Personal data protection charter

Our commitments regarding protection of your personal data.

Identity of the controller

Universal Flower SASU company, with a share capital of €328,620.00, with Nanterre company registration number B 419 910 641, whose registered at 39 rue Anatole France, 92300 Levallois-Perret.

A partnership of trust between Universal Flower and its clients

Universal Flower gives particular care and attention to the protection of its clients’ personal data. Further, we commit to complying with the law n° 78-17 dated 6 January 1978 relating to freedom of information and data, as amended by the European GDPR regulation 2016/679 dated 27 April 2016 relating to the protection of personal data.

By using this website, the Buyer agrees to the collection and use of personal data in the manner described in our current personal data protection charter.

Scope of application

The current personal data protection charter sets out the manner in which Universal Flower handles your personal data whilst you use our website. Our charter also covers the other methods of collection of your personal data, such as when you contact our Customer Services by telephone. Any subcontractor involved in the processing of your order on our website, or other service providers handling your personal data can, in their own general terms and conditions of usage, have their own rules concerning confidentiality which supplement the current charter, in accordance with GDPR regulation.

Collection and purpose of handling personal data

Universal Flower collects the personal data of all Users who browse, view and order on our website, notably by the use of cookies in accordance with French legislation and European regulation currently in force.

When do we collect your personal data?

We collect your personal data when you:

Create an account
Visit our website, which uses cookies
Order products
Contact with Customer Service by any means of communication made available such as email, chat or telephone
Browse our website and view products

Writing a review on your order

During a game or competition

When you view our advertisements

During satisfaction survey

What personal data do we collect ?

The Client’s personal data, as set out below, is only kept for the length of time which is strictly necessary for the above mentioned purposes.

Data relevant to your order

The personal data which is strictly required to process your order is marked with an asterix and concerns the following details :

1. your first name and surname,
2. your gender,
3. your age,
4. your email address,
5. your landline or mobile number,
6. your message,
Also required are :
6. the address of the recipient, their first name* and surname*,
7. postal address, phone number*.

We also collect personal data when you buy our products. In particular, we collect information relating to the total cost and nature of your purchases, information relating to your orders, your receipts and your client history.

The written message which you have chosen to add to your flower bouquet remains confidential.

At Universal Flower, we would like to assure you that your bank details are not recorded by our company. To ensure the security of your financial information, we use an authorized payment provider who manages all financial transactions in accordance with the highest security and confidentiality standards. This service provider specializes in managing online payments and is responsible for processing your financial information securely, ensuring that your banking details remain confidential.

How do we use your data ?

All personal data is confidential, and access to data is limited to Universal Flower’s work partners or subcontractors acting on behalf of Universal Flower, who require access to the data in order to carry out services. All those who have access to your data are subject to a strict duty of confidentiality. The address details for the recipient of your bouquet are used for the express purpose of ensuring delivery of your order at the designated time. Universal Flower is bound by a duty of professional confidentiality and will never share personal information with third parties, just as we will not use it for commercial purposes.

In accordance with regulation, we do not collect data which records racial or ethnic background, political opinion, religious or philosophical belief or union membership, personal genetic data, or biometric data used to uniquely identify a person physically, data concerning health or relating to sexuality or the sexual orientation of any person.

These categories of personal data are never collected or handled by Universal Flower.

We are committed to maintaining the confidentiality of your personal information. Your age, gender, first and last names, email address, postal address, telephone number and any other data will not be disseminated, shared or sold to third parties without your explicit consent, except in cases where the law requires it or the 'allowed. We implement robust security measures to protect your data, ensuring it remains confidential.

The collection of personal data for minors is carried out only in compliance with applicable laws and with the required legal consent. To the extent that this information is sensitive data, we treat this data with particular care, and we only use it for legitimate and specific purposes.

If a parent or legal guardian discovers that we have collected information from a minor without adequate consent, they have the right to contact us to request deletion of that data. We will immediately take steps to comply with this request and delete the affected information

We encourage parents and legal guardians to monitor use of the Services by minors and to contact us with any concerns or questions regarding data collection from their children. To learn more about how we handle minors’ data, please contact us at

For what processing is the collected data necessary?

As part of the execution of our obligations towards our customers, we collect and use your personal information to manage our commercial relationship, in particular to manage your purchases and your orders, to deliver your products and to offer you our services and promotional offers which may interest you. This information helps us improve your online shopping experience, as aimed below.



Order management

Customer information and data are collected as part of a Universal Flower floral transmission, and are necessary for order management and commercial relations.

Management of client relationship

We use and keep your personal data to keep our client records up to date and to offer you a personalised service.

Personalization of our services

Customer information and data also allows Universal Flower to improve and personalize the products and services we offer on our website and mobile site, and the information we send to you.

Communication with you

We collect and keep your personal information in order to communicate with you regarding your orders, billing and complaints to Customer Service.

