How Flowermail handles data

1. Data Controller

The Flowermail service is operated by Individual Entrepreneur Shevket Bilialov (ინდივიდუალური მეწარმე შევქეთ ბილიალოვ), registered in Georgia.

Registration / Tax ID: 105780003. Registered address: Georgia, Tbilisi, Saburtalo District, Iosebidze Street, N17.

For privacy questions, access requests, or deletion requests, contact us at shuregami1221@gmail.com.

2. Data We Collect

Depending on how the service is used, Flowermail may process the following categories of data:

• Business account data: names, email addresses, phone numbers, roles, login sessions, and access permissions of employees and administrators.
• Customer and order data: customer names, phone numbers, delivery addresses, order details, delivery time, order status, notes, greeting card text, bouquet details, and related operational information entered by a business user.
• Inventory and catalog data: flower names, prices, bouquet photos, bouquet descriptions, stock movements, and internal business records.
• Communication data: messages, sender identifiers, profile names, phone numbers, message text, media files, timestamps, and conversation metadata received through connected messaging channels.
• Technical data: IP address, browser/device information, server logs, cookies or session identifiers, and security events needed to operate and protect the service.

3. Messaging Integrations

Flowermail can integrate with WhatsApp Business Platform, Instagram, Telegram, and website forms to help businesses receive and respond to customer inquiries in one work inbox.

When a business connects a Meta messaging channel, Flowermail may process data made available through Meta APIs, including WhatsApp Business Account identifiers, Phone Number IDs, page or account identifiers, webhook events, customer messages, message status updates, timestamps, and media attachments.

4. How We Use Data

We use data to:

• provide access to the Flowermail website, mobile application, and operational tools;
• process orders, reservations, deliveries, inventory, prices, and reports;
• display incoming customer messages and allow authorized employees to reply;
• send notifications, order updates, and operational messages;
• maintain security, prevent abuse, troubleshoot errors, and improve service reliability;
• comply with legal obligations and platform requirements.

5. Data Sharing and Service Providers

We do not sell personal data. We may share or process data with service providers only when needed to operate the service, including hosting providers, database infrastructure, email or notification services, and messaging platforms such as Meta, Telegram, and other channels connected by the business.

Data may also be disclosed if required by law, court order, or to protect the rights, security, and integrity of Flowermail, its users, or customers.

6. Retention and Deletion

We keep business, order, and message data for as long as needed to provide the service, maintain operational records, resolve disputes, comply with legal obligations, and support customer service.

A business administrator may request deletion of its account data, connected messaging data, or customer records by contacting us. When a messaging integration is disconnected, Flowermail stops receiving new events from that channel. Some logs or backups may remain for a limited period for security and recovery purposes.

7. Your Rights and Choices

Depending on applicable law, you may request access to, correction of, export of, restriction of, or deletion of your personal data. You may also object to certain processing or withdraw consent where processing is based on consent.

To exercise these rights, email shuregami1221@gmail.com. We may need to verify your identity or your authority to act on behalf of a business before completing a request.

8. Security

We use technical and organizational measures designed to protect data against unauthorized access, loss, misuse, or alteration. These measures include role-based access, HTTPS, server-side access controls, protected sessions, and restricted access to integration secrets.

No method of transmission or storage is completely secure. If we become aware of a security incident that affects personal data, we will take appropriate steps according to applicable law.

9. Children

Flowermail is intended for business use and is not directed to children. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy when our service, integrations, or legal requirements change. The updated version will be posted on this page with a new effective date.

11. Contact

Privacy contact: shuregami1221@gmail.com

Website: https://flowermail.ge/