Privacy policy

Last updated: 5 October 2026.

This is a courtesy translation of the Spanish original. If there is any discrepancy, the Spanish version prevails.

We explain clearly what data we process when you buy from us or write to us, what we use it for and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Agrícola Zayas, S.L. (trading as Floristería Florymar)
Tax ID (NIF): B92067487
Registered office: Camino Viejo de Málaga (Edif. Almudena, bajo), 29700 Vélez-Málaga (Málaga), Spain
Shop: C/ Cruz Verde, 29700 Vélez-Málaga (Málaga), Spain
Phone: +34 952 504 634 · Email: info@floristeriaflorymar.com

2. What data we process

  • About the buyer: name and surname, email address, phone number, address (with town and postcode) and the order details. Your card details are handled directly by the payment gateway; we never see or store them.
  • About the person receiving the flowers: name, address or place of delivery, phone number and the card message. You give us these when you place the order.
  • In funeral orders: the funeral home, the room and the name that will appear on the ribbon. We handle them with the utmost discretion and only to make the delivery.
  • Photographs: we take a photo of the bouquet before it leaves the shop to send it to you. We only photograph the person receiving the flowers if they give us their permission at the time of delivery.
  • If you use «My account»: your email address (you sign in with it: we send you a one-time code, with no password), your orders and the dates you choose to note down (who it is for, what is being celebrated and on what day). For a date belonging to someone else, all we keep about them is the name you type.
  • If you write to us: the data you include in your message.
  • Browsing data: the data collected by cookies, as set out in our cookie policy (in Spanish).

3. What we use it for and on what legal basis

  • Managing your order: preparing it, charging for it, delivering it, calling the recipient to arrange the delivery and keeping you updated by email (for example, with the photo of the bouquet or the delivery confirmation). Legal basis: performance of the purchase contract.
  • Delivering the flowers to the person you choose: we use their data only for the delivery. Legal basis: our legitimate interest, and yours, in the gift arriving. By giving us their details, you confirm that you are able to provide them for this purpose.
  • Meeting legal obligations relating to invoicing, accounting and tax. Legal basis: legal obligation.
  • Answering your enquiries. Legal basis: your request and, where applicable, steps prior to entering into a contract.
  • Photographing the person receiving the flowers, only if they give us permission. Legal basis: their consent, which they can withdraw at any time.
  • Giving you access to «My account»: sending you the code to sign in and showing you your orders (including those you placed without an account using the same email address), the people you have sent flowers to and your details. Legal basis: your request and your purchasing relationship with us.
  • Suggesting dates based on your orders: when you sign in to your account, we automatically review the card message and the notes of your previous orders to suggest dates that come round every year, such as a birthday or Mother’s Day. We only show them to you, never for funeral orders, and no date is saved unless you confirm it. Legal basis: our legitimate interest in offering you this service within your own account. You can dismiss any suggestion, or object by writing to us.
  • Emailing you before the dates you note down, five days before each one, so you can choose the flowers in good time. Legal basis: your consent, which you give by ticking the box the first time you add a date. You can withdraw it whenever you like with the «I don’t want any more reminders» link in each email or from «My account», and delete any date at any time.
  • Sending you marketing communications, only if you have given us your express consent. You can unsubscribe at any time using the link in every email.
  • Measuring how the website is used in order to improve it, only if you accept analytics cookies.

4. How long we keep it

Order data is kept for as long as the business relationship lasts and, after that, for the periods required by law (up to six years for accounting records and four for tax records). Delivery photographs are kept for as long as needed to deal with any issue with the order and are then deleted. Enquiry data is kept for as long as needed to answer it.

Your account is kept until you ask us to delete it. The dates you note down are kept until you delete them or close your account; if you withdraw your consent, we stop sending you reminders from that moment.

5. Who we share it with

We do not sell or pass on your data to third parties, except where required by law. To provide the service we work with providers who process data on our behalf under a data processing agreement: website hosting, payment gateways (Stripe and PayPal), email sending, technical maintenance of the website and, if you accept analytics cookies, Google.

Some of these providers (Stripe, PayPal and Google) may process data outside the European Economic Area, in the United States. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

6. Your rights

You can ask us to access, rectify or erase your data, object to its processing, restrict it, request its portability and withdraw your consent whenever you wish. Write to us at info@floristeriaflorymar.com or by post to our registered office, stating which right you want to exercise.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This website is not aimed at children under 14. If you are under that age, please do not give us any personal data without the consent of your parents or guardians.