Privacy policy

Controller

INVESTME - FZCO, IFZA / DSO, Dubai Digital Park, Dubaï, Émirats arabes unis, is the controller of your personal data. Contact: info@getorchids.com.

EU representative (Article 27 GDPR): being appointed.

The site itself collects almost nothing

This is a static site. No user accounts, no sign-up form, no advertising trackers and no analytics.

Your basket lives in your browser (local storage). It never reaches us until you go to checkout, and clearing the site data clears it.

What leaves for third parties

One thing only, and it takes an action from you:

• Shopify — the moment you click checkout, you are on Shopify Inc., under its own privacy policy, which also handles the payment.

Until you click, this site calls nobody but itself. The typefaces are served from our own servers, and there is no embedded map, video or share button reaching out to a third party on your behalf.

Order data

When you order, Shopify collects on our behalf:

• your name and delivery address — to ship the plant and to draw up the export documents, which name the recipient;
• your email — for confirmation and tracking;
• your phone number — required by international carriers;
• order details and amount.

We never see your card details.

Legal basis: performance of the sales contract, and compliance with legal obligations (CITES, customs, accounting).

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. Write to info@getorchids.com; we answer within one month.

Some data cannot be erased on request while a legal obligation requires keeping it — the recipient's name on an issued CITES permit, for instance.

You may lodge a complaint with the data protection authority of your country of residence.