PetalDesk
What it costs
Log in Start free trial

Privacy

What is held, who can see it, how long it stays, and how to have it removed. Written to be read rather than to be survived.

Not published yet · Who is behind this service has not been entered yet, so this page cannot name them. Until it does, treat it as a draft rather than as a notice you can rely on.

Who holds what

There are two different answers, and keeping them apart is the whole of this page.

The florist's own customers. Names, telephone numbers, addresses, card messages — these belong to the florist's business. They decide what to collect and why; we only keep it for them on their instruction. In European terms they are the controller and we are the processor; under Turkish law they are the veri sorumlusu. If you are a customer of a flower shop and want your details changed or removed, ask the shop, not us.

The florist's own account. The name, e-mail address and password you sign up with, the shop's settings, and what has been paid for the subscription. That is ours to answer for, and the rest of this page is about it.

What is kept

  • Your name, e-mail address and a scrambled form of your password — never the password itself
  • Your shop: its name, currency, language, opening hours and settings
  • Everything you put into it: customers, orders, suppliers, products, photographs, payments and the cash book
  • What you have paid us, and which method you used
  • Server logs: the address your browser connects from and the page it asked for

What is not kept

  • Card numbers. Not yours, not your customers'. The card form belongs to the payment provider and this server never sees what is typed into it.
  • Anything from a tracker, an advertising network or an analytics service. There are none on this site.
  • Your e-mail password in readable form, if you set up notifications — it is stored to be used, and shown back to you as blanks.

Cookies

One. It is how the site knows you are the same person between one page and the next, and it also carries the shop basket and the language you picked. It is signed so it cannot be edited, and it holds no name, no e-mail address and no identifier that follows you anywhere else.

There is no second cookie, because there is nothing a second one would be for. No pixel, no advertising tag, no third-party font, no map, no embedded video — every page here is served whole by this server. That is why you have not been asked to accept anything: there is nothing here to accept.

Who else sees it

By default, nobody. Your shop's records are visible to the people you have given a sign-in, and to nobody in another shop. Three exceptions, each of which you switch on yourself:

  • Your payment provider — iyzico or PayPal — when you take card payments. The order number and amount go to them so they can take the money. They are then responsible for what they hold; their own notice covers it.
  • Your own mailbox provider, if you switch on notifications. The messages go out through the mail server you entered, so the e-mail passes through your provider and not ours.
  • The company that rents us the server, which holds the disk the data sits on and never looks at it.

Nothing is sold, rented or handed to anyone for advertising. If a court or an authority ever demanded records, we would have to comply with a lawful order — and we would tell you unless the order itself forbade it.

How long

While your shop exists. Stopping payment does not delete anything — the shop turns into a read-only record you can still sign in to and export from.

When a shop is deleted, everything in it goes: the orders, the customers, the suppliers, the cash book, and the photographs on the disk. It is not moved to a bin we quietly keep. The backup taken before the last update still holds a copy until it is rotated out.

Server logs are short-lived and are not kept as a record of anyone.

What you can ask for

  • A copy of what is held about you
  • A correction, if something is wrong
  • Deletion of your shop and everything in it
  • Your records in a file you can take elsewhere — orders, customers and takings all export to CSV from inside the app, at any time, without asking us
  • An objection, or a complaint to the data protection authority where you live

An address to write to has not been published yet.

If this changes

A change that matters will be said on this page before it takes effect, and anyone with a shop will be told. A change that does not matter — a clearer sentence, a corrected typo — will simply happen.

This page exists in every language the site speaks. The translations are provided so that it can be read; where they differ, the Turkish text is the one that applies.

Still want to try it?

Sign up, add a few products, and put a real order through. If it does not save you time, walk away — there is nothing to cancel.

Start your 14-day free trial