Privacy Policy

Effective Date: April 21, 2026

1. Introduction

Orlaya Floral Studio ('we', 'us', or 'our') is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or place an order with us. We operate in Metro Vancouver, British Columbia, Canada and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

2. Information We Collect

We may collect the following types of personal information:

Contact information: name, email address, phone number, and delivery address
Payment information: credit card details processed securely through our payment provider (we do not store full card numbers)
Order details: flower arrangements, delivery instructions, gift messages, and order history
Account information: if you create an account, your login credentials and preferences
Technical data: IP address, browser type, and pages visited via cookies and analytics tools

3. How We Use Your Information

We use your personal information to:

Process and fulfill your orders and arrange delivery within Metro Vancouver
Communicate with you about your orders, including confirmations and delivery updates
Process payments securely
Send promotional emails or offers, with your consent (you may opt out at any time)
Improve our website and customer experience
Comply with legal obligations

4. Sharing Your Information

We do not sell your personal information. We may share it with:

Payment processors (e.g., Shopify Payments, Stripe) to securely handle transactions
Delivery service providers operating within Metro Vancouver
Email marketing platforms, solely for sending communications you have consented to
Legal or regulatory authorities if required by law

5. Cookies

Our website uses cookies to enhance your browsing experience, remember your cart, and analyze website traffic. You may disable cookies through your browser settings; however, some features of our website may not function properly as a result.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Order records are typically retained for seven (7) years for accounting and legal purposes.

7. Your Rights

Under PIPEDA and PIPA, you have the right to:

Access the personal information we hold about you
Request corrections to inaccurate or incomplete information
Withdraw consent to the collection or use of your information (subject to legal or contractual restrictions)
Request deletion of your information, where permitted by law

To exercise any of these rights, please contact us at the details below.

8. Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, or misuse. All payment transactions are encrypted using SSL technology. However, no method of transmission over the internet is 100% secure.

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.