Privacy Policy

Chang Florist (DBD e-Commerce Registration 3301800453444) is the data controller for your personal information. Reach us at info@changflorist.com.

To process your order, we collect your name, email, phone, and billing details — and your recipient's name, address, and phone. If you create an optional account, we also store your order history and saved addresses.

We use your information only to fulfill and deliver your order, communicate about it, and meet legal and accounting obligations. We never sell or rent your data.

We share only what's necessary: partner florists (recipient name, address, phone — to complete delivery); Stripe (payment — we never see or store your full card number); Cloudinary (hosting delivery photos); and, only with your consent, Google (anonymous usage analytics — see "Website Analytics"). We don't share your data with anyone else.

Our delivery team or partner florists may contact the recipient by phone when needed to arrange or confirm delivery. If you'd prefer we don't call the recipient, just leave a note with your order.

We use a small number of cookies to remember your choices — your currency preference, dismissed announcements, the items in your cart, and your privacy choice itself. These are essential and don't track you across other websites. With your consent, we also use Google Analytics cookies, described in "Website Analytics" below. You can review or change your cookie choice anytime via the "Cookie preferences" link in the footer.

With your consent, we use Google Analytics 4 (GA4), a service provided by Google, to understand how visitors find and use our site — which pages are popular and how people move through the shop — so we can improve it. Our legal basis is your consent (under Thailand's PDPA and, for visitors in the EU and UK, the GDPR).

GA4 collects technical and usage data such as your general location, device and browser type, the pages you view, and on-site actions like searches and purchases. We use a privacy-first approach with Google Analytics: no analytics cookies are set and no data that could identify you is collected until you accept on our cookie banner. If you decline, Google receives only anonymous, aggregated signals that cannot identify you. We do not use this data for advertising, and we never sell it.

You can withdraw or change your consent at any time using the "Cookie preferences" link in the footer. You can also install Google's official opt-out browser add-on or block cookies in your browser. For more on how Google handles data, see Google's Privacy Policy.

We keep your order records so you can refer back to your purchase history. You can ask us to delete your data at any time, and we'll do so — except for records we're legally required to retain (such as for accounting and tax).

Under the PDPA, you have the right to access, correct, delete, or export your data, and to withdraw consent or object to processing. To exercise any of these, just contact us. You may also complain to Thailand's Personal Data Protection Committee (PDPC).

We protect your data with industry-standard measures, including encrypted connections and secure payment processing through Stripe.

We may update this policy from time to time. The latest version is always on this page, with the date last updated.

Questions about your privacy? Contact us at info@changflorist.com.