Privacy policy
1. Data controller
ROZFLEURS (SARL with share capital of €1,500)
1 rue Montpelliéret, 34000 Montpellier (34), France
SIRET: 942 806 860 00014
Contact: contact@rozfleurs.fr
2. Data collected and purposes
I only collect the data strictly necessary for the following purposes:
| Data | Purpose | Legal basis |
|---|---|---|
| Last name, first name, email, phone | Order processing and confirmation | Performance of the contract |
| Delivery and billing address | Bouquet delivery | Performance of the contract |
| Order history | Customer account management, after-sales service | Performance of the contract |
| Email (newsletter opt-in) | Sending ROZFLEURS offers and news | Consent |
| Browsing data (technical cookies) | Operation of the cart and customer area | Legitimate interest |
| Browsing and purchase data (Google Analytics) | Audience measurement and purchase-journey analysis | Consent |
3. Data recipients
Your data is passed to the following processors, strictly within the limits of their functions:
- Brevo (Sendinblue SA): sending of transactional and marketing emails. Brevo privacy policy
- Google Ireland Limited: audience measurement via Google Analytics 4, only if you have consented. This service involves a transfer of data to the United States, framed by the European Commission's standard contractual clauses and the Data Privacy Framework. Google privacy policy
- Hostinger International Ltd (Larnaca, Cyprus): hosting of the site and the data.
No data is sold or transferred to third parties for commercial purposes.
4. Retention period
- Order data: 10 years (legal accounting obligation)
- Customer account data: until the account is deleted + 3 years
- Newsletter data: until unsubscribing
- Technical cookies: session duration or 13 months maximum
- Audience-measurement cookies: 13 months
5. Your rights
In accordance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:
- Right of access: obtain a copy of your data
- Right of rectification: correct inaccurate data
- Right to erasure: request the deletion of your data
- Right to object: object to processing on legitimate grounds
- Right to portability: receive your data in a structured format
- Right to withdraw your consent: at any time for processing based on consent (newsletter)
To exercise these rights, contact me at: contact@rozfleurs.fr
If you disagree, you can refer the matter to the CNIL (French data-protection authority).
6. Cookies
This site uses strictly necessary cookies, set without consent as they are essential to its operation:
- Cart session: keeps your selection of items (duration: session)
- Authentication: keeps you signed in to the customer area (duration: 30 days)
And, only after your consent, audience-measurement cookies:
- Google Analytics 4 (
_ga,_ga_TS37Z960P8): measuring traffic and analysing the purchase journey, to improve the site (duration: 13 months maximum).
No advertising cookies are set. Until you have given your consent, no third-party audience-measurement script is loaded — not merely disabled. You can change or withdraw your choice at any time:
7. Security
Your data is transmitted over an encrypted connection (HTTPS/TLS). Passwords are stored in hashed form (Argon2i) and are never readable, including by me.
Last updated: April 2026