Customer knowledge, statistics, and performance of our site

We may use your data to better understand our customers, and for statistical purposes to analyze the activity of our site, and improve the services we offer. We analyze the customer journey, carry out audience measurements (number of pages viewed, number of visits to the site, Internet users' activities on the site, definition of the target, for example).

Legal or regulatory requirement

We may be required to share your personal data in the event that there are legitimate requests made by public authorities, in particular when responding to demands concerning national security, the fight against fraud or under the application of law.

In application of article L 121-20-5 of the Consumer Code, Universal Flower reserves the right to use this data, electronic or telephone contact details of customers for sending commercial information intended to promote products floral transmission or for quality control purposes, to the exclusion of any other use of direct prospecting on behalf of third parties.

Fraud prevention and the fight against fraud

We also collect data in the context of fraud prevention and the fight against fraud, especially data concerning bank card details. Universal Flower reserves the right to verify personal data disclosed by the client during the process of ordering and to implement all measures deemed necessary to verify that the person whose bank account is debited is in fact the person making the order, in order to prevent any fraudulent payment. Verification can take the form of questions relating to identity and/or address details.

In the absence of any positive confirmation from the client, Universal Flower reserves the right to cancel orders made by the client.

Targeted partner advertisements

Universal Flower collects and analyzes your data for marketing purposes (profiling), with the assistance of specialized service providers. In this context, your data is transformed into pseudonymized detailed profiles (i.e. profiles that no longer allow you to be personally identified when advertising content is broadcast during your Internet browsing) to be used by Universal Flower with the aim of carrying out advertising campaigns on the internet (display) targeted to your interests and allowing you to benefit from offers which correspond to your consumption habits.



What is the legal basis for data retention?

Your data is collected according to 4 legal bases, which authorize us to process your personal data:

• The contract: the processing of personal data is necessary for the execution of the contract that you have accepted. • Consent: you accept the processing of your personal data (non-obligatory fields), consent may be withdrawn at any time. • The law: the processing of your personal data is required by law. • Legitimate interest: Universal Flower has a commercial interest in processing your data which is justified, balanced and does not infringe on your privacy. With some exceptions, you can object to processing based on legitimate interest at any time by notifying Universal Flower.

Handling of your personal data

At Universal Flower, you are in charge of your personal data When you provide your personal data to Universal Flower, you can access, update, modify or delete your information at any time by writing to the following address :

Universal Flower
Département de la protection des données personnelles
39 rue Anatole Francet
92300 Levallois-Perret
France

• Your rights in relation to your personal data
In accordance with the law n° 78-17 dated 6 January 1978 relating to freedom of information and data, as modified by GDPR regulation, you benefit from several rights in relation to the management of your data :
the right to raise concerns regarding our methods of handling your personal data;
the right to access your personal data which we handle ;
the right to amend ;
the right to delete ;
the right to transfer your data ;
the right to limit the handling of your data ;
the right to specify your preferences in relation to the retention, deletion and sharing of your personal data after your death ;
the right to raise a complaint to the CNIL (‘Commission Nat Informatique et Liberté’, or National Commission on Information Technology and Freedom) ;

• How to enforce your rights?
by courrier accompanied by a copy of a valid form of identification sent to the following address :

Universal Flower
Département de la protection des données personnelles
39 rue Anatole France
92300 Levallois-Perret
France

If you seek clarification on the content of these rights, please contact us at the above mentioned address.
We will aim to respond to your enquiry in a timely manner, and at the latest, within a month of your enquiry.

Transfer of personal data outside of the European Union

The collected data may be handled outside of the European Union. In this case, Universal Flower takes the necessary measures with its subcontractors to guarantee an adequate level of protection of your data, in accordance with the relevant regulatory framework.

If the subcontractors in question do not comply with the Privacy Shield agreement relating to the transfer of data to the United States of America, or are not resident in a country governed by legislation offering adequate levels of protection, they will have firstly signed the standard contractual clauses of the European Commission or will be subject to internal restrictive rules approved by the relevant authorities.

Time period for keeping data

At Universal Flower, we take customer data retention seriously. We retain your personal data, including your name, address, email address, and other relevant information, for a period of five (5) years from the date of the last interaction with our services. This retention policy is established to ensure that we can meet your needs as a customer, handle returns, questions or after-sales service requests, and maintain a history of your past transactions, as well as personalize our offers and our communication to offer you content in line with your interests.

The personal data transmitted concerning the recipient of your order are kept for 1 (1) year from the last interaction with our services. This retention policy is established to ensure that we can meet your needs as a customer, handle returns, questions or customer service requests, and maintain a history of your past transactions.

We also comply with legal and regulatory requirements which may require us to retain certain data for a longer period. Once the retention period has expired, we undertake to securely erase or anonymize your data so that it can no longer be associated with you.

Your personal data is kept for the time necessary to achieve the objective pursued during their collection.



