Privacy policy

Privacy Policy

5 Stones Florist ("we", "our", or "us") operates this online flower shop to provide you with a curated shopping experience for floral arrangements and related services in Singapore (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal data in accordance with Singapore's Personal Data Protection Act (PDPA) 2012.

By using our website, placing an order, or contacting us, you acknowledge that you have read and understood how your personal data will be handled as described here.

1. What Personal Data We Collect

We may collect the following information when you interact with our Services:

  • Contact & Delivery Details: Your name, delivery address, contact number, and email address.

  • Order & Payment Information: Details of the products you view, purchase, or return; your payment method (e.g., credit/debit card details processed securely by our partners); and transaction history.

  • Account Information: If you create an account, your username, password, and preferences.

  • Communications: Any messages, feedback, or inquiries you send to us.

  • Technical & Usage Data: Information about your device, browser, IP address, and how you navigate our website, collected through cookies and similar technologies.

2. How We Use Your Personal Data

We use your data to:

  • Fulfil Your Orders: Process payments, arrange delivery, manage returns/exchanges, and provide customer support.

  • Improve Our Services: Personalise your shopping experience, recommend products, and enhance our website's functionality.

  • Communicate With You: Send order confirmations, delivery updates, and respond to your inquiries. With your explicit consent, we may also send you marketing promotions.

  • Ensure Security: Monitor for fraudulent activity and protect the security of our website and services.

  • Comply with the Law: Meet our legal and regulatory obligations under Singapore law.

3. How We Share Your Personal Data

We only share your data in the following circumstances:

  • With Service Providers: Trusted partners who perform essential services for us, such as payment processing (e.g., Stripe), delivery couriers, and IT support. They are contractually bound to protect your data.

  • For Legal Reasons: If required by law, a court order, or a government authority in Singapore.

  • With Your Consent: In any other situation, we will obtain your clear consent before sharing.

4. Use of Cookies

Our website uses cookies to remember your preferences, analyse site traffic, and improve your browsing experience. You can manage cookie settings through your browser.

5. International Data Transfers

As our e-commerce platform is powered by Shopify, your data may be stored or processed on servers located outside of Singapore. We ensure that any such transfer is protected by appropriate safeguards as required by the PDPA.

6. Data Security & Retention

We implement reasonable security measures to protect your data from unauthorised access, loss, or misuse. However, no online transmission is 100% secure.
We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or as required by Singapore law.

7. Your Rights Under the PDPA

You have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Correct: Request correction of any inaccurate or incomplete data.

  • Withdraw Consent: Withdraw any consent you have given for marketing communications at any time, by using the "unsubscribe" link in our emails or contacting us.

  • Complaints: Lodge a complaint with us regarding our data handling practices.

To exercise these rights, please contact our Data Protection Officer (DPO) using the details in Section 9.

8. Third-Party Links

Our website may contain links to third-party sites (e.g., social media). This policy does not apply to those sites. We encourage you to review their privacy policies.

9. Contact Us & Data Protection Officer

For any questions about this policy, to exercise your rights, or to contact our Data Protection Officer, please reach out to:
Email: hello@5stonesflorist.com.sg

10. Updates to This Policy

We may update this policy periodically. The revised version will be posted on our website with an updated "Last Updated" date. We encourage you to review it from time to time.

Last Updated: 18 October 2025