Privacy Policy
Last updated: 04.08.26
This Privacy Policy explains how Lanna Bloom collects, uses, stores and shares personal data when you visit our website, contact us or place an order.
What we do with your data
We use your details to complete and deliver your order.
| Data | Why we collect it |
|---|---|
| Name | To identify you and manage your order |
| Phone number | To contact you about your order or delivery |
| Delivery address | To deliver the flowers to the correct location |
| Email address | To send your order confirmation and essential updates |
| Order-page chat messages | To coordinate delivery and handle post-delivery support (temporary; deleted after delivery) |
For delivery, we may share the recipient’s name, phone number, address and delivery instructions with our driver or delivery partner.
1. Who we are
Lanna Bloom is operated by Ms. Worapan Nunthasettha, a sole proprietor registered in Thailand.
For questions or requests concerning personal data, contact us at:
Email: support@lannabloom.shop
2. Personal data we collect
Depending on how you use our website and services, we may collect:
Customer information
- Name
- Email address
- Telephone number
- Billing and delivery information
- Communications with our team
- Temporary order-page chat messages (when that feature is enabled)
- Order history and customer-service records
Recipient and delivery information
When you order for another person, we may collect:
- Recipient’s name
- Recipient’s telephone number
- Delivery address or map location
- Delivery instructions
- Card message
- Other information needed to prepare and deliver the order
Please provide only information that is necessary for the delivery and ensure that you are authorised to provide the recipient’s information to us.
Order and payment information
We may collect:
- Products ordered
- Order value
- Delivery date and time
- Payment status
- Transaction or order reference
- Refund and cancellation information
Card payments are processed by payment providers such as Stripe. Lanna Bloom does not receive or store your complete payment-card details.
Website and device information
When you use our website, we may collect information such as:
- Pages visited
- Buttons and links clicked
- Cart and checkout activity
- Referring website or campaign
- Browser and device type
- IP address
- Approximate location derived from technical information
- Cookie and analytics identifiers
3. How we use personal data
We may use personal data to:
- Create and manage orders
- Confirm availability and payment
- Prepare bouquets, gifts and card messages
- Contact customers and recipients about an order
- Calculate and arrange delivery
- Share necessary delivery information with authorised team members, florists and drivers
- Process payments and refunds
- Provide customer support
- Operate temporary order-page chat for delivery coordination and post-delivery support
- Resolve delivery, payment or quality issues
- Detect fraud, misuse and security problems
- Maintain business, accounting and transaction records
- Comply with applicable laws and lawful requests
- Analyse and improve our website and ordering process
- Measure advertising and marketing performance where permitted
- Send marketing or checkout reminders when the customer has chosen to receive them
Information required to process and deliver an order is used because it is necessary to provide the service requested by the customer. Optional marketing communications are handled separately.
4. Information about other people
Customers may provide personal information about a recipient or another person when placing an order.
We use that information only as reasonably necessary to prepare the order, contact the recipient, coordinate delivery, resolve problems and provide customer support.
The customer should not include sensitive or unnecessary personal information in delivery instructions or card messages.
5. How we share personal data
We may share only the information reasonably necessary with:
- Authorised Lanna Bloom team members
- Florists preparing the order
- Delivery drivers and delivery partners
- Payment providers, including Stripe
- Website-hosting and technical service providers
- Email and customer-communication providers
- Order-management providers
- Analytics and advertising providers, subject to applicable cookie and consent requirements
- Professional advisers or public authorities when required by law or necessary to protect legal rights
For example, a florist may need the product and card-message details, while a delivery driver may need the recipient’s name, telephone number, location and delivery instructions.
6. Cookies, analytics and advertising
We use essential cookies and similar technologies to operate the website, maintain the shopping cart, support checkout and protect the website.
With the customer’s choice where required, we may also use analytics or advertising technologies to:
- Understand how visitors use the website
- Identify technical problems
- Improve the ordering process
- Measure advertising performance
- Understand whether an advertisement resulted in an order
Optional analytics or advertising cookies should be controlled through the cookie notice or cookie-preference settings.
More information is available in our Cookie Policy.
7. Checkout reminders
When a customer expressly opts in to checkout reminders and begins an order without completing payment, we may send one reminder email approximately 30 minutes later.
The reminder may contain a link that restores the customer’s cart and delivery details. The link expires after three days.
A reminder will not be sent when payment has already been completed. Reminder emails include a method to unsubscribe from future checkout reminders.
8. International data processing
Some service providers, such as payment, hosting, email, analytics or technical providers, may process data using systems located outside Thailand.
Where applicable, we take reasonable steps to use providers and arrangements intended to protect personal data in accordance with applicable requirements.
9. How long we retain personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:
- Complete and support orders
- Handle refunds, complaints and disputes
- Maintain accounting and transaction records
- Meet legal, tax and regulatory obligations
- Prevent fraud and protect our services
- Establish, exercise or defend legal claims
Different categories of information may be retained for different periods.
When information is no longer reasonably required, we will delete it, anonymise it or securely restrict its use, subject to technical and legal requirements. Temporary order-page chat messages are kept only while the related order chat remains open and are permanently deleted about 2 hours after the order is marked delivered.
10. Data security
We use reasonable technical and organisational measures intended to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.
Access to order and delivery information should be limited to people and service providers who need it to perform their responsibilities.
No online system can be guaranteed to be completely secure. Customers should contact us if they believe their personal information or an order link has been compromised.
11. Your rights
Subject to the conditions and exceptions under applicable law, you may have the right to:
- Request access to your personal data
- Request a copy of your personal data
- Request correction of inaccurate or incomplete information
- Request deletion, destruction or anonymisation
- Request restriction of certain processing
- Object to certain processing
- Request transfer of eligible data
- Withdraw consent where processing is based on consent
- Submit a complaint to the relevant personal-data protection authority
Withdrawing consent does not affect processing that occurred lawfully before the withdrawal. Some information may still need to be retained or processed to fulfil an order or comply with legal obligations.
To make a request, email support@lannabloom.shop. We may need to verify your identity before completing the request.
12. Marketing communications
We may send promotional emails or messages only where the customer has opted in or where another lawful basis applies.
Customers may unsubscribe using the link in an email or by contacting us.
Unsubscribing from marketing does not prevent us from sending necessary messages concerning an active order, payment, delivery, refund or customer-support request.
13. Children’s data
Our services are not directed specifically at children. Customers should not submit unnecessary personal information about children through card messages, delivery notes or other website fields.
14. External links
Our website may contain links to third-party websites or services. Their handling of personal data is governed by their own privacy policies, not this Privacy Policy.
15. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change.
The latest version will be published on this page with an updated revision date. Material changes may also be communicated through the website or another appropriate method.
16. Contact us
For questions, concerns or requests regarding this Privacy Policy or your personal data, contact:
Lanna Bloom
Operated by: Ms. Worapan Nunthasettha
Business type: Sole proprietor, Thailand
Email: support@lannabloom.shop