Privacy Policy

1. Data Controller Information

The data controller responsible for your personal data is:

Florawashing
85 Pike St, Seattle, WA 98101, USA
Phone: +1 206-682-7453
Email: assist@florawashing.world
Website: florawashing.world

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.

2. Scope and Applicability

This Privacy Policy applies to all personal data collected through our website at florawashing.world, including when you browse our pages, submit a contact form, purchase educational products or consulting services, subscribe to communications, or interact with our cookie consent mechanism.

This policy is designed to comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) where applicable, and other relevant data protection laws in jurisdictions where we operate or where our visitors are located.

3. Categories of Personal Data We Collect

3.1 Data You Provide Directly

When you contact us or use our services, we may collect:

• Full name
• Email address
• Phone number (if voluntarily provided)
• Message content and inquiry details
• Billing and payment information (for paid services, processed through secure third-party payment providers)
• Schedule information you share for personalized routine planning
• GDPR consent records with timestamps

3.2 Data Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Referring URL and exit pages
• Date and time of visit
• Pages viewed and time spent on each page
• Device type and screen resolution
• Cookie identifiers and consent preferences

3.3 Data We Do Not Collect

We do not intentionally collect sensitive personal data such as medical records, health diagnoses, government identification numbers, or financial account details beyond what is necessary for payment processing through secure third-party providers. We do not request medical history as part of our educational consulting services.

4. Purposes of Data Processing

We process your personal data for the following specific purposes:

• Responding to inquiries: To read, process, and respond to messages submitted through our contact form or email.
• Service delivery: To provide consulting sessions, personalized routine plans, educational products, and structured programs you have requested or purchased.
• Website functionality: To ensure our website operates correctly, including storing cookie consent preferences and maintaining session security.
• Analytics: To understand how visitors use our website, which pages are most visited, and how we can improve our educational content. Analytics processing occurs only with your consent.
• Marketing measurement: To evaluate the effectiveness of our advertising campaigns, only when you have consented to marketing cookies.
• Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Fraud prevention: To detect and prevent unauthorized access, fraud, and abuse of our services.

5. Legal Bases for Processing (GDPR)

Under the GDPR, we rely on the following legal bases for processing your personal data:

• Consent (Article 6(1)(a)): For analytics cookies, marketing cookies, and optional communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Contract performance (Article 6(1)(b)): When processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract, such as delivering a purchased educational product or consulting session.
• Legitimate interests (Article 6(1)(f)): For website security, fraud prevention, and improving our services, balanced against your rights and freedoms. We conduct legitimate interest assessments where required.
• Legal obligation (Article 6(1)(c)): When processing is required to comply with applicable laws, such as tax record retention requirements.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for up to 24 months after the last communication, unless a longer period is required for ongoing service delivery.
• Customer and purchase records: Retained for up to 7 years to comply with tax and accounting obligations.
• Consulting session notes: Retained for up to 12 months after the final session, then securely deleted unless you request earlier deletion.
• Cookie consent records: Retained for up to 12 months, after which we may request renewed consent.
• Analytics data: Aggregated and anonymized data may be retained indefinitely. Identifiable analytics data is retained for up to 26 months.
• Server logs: Retained for up to 90 days for security monitoring purposes.

When retention periods expire, data is securely deleted or anonymized so it can no longer be associated with you.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share data with the following categories of recipients when necessary:

• Hosting providers: To store and serve our website content securely.
• Email service providers: To send responses to your inquiries and service-related communications.
• Payment processors: To handle transactions for paid services. Payment data is processed directly by the provider and is not stored on our servers.
• Analytics providers: Only when you have consented to analytics cookies, and with data processing agreements in place.
• Legal authorities: When required by law, court order, or governmental regulation.

All third-party processors are bound by data processing agreements that require them to protect your data in accordance with applicable law and to process it only according to our instructions.

8. International Data Transfers

Florawashing is based in the United States. If you access our website from the European Economic Area or other regions with data protection laws, your personal data may be transferred to and processed in the United States or other countries where our service providers operate.

Where required, we implement appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission, and we assess the data protection standards of recipient countries.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and our servers
• Secure hosting infrastructure with regular security updates
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular review of data collection, storage, and processing practices
• Secure deletion procedures when data retention periods expire
• Incident response procedures for potential data breaches

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

10. Your Rights Under GDPR and Applicable Laws

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data when it is no longer necessary, when you withdraw consent, or when you object to processing.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time for processing that relies on consent, without affecting prior lawful processing.
• Right to lodge a complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at assist@florawashing.world. We will respond within 30 days, or within the timeframe required by applicable law. We may request verification of your identity before processing your request.

11. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Related Policies

For additional information about how we use cookies and the terms governing use of our website, please refer to our Cookie Policy and Terms of Use.