. Strict Purpose Limitation: Recipient data is used exclusively to fulfill, prepare, dispatch, coordinate, and complete the physical hand-delivery of the floral bouquet or gift package in Karachi.
2. No Marketing Solicitations: We will neveradd a gift recipient's phone number or address to marketing mailing lists, newsletter distributions, or promotional broadcasts without their explicit independent opt-in consent.
3. Card Message Confidentiality: Personal greetings, anniversary wishes, or private sentiments written on cards remain strictly confidential within our packing studio.
Under European (EU/UK GDPR Art. 6), Middle Eastern, and international data privacy statutes, we process personal information under the following lawful bases:
Processing is strictly necessary to perform our sales contract with you: assembling floral stems, printing greeting cards, and executing courier delivery in Karachi.
To protect our platform against transactional fraud, preserve order history, manage customer service claims, and optimize delivery route logistics.
Where you have granted explicit consent for optional marketing newsletters, promotional WhatsApp updates, or non-essential performance cookies.
To comply with statutory bookkeeping, tax filing, and commercial regulations in Pakistan and applicable e-commerce standards.
A substantial portion of our orders originate from senders located in the UK, USA, UAE, Saudi Arabia, Qatar, Australia, and Canada who send luxury gifts to recipients in Karachi, Pakistan.
When you submit order details across international borders, your data is securely transferred and processed on our cloud infrastructure and accessed by authorized studio personnel in Karachi. We apply industry-standard technical safeguards, including TLS 1.3 / 256-bit encryption in transit, encrypted database storage, and strict least-privilege administrative access controls.
Under the EU General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you are entitled to the following statutory rights:
• Right of Access (Art. 15): Obtain confirmation and copies of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete records.
• Right to Erasure (Art. 17): Request deletion (“Right to be Forgotten”) subject to statutory tax retention.
• Right to Restrict (Art. 18): Limit the scope of data processing in specified circumstances.
• Right to Data Portability (Art. 20): Receive your structured data in a machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.
You also have the right to lodge a complaint with your local Data Protection Authority (e.g., the UK Information Commissioner's Office - ICO).
Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, and similar privacy laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA):
Flora The Gifting Studio does not sell personal information for monetary or other valuable consideration, nor do we share personal information for cross-context behavioral advertising.
• Right to Know: The categories, sources, and purposes of data collected in the past 12 months.
• Right to Delete: Request deletion of your collected personal information.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Non-Discrimination: We will never deny goods or provide different pricing for exercising your privacy rights.
In compliance with UAE Federal Decree-Law No. 45/2021 and the Saudi Arabia Personal Data Protection Law (KSA PDPL), residents of the GCC ordering gifts for delivery in Karachi enjoy full data rights:
Under the Australian Privacy Principles (APPs) and the Spam Act 2003:
Under the Prevention of Electronic Crimes Act 2016 (PECA) and consumer electronic transaction guidelines in Pakistan, customer confidentiality and transactional authenticity are strictly safeguarded across all digital order records.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
Retained for 7 years to comply with statutory accounting and tax regulations.
Retained for up to 12 months for quality assurance, proof of delivery, and claims handling.
Retained until consent is withdrawn or unsubscribed by the user.
We use strictly necessary cookies to keep your shopping bag active and secure your checkout. Optional analytics and functional cookies are only activated with your affirmative consent.
Our website and floral gifting services are directed exclusively at adults aged 18 and older. We do not knowingly solicit or collect personal data from children under 13 years of age (or under 16 where applicable by law). If you believe a minor has submitted personal information, please contact us immediately for prompt deletion.
To exercise your right to access, correct, port, restrict, or delete your personal data, or to ask questions regarding this policy, please reach out to our privacy office:
Requests are verified and processed within 30 days without charge.
Flora The Gifting Studio, Clifton, Karachi, Sindh 75600, Pakistan.