Privacy Policy

This Privacy Policy explains how Flora Gummies ("we", "us" or "our") collects, uses, stores and shares personal information when you visit our website, purchase products, subscribe to marketing communications or otherwise interact with our online store and related services (collectively, the "Services").

This policy applies to visitors and customers in Australia, New Zealand, the United States and other locations where our Services are available.

We handle personal information in accordance with applicable privacy and data protection laws.

1. Personal Information We Collect

We may collect personal information depending on how you interact with our Services.

Information you provide directly:

• Contact information, including your name, email address, telephone number and delivery address.

• Order information, including purchased products, billing details, shipping information and order history.

• Payment-related information and transaction confirmations.

• Customer service enquiries and communications.

• Marketing preferences and newsletter subscriptions.

• Customer account information, where account functionality is available.

Information collected automatically:

• IP address and approximate location.

• Browser, device and operating system information.

• Website activity, pages viewed and product interactions.

• Shopping cart activity and purchase events.

• Cookies, advertising identifiers and similar tracking information.

• Website analytics and advertising attribution information.

Information from third parties:

We may receive relevant information from Shopify, payment processors, fulfilment partners, analytics providers, advertising platforms and other service providers supporting our operations.

Certain information is necessary to process and deliver orders. Without the required details, we may be unable to complete your purchase.

2. How We Use Personal Information

We may use personal information to:

• Process payments, orders, refunds and returns.

• Arrange shipping, delivery and order tracking.

• Provide customer support and respond to enquiries.

• Operate, maintain and improve our online store.

• Detect and prevent fraud, security incidents and unauthorised transactions.

• Comply with legal, accounting and regulatory requirements.

• Understand website traffic and customer interactions.

• Send marketing communications where permitted by applicable law.

• Measure advertising performance and support relevant marketing activities.

• Protect our legal rights and resolve disputes.

Where the General Data Protection Regulation (GDPR) applies, our legal bases for processing may include the performance of a contract, compliance with legal obligations, legitimate interests or consent, depending on the specific processing activity.

Where processing relies on consent, you may withdraw that consent at any time.

3. Shopify and Payment Processing

Our online store operates on Shopify, which provides the e-commerce platform, checkout functionality and related technology used to deliver our Services.

Shopify may process personal information in accordance with its own privacy practices.

Payments may be processed through Shopify Payments, PayPal and other payment methods available at checkout.

Payment providers may collect and process information necessary to authorise transactions, prevent fraud and comply with applicable legal requirements.

We generally receive transaction information and payment confirmations rather than complete payment card details.

For more information about Shopify's privacy practices, visit:

https://www.shopify.com/legal/privacy

4. Cookies, Analytics and Advertising

We use cookies, pixels and similar technologies to operate our website, improve functionality and understand visitor interactions.

These may include:

• Essential cookies: Required for shopping carts, checkout, security and basic website functionality.

• Analytics technologies: Used to understand website performance, traffic and visitor behaviour.

• Advertising technologies: Used to measure campaign performance, attribute purchases to advertisements and support relevant advertising.

• Preference technologies: Used to remember settings and preferences.

Our marketing activities may involve platforms such as Meta, including Facebook and Instagram, and other advertising or measurement partners.

Depending on the technologies used, information such as device identifiers, website activity, product interactions and purchase events may be shared with advertising and analytics providers.

Under certain US state privacy laws, some of these disclosures may constitute the "sale" or "sharing" of personal information or processing for targeted advertising, even where information is not exchanged for money.

Where required by applicable law, we will provide appropriate consent or opt-out mechanisms for non-essential tracking and advertising activities.

You may manage certain preferences through available website privacy controls, your browser settings or by contacting us.

Disabling certain cookies may affect website functionality.

5. How We Share Personal Information

We may share personal information with third parties where reasonably necessary to operate our Services or fulfil the purposes described in this policy.

These may include:

• Shopify and e-commerce technology providers.

• Payment processors and financial service providers.

• Order fulfilment partners and shipping carriers.

• Customer support and communications providers.

• Website hosting, security and technical service providers.

• Analytics and advertising partners.

• Professional advisers and regulatory authorities where required or permitted by law.

• Parties involved in a business sale, merger or restructuring, subject to applicable law.

Some third parties may process personal information independently under their own privacy policies.

We do not disclose personal information without an applicable business purpose, legal basis or other permitted reason.

6. International Data Transfers

We operate internationally and use service providers located in different countries.

Depending on your location and the services involved, personal information may be transferred, stored or processed outside your country of residence, including in Germany, China, Australia, New Zealand and the United States.

For example, information necessary to fulfil your order may be shared with international fulfilment partners and shipping providers.

Privacy laws and standards may differ between jurisdictions.

Where applicable law requires safeguards for international data transfers, we use or arrange appropriate transfer mechanisms, such as applicable contractual protections or other legally recognised safeguards.

You may contact us for further information about international data processing.

