Privacy Policy

Last updated: January 27, 2026

This Privacy Policy describes how Marina Yemets, operating as a sole trader under Portuguese law (“we”, “us”, or “our”), collects, uses, and discloses personal data when you visit or make a purchase from our website (the “Services”).

We are committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Lei n.º 58/2019, and other applicable Portuguese and European data protection laws.

1. Data Controller

For the purposes of applicable data protection laws, the data controller is:

Name: Marina Yemets
Legal status: Sole trader (Individual / ENI)
NIF: 325421153
Address: Rua Cecília Meireles 9, 1500-154, Portugal
Email: hello@flowflowerss.com

A Data Protection Officer (DPO) has not been appointed, as this is not required given the nature and scale of our processing activities.

2. Personal Data We Collect

Depending on how you interact with the Services, we may collect the following categories of personal data:

• Contact details: name, email address, phone number, billing and delivery address

• Order and transaction data: products purchased, order history, delivery details, payment confirmation

• Payment information: payment method and transaction details (payments are processed securely by Shopify Payments; we do not store full card details)

• Account data: login credentials and preferences, if you create an account

• Communications: information you provide when contacting us

• Technical data: IP address, device type, browser information, and usage data collected via cookies and similar technologies

We do not knowingly collect special categories of personal data.

3. Sources of Personal Data

We collect personal data from the following sources:

• Directly from you, when you place an order, contact us, or use the Services

• Automatically through our website, using cookies and similar technologies

• Shopify and other service providers acting on our behalf

4. Purposes and Legal Bases for Processing

We process personal data only where permitted by law and for the following purposes:

a) Performance of a Contract (Article 6(1)(b) GDPR)

• Processing orders and payments

• Delivering products

• Managing customer accounts and customer support

b) Compliance with Legal Obligations (Article 6(1)(c) GDPR)

• Accounting and tax obligations under Portuguese law

• Responding to lawful requests from public authorities

c) Legitimate Interests (Article 6(1)(f) GDPR)

• Ensuring website security and fraud prevention

• Improving our Services and basic analytics

• Managing business operations

We ensure that our legitimate interests do not override your fundamental rights and freedoms.

d) Consent (Article 6(1)(a) GDPR)

• Use of non-essential cookies

• Advertising and analytics technologies

You may withdraw your consent at any time.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies.

Types of cookies we use:

• Strictly necessary cookies: required for the website to function properly (e.g. shopping cart, checkout)

• Analytics cookies: used to understand how visitors interact with the website (Shopify Analytics; Google Analytics may be implemented in the future)

• Advertising cookies: used in connection with advertising platforms such as Meta (Facebook / Instagram)

Cookie consent

We use Shopify’s built-in cookie consent banner.
Non-essential cookies are only activated after you provide your consent.
You can manage or withdraw your consent at any time through the cookie settings available on our website or through your browser settings.

5.1 Meta (Facebook / Instagram) Advertising Technologies

We use advertising technologies provided by Meta Platforms Ireland Ltd., such as the Meta Pixel, Advanced Matching, and Conversions API, to measure advertising performance, understand how users interact with our website, and show relevant advertisements on Facebook and Instagram.

These technologies may collect and process personal data such as:

• IP address

• Device and browser information

• Pages visited and actions taken on the website

• Purchase or conversion events

• Hashed identifiers (such as email address or phone number), where applicable

This data may be transmitted to Meta and combined with data from your Facebook or Instagram account, in accordance with Meta’s privacy policies.

Meta advertising technologies are activated only after you provide consent through our cookie consent banner.
You may withdraw your consent at any time via the cookie settings on our website or through your browser settings.

You can also manage how Meta uses your data for advertising purposes through your Facebook account, including by adjusting your Off-Facebook Activity settings.

For more information, please refer to Meta’s Privacy Policy:
https://www.facebook.com/privacy/policy

6. Sharing of Personal Data

We may share personal data with:

• Shopify, which hosts our online store and provides essential services

• Payment providers, such as Shopify Payments

• Delivery and logistics providers

• Advertising and analytics partners, such as Meta Platforms Ireland Ltd., where you have provided consent

• Public authorities, where required by law

All service providers process personal data in accordance with applicable data protection laws.

7. International Data Transfers

Some of our service providers, including Shopify, may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on appropriate safeguards, such as:

• European Commission Standard Contractual Clauses, or

• Transfers to countries recognized as providing an adequate level of protection

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

• Order and invoicing data: up to 10 years (as required by Portuguese tax law)

• Customer account data: for as long as the account remains active

• Customer communications: as long as necessary to resolve inquiries

9. Children’s Data

Our Services are not directed at children under the age of 13.
We do not knowingly collect personal data from children under this age.

10. Your Rights

Under the GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Request deletion of your data

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

You also have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
https://www.cnpd.pt

To exercise your rights, please contact us at hello@flowflowerss.com.

11. Security

We implement appropriate technical and organizational measures to protect personal data.
However, no method of transmission over the internet is completely secure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
The updated version will be posted on our website with a revised “Last updated” date.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact:

Email: hello@flowflowerss.com
Address: Rua Cecília Meireles 9, 1500-154, Portugal