The small print, in plain words

Privacy at Bouquet Bunny

What an order stores

The bouquet, the name for the tag, the drop spot, date and time slot, your card message and notes, and the payment screenshot (plus a UPI transaction ID or contact if you choose to add them). We never ask for your name, login, roll number or phone number. Your payment app shows us the name on your bank account; only we see it, only to verify payment. Payment screenshots are deleted when the order is marked delivered.

Your private tracking link

After ordering you get a link with a long random key. We store only a one-way hash of that key, so even we can't rebuild your link. Anyone who has the link can see your order status, so share it carefully. The short cute code is just a nickname and can't open your order.

Flower alerts (push notifications)

Optional. If you switch them on, your browser gives us an anonymous push address. We store it encrypted, link it only to your order, use it only for that order's updates, and delete it a few days after delivery. You can turn alerts off anytime from your private order page. Notifications never include the recipient's name, the drop spot or anything about you, and the recipient never sees anything about your alerts.

Visitor analytics

We count page views, bouquet views and checkout starts to understand how the site is used. If you say yes on the little banner, your browser keeps a random ID so we can estimate unique visitors; if you say no (or your browser sends Global Privacy Control) nothing is stored on your device and visits are counted anonymously. We record only coarse details: device type (phone, tablet, computer), browser family and whether you came from search, social, a direct link or elsewhere. Never your IP address, location, exact browser fingerprint, age or identity. Raw events are deleted after 30 days; only daily totals are kept. Analytics are never linked to orders.

Questions

Ask us about anything here. We'd rather explain than be mysterious about this part.