7. Data Security and Retention

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, disclosure, alteration and misuse.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

We retain personal information for as long as reasonably necessary to:

• Fulfil orders and provide customer support.

• Maintain transaction and accounting records.

• Comply with applicable legal obligations.

• Prevent fraud and resolve disputes.

• Protect our legitimate business interests.

Retention periods depend on the type of information, the purpose of processing and applicable legal requirements.

When information is no longer required, we take appropriate steps to delete or anonymise it, unless further retention is legally required or permitted.

8. Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

• Request access to personal information held about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of personal information.

• Obtain information about how personal information is processed or shared.

• Receive certain information in a portable format.

• Object to or restrict certain processing activities.

• Withdraw consent where processing relies on consent.

• Opt out of certain marketing or targeted advertising activities.

• Lodge a complaint with an appropriate privacy authority.

Some rights are subject to exceptions or additional legal requirements.

We may need to verify your identity before processing certain requests.

To exercise an applicable privacy right, email support@floragummies.com with the subject line "Privacy Request".

We will review and respond to requests within the timeframe required by applicable law.

9. Additional Privacy Rights for United States Residents

Residents of certain US states may have additional rights under applicable state privacy laws.

Depending on your state of residence and whether the relevant legislation applies to our business, these may include:

• The right to know what personal information is collected and how it is used.

• The right to access, correct or delete personal information.

• The right to receive certain information in a portable format.

• The right to opt out of the sale or sharing of personal information.

• The right to opt out of certain targeted advertising activities.

• The right to limit certain uses of sensitive personal information.

• The right to appeal certain decisions concerning privacy requests.

• The right not to be unlawfully discriminated against for exercising privacy rights.

Targeted Advertising and Data-Sharing Choices

Some advertising and analytics technologies may involve activities classified as targeted advertising or the sale or sharing of personal information under applicable state laws.

Where legally required, eligible consumers may request to opt out through available website privacy controls or by contacting us at support@floragummies.com.

Where applicable law requires us to recognise browser-based opt-out preference signals, including Global Privacy Control, we will process those signals as required.

Health-Related Information

Because our products relate to personal wellness, certain purchase details, browsing interactions or inferred product interests may qualify as sensitive or consumer health information under applicable privacy laws.

Some US states provide additional protections for this type of information.

Where applicable, we will handle such information in accordance with relevant legal requirements, including any additional notice, consent or restriction obligations.

We do not require customers to provide detailed medical histories to complete an ordinary purchase.

Submitting a US Privacy Request

To exercise an applicable privacy right, email:

support@floragummies.com

Subject: US Privacy Request

We may request reasonable information to verify your identity before processing a request.

Where required by law, you may also have the right to appeal a decision concerning your request.

10. Australian Customers

Where the Australian Privacy Act 1988 and the Australian Privacy Principles apply to our activities, customers may have rights concerning access to and correction of their personal information.

Australian customers may contact us with privacy enquiries or complaints.

Please email support@floragummies.com and provide relevant details about your concern.

We will review the matter and respond in accordance with applicable law.

Where applicable, unresolved privacy complaints may be referred to the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au

11. New Zealand Customers

Where the New Zealand Privacy Act 2020 applies to our activities, customers may have rights concerning the collection, use, access and correction of personal information.

For privacy enquiries or complaints, contact support@floragummies.com.

We will review and respond in accordance with applicable law.

Where applicable, customers may also contact the Office of the Privacy Commissioner in New Zealand.

Website: https://www.privacy.org.nz

12. European Data Protection Rights

Where the GDPR applies, individuals may have rights relating to access, rectification, erasure, restriction of processing, data portability and objections to processing.

You may also have the right to withdraw consent and lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to applicable legal conditions and exceptions.

For enquiries about GDPR rights or the legal basis for a specific processing activity, contact support@floragummies.com.

13. Marketing Communications

If you subscribe to our marketing communications, we may send you product information, promotional offers and other marketing messages where permitted by applicable law.

You may unsubscribe at any time using the unsubscribe link included in promotional emails or by contacting us.

Unsubscribing from marketing does not prevent necessary transactional communications about orders, payments, deliveries or customer service.

14. Children's Privacy

Our website and products are intended for adults.

We do not knowingly collect personal information from children in circumstances where doing so would violate applicable law.

If you believe a child has provided personal information to us, please contact support@floragummies.com.

We will review the situation and take appropriate action where necessary.

15. Third-Party Websites and Services

Our website may contain links to third-party websites or services.

We are not responsible for the privacy, security or content practices of independently operated third-party websites.

We encourage you to review their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, business operations, data processing practices or legal requirements.

The latest version will be published on our website with an updated revision date.

Where required by applicable law, we will provide additional notice or obtain consent before making material changes to how personal information is processed.

17. Contact and Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right or would like to submit a complaint, please contact:

Flora Gummies

Website: www.floragummies.com

Email: support@floragummies.com

We will review enquiries and complaints and respond in accordance with applicable law.

Depending on your location, you may also have the right to contact the relevant privacy or data protection authority.