Data protection

Last updated: July 16, 2026

Secret Garden Plant Shop operates this store and site, including all information, content, features, tools, products, and related services, to provide you, the customer, with a tailored shopping experience (“Services”). Secret Garden Plant Shop is supported by Shopify, enabling us to provide you with the Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or perform another transaction using the Services or when you communicate with us otherwise. In case of any discrepancy between our Terms and this Privacy Policy, this Privacy Policy applies regarding the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any Service, you confirm that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal information we collect or process

When we use the term “personal information,” we mean information that identifies you or another person or that can reasonably be associated with you. Personal information does not include information collected anonymously or that has been anonymized so that it cannot identify you or be reasonably associated with you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit card numbers, debit card numbers, and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation, and other payment details.
• Account information including username, password, security questions, preferences, and settings.
• Transaction information including items you view, add to cart, add to wish list, purchase, return, exchange, or cancel, as well as previous transactions.
• Communications with us including information you include in communications with us, for example, when you submit a customer support request.
• Device information including information about your device, browser, or network connection, IP address, and other unique identifiers.
• Usage information including information about your interaction with the Services, including how and when you interact with or view the Services.

Sources of personal information

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device, when you use our products or services or visit our websites, as well as through the use of cookies and similar technologies;
• From our service providers including when we hire them to activate certain technologies and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or the Services you use, we may use personal information for the following purposes:

• Provision, adaptation, and improvement of Services. We use your personal information to provide you with the Services, including to fulfill the contract concluded with you, process your payments, fulfill your orders, retain your preferences and items of interest, send you notifications related to your account, process purchases, returns, exchanges, or other operations, create, maintain, and manage your account in other ways, arrange delivery, facilitate possible returns and exchanges, allow you to post reviews, and create a personalized shopping experience, such as product recommendations based on your purchases. This may include using your personal information to improve and better tailor the Services.
• Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, SMS, or mail, and displaying online ads for products or services within the Services or on other websites, including based on items you have previously purchased or added to your cart and other activities within the Services.
• Security and fraud prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activities, protect public safety, and secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account information secure. We strongly recommend not sharing your username, password, or other access details with anyone else.
• Communicating with you. We use your personal information to provide customer support, respond promptly, offer efficient services, and maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with applicable laws or respond to valid legal processes, including requests from law enforcement or public authorities, to investigate or participate in civil discovery procedures, potential or actual litigation, or other legal proceedings in court, and to enforce or investigate potential violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy. Such circumstances may include:

• With Shopify, suppliers, and other third parties who provide services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, order fulfillment, and delivery).
• With business and marketing partners to provide you with marketing services and deliver advertising materials. For example, we use Shopify to support personalized advertising with third-party services, based on your online activity with various merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy statements. Depending on where you reside, you may have the right to request that we do not share information about you to display targeted ads and marketing materials based on your online activity to various merchants and sites.
• When you request, give us consent, or otherwise express your consent regarding the disclosure of certain information to third parties, such as to ship products to you or through the use of social widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a commercial transaction, such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of use or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. The information you submit within the Services will be transmitted and communicated to Shopify, as well as to third parties who may be located in countries other than the one in which you reside, to provide and improve the Services. At the same time, to help us protect, develop, and improve our activity, we use certain enhanced Shopify features that incorporate data and information obtained from your interactions with our Store, as well as with other merchants and Shopify. To provide these enhanced features, Shopify may use the personal information collected about your interactions with our store, as well as with other merchants and Shopify. In these situations, Shopify is responsible for processing your personal information, including responding to your requests to exercise rights regarding the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit Shopify's Consumer Privacy Policy. Depending on where you reside, you may exercise certain rights regarding your personal information here. Link to Shopify Privacy Portal.

Third-Party Sites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you access links to sites not affiliated with or controlled by us, you should review their privacy and security policies, as well as other terms and conditions. We do not guarantee and are not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of the information found on these sites. Information you provide in public or semi-public spaces, including information you share on third-party social media platforms, may also be visible to other users of the Services and/or users of those third-party platforms, without limitation regarding its use by us or any third party. The inclusion of such links does not, by itself, imply any endorsement of the content on these platforms or their owners or operators, except as expressly stated within the Services.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect any personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request its deletion. As of the effective date of this Privacy Policy, we have no actual knowledge that we "distribute" or "sell" (as those terms are defined under applicable law) personal information of individuals under the age of 16.

Security and retention of your information.

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security." Additionally, any information you send us may not be secure during transmission. We recommend not using unsecured methods to communicate sensitive or confidential information to us.

The retention period of your personal information depends on various factors, such as whether we need the information to manage your account, provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights and choices.

Depending on where you live, you may have some or all of the rights listed below regarding your personal information. However, these rights are not absolute, may only apply in certain circumstances, and in some cases, we may deny your request as permitted by law.

• The right to access/information. You may have the right to request access to the personal information we hold about you.
• The right to deletion. You may have the right to request the deletion of personal information we hold about you.
• The right to correction. You may have the right to request the deletion of inaccurate personal information we hold about you.
• The right to data portability. You may have the right to receive a copy of the personal information we hold about you and to request its transfer to a third party, in certain situations and with certain exceptions.
• Managing communication preferences. We may send you promotional emails, and you can opt out of receiving them at any time by using the unsubscribe option shown in the emails we send you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you have placed.

You can exercise any of these rights where indicated in the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you have, including rights related to data processed by Shopify, you can visit: https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your requests, as permitted or required by applicable law. Under applicable laws, you may designate an authorized representative to make requests on your behalf to exercise your rights. Before accepting such a request from a representative, we will ask the representative to provide proof that you have authorized them to act on your behalf, and we may ask you to verify your identity directly with us. We will respond to your request in a timely manner, in accordance with applicable law.

Complaints

If you have complaints about how we process your personal information, contact us using the contact details below. Depending on where you reside, you have the right to challenge our decision by contacting us using the contact details below or to file a complaint with your local data protection authority. For the EEA, you can find a list of data protection supervisory authorities here.

International Transfers

Please be aware that we may transfer, store, and process your personal information outside the country where you reside.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or any equivalent contracts issued by the relevant UK authority, as applicable, unless the data transfer is to a country deemed to provide an adequate level of protection.

Changes to this Privacy Policy

We may periodically update this Privacy Policy, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this site, update the "Last Updated" date, and provide notice as required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your available rights, call us at +40 786 910 002 or email us at: cosmin@secretgarden.ro or contact us at Best Florist SRL, Strada Cozia 22b, 077077 Dascalu IF, Romania For the purposes of applicable data protection legislation, we are the data controller regarding your information.