Treatment of personal data after death

Universal Flower informs the User that during their lifetime, they can specify their choices in relation to the retention, deletion and sharing of their personal data after their death. These instructions can be general or specific. The User can amend or revoke these instructions at any time by making a request accompanied by a copy of a valid form of identification by courrier to the following address :

Universal Flower
Département de la protection des données personnelles
39 rue Anatole France
92300 Levallois-Perret
France

We will aim to respond to your request in a timely manner, and at the latest, within a month of your enquiry.

SMS / MMS

Universal Flower can use the client’s mobile number in order to manage their orders and for commercial promotion purposes. At any time, the client may opt out of this practice, simply and for free by sending a letter by courier accompanied by a copy of a valid form of identification to the following address :

Universal Flower
Département de la protection des données personnelles
39 rue Anatole France
92300 Levallois-Perret
France

We will aim to respond to your enquiry in a timely manner, and at the latest, within a month of your enquiry.

Updates to our personal data protection charter

This current charter can be amended from time to time and without warning. Any amendment comes into force from the moment of publication of the updated charter on our current website. We use your personal data according to the terms of the charter in force at the moment you share your personal data. We will inform you of any important changes to our charter. We will seek your consent if necessary, or if there are changes concerning the purpose for which we collect your data. In order to comply with current legislation relating to the protection of personal data, we review this charter annually.

What is the cookie policy?

The Universal Flower site and all its web pages use cookies to distinguish you from other users of the site. This allows us to improve the services and optimize your user experience.

A cookie is a string of text information transferred by a website to your computer's hard drive so that the website can remember you. Cookies can help a website tailor content to your interests more quickly. Most major websites use cookies. Typically, a cookie contains the name of the domain the cookie originated from; the "lifetime" of the cookie and a value, namely a randomly created unique number.

On the Universal Flower site, there are 2 (two) types of cookies:

Temporary cookies, which remain in your browser's cookie file until you leave the site and

Persistent cookies, which remain for much longer in the folder corresponding to the management of cookies in your browser (the duration depends on the lifespan of the cookie in question. As regards our cookies, it is 1 year unless reconnection which restarts the duration).

Temporary cookies are used:

To allow you to transfer information from one page to another on our site without having to re-enter it and

To enable you to access stored registration information. Persistent cookies are used:

To help us identify you as a visitor (by number, not personally) when you return to our website;

To compile anonymous aggregate statistics that allow us to understand how visitors use our site and help us improve the structure of our website. We cannot personally identify you in this way.

You can accept or refuse cookies by changing your browser settings. However, you may lose some interactive features of the Service if cookies are disabled.

You can delete and block all cookies from the Universal Flower site. To do this, change your browser setting to refuse some or all cookies. Please be aware, however, that if you decide to block cookies through your browser, some elements of our website may not function properly.

Glossary ‘Anonymisation’ is defined as ‘the process of removing personal identifiers from personal data that may lead to an individual being identified ;

‘Collect’ means the act of collecting data of a personal nature. Collection can take place via the use of questionnaires or online forms ;

'Consent’: your consent means any expression of your free will which is specific, clear and unequivocal by nature, by which you express your agreement to us handling your personal data, by way of a positive declaration or clear positive act ;

‘Personal data’ or ‘data of a personal nature’ means all information relating to an identified or identifiable physical person; a person who can be identified, directly or indirectly, by reference to an identifier, such as a name, a identification number, data concerning their location, online identification, or to specific elements relating to a person’s physicality, physiology, genetics, psychology, cultural or socioeconomic status ;

‘Rights to protection of your personal data’ : means the collective fundamental rights described in European legislation, relating to :

the right to information ;
the right to access ;
the right to amend;
the right to delete or the right to be forgotten ;
the right to transfer your data ;
right to raise concerns regarding our methods of handling your personal data;
the right to limit the handling of your data;
the right to specify your preferences in relation to the retention, deletion and sharing of your personal data after your death ;
the right to raise a complaint to the CNIL (‘Commission Nat Informatique et Liberté’, or National Commission on Information Technology and Freedom) ;

‘Pseudonymisation’ means the technical and organizational security method which replaces identifying data in order to ensure that personal data is not attributed to a physical or identifiable person.

‘Commercial relationship’ means all relationships between Universal Flower and its clients, including those made during the course of purchases of products or services, the use of services post-purchase, participation in online games, product returns, client complaints, participation in client satisfaction surveys or client loyalty scheme;

‘Controller’ means the person or organisation that, alone or jointly, determines the objectives and methods of handling your personal data ;

‘Sub-contractor’ means someone who handles personal data on behalf of the person, corporate structure or organisation who is the Controller of personal data ;

‘Third party’ means any person other than Universal Flower and yourself ;

‘Handling of Personal Data’ means any action(s) taken in respect of your personal data, whatever the kind of online service in question or the process utilized.