Privacy Policy

This Policy applies to:

• Visitors to our website
• Customers and account holders
• Gift recipients whose details are provided to us
• People who subscribe to our emails or other marketing
• People who contact our customer-support team
• Business partners, suppliers and local vendors who interact with our services
• Users of any Moon n Bloom feature that links to this Policy

2.1 Information You Provide to Us

We may collect identity and contact information, account information, order and transaction information, gift-recipient information, gift content (card messages, personalised notes, photographs), occasion and reminder information, communications, marketing preferences, and business information where you interact with us as a vendor or commercial partner.

Please do not include sensitive personal data in gift messages or other free-text fields unless it is genuinely necessary and you are authorised to provide it.

2.2 Payment Information

Payments may be processed by a third-party payment service provider. That provider collects payment details directly from you under its own privacy terms. We generally receive confirmation of payment and limited transaction information. Unless expressly stated at checkout, Moon n Bloom does not store your full payment-card number or security code.

2.3 Information Collected Automatically

When you use our website, we and authorised service providers may automatically collect IP address and approximate location, browser and device information, pages viewed, session times, shopping-basket activity, cookie identifiers and consent choices, and technical performance data through cookies, pixels, server logs and similar technologies.

2.4 Information from Other Sources

We may receive information from payment providers, delivery partners, local gift vendors, analytics services, advertising platforms, social-media platforms and fraud-prevention services. We may also receive your information when another person purchases a gift for you.

We may use personal data to create and manage accounts; process payments, orders, cancellations, returns and refunds; arrange gift preparation, personalisation, fulfilment and delivery; provide customer support; send service messages and marketing where permitted; personalise your experience; understand website use and improve our services; prevent fraud and security incidents; and meet legal, regulatory, tax and accounting requirements.

Where applicable law requires a legal basis, we rely on your consent, the steps needed to enter into or perform a contract with you, compliance with a legal obligation, or protection of legitimate interests where permitted by law. Where we rely on consent, you may withdraw it at any time.

If you give us another person's details, you confirm that the information is accurate, you are authorised to provide it for the relevant gifting or reminder purpose, and you will not provide information that is excessive, misleading, unlawful or unnecessarily sensitive.

We use recipient information to prepare and deliver the gift, communicate about delivery where necessary, prevent fraud, address service issues and maintain appropriate transaction records. We do not add a gift recipient to our general marketing list solely because they received a gift.

We may share personal data only where reasonably necessary with:

• Local vendors and fulfilment partners — florists, bakeries, gift makers, experience providers and other businesses fulfilling your order
• Couriers and delivery partners — so that orders can be delivered and delivery issues resolved
• Payment providers — banks and financial-service partners to process payments, refunds and fraud checks
• Website, hosting and technology providers — including e-commerce, cloud-storage, database, email, messaging and IT providers
• Analytics and advertising providers — subject to applicable consent and cookie requirements
• Professional advisers — accountants, auditors, lawyers and insurers
• Regulators and law enforcement — where disclosure is legally required or necessary to protect rights or safety
• A buyer or successor organisation — if Moon n Bloom is involved in a merger, sale or transfer of its business or assets

Moon n Bloom does not sell personal data in exchange for money.

Our vendors, technology providers or business partners may process personal data outside the United Arab Emirates or outside the country in which you live. Where personal data is transferred internationally, we take appropriate steps required by applicable law, including using approved contractual safeguards or relying on another lawful transfer mechanism.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain transaction records, resolve disputes, prevent fraud, enforce agreements and comply with legal obligations. When personal data is no longer needed, we delete it, anonymise it or securely isolate it until deletion is possible.

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access, disclosure or destruction. These measures may include access controls, encryption, secure hosting, staff confidentiality requirements, monitoring, backups and vendor-security reviews.

No website or storage system is completely secure. You are responsible for keeping your password confidential and should contact us promptly if you believe your account has been compromised.

We use cookies and similar technologies to keep the website functioning, remember basket contents and preferences, support login and fraud prevention, measure traffic and performance, and provide personalised content and advertising where permitted.

Some cookies are necessary for the website to operate. Optional analytics or advertising cookies will be used only after you make a consent choice. You can change your choices through our cookie settings or your browser settings. Blocking certain cookies may affect website functionality.

Where permitted, we may send gifting ideas, product news, offers, occasion reminders and other marketing by email, SMS, WhatsApp or similar channels. You can opt out at any time by using the unsubscribe link in an email, adjusting your account preferences or contacting us. Opting out of marketing does not stop essential service communications about your account, orders or security.

Depending on your location and applicable law, you may have the right to receive information about how your personal data is processed, request access to or a copy of your data, request transfer of your data in a machine-readable format, correct inaccurate information, request deletion of personal data in certain circumstances, request restriction or cessation of processing, object to certain automated processing decisions, withdraw consent, and submit a complaint to the relevant data-protection authority.

To exercise a right, contact us using the details in Section 15. We may need to verify your identity. We will respond within the period required by applicable law.

Moon n Bloom's website and purchasing services are intended for adults and are not directed to children. You must be at least 18 years old, or the age of legal majority where you live, to create an account or place an order unless a parent or legal guardian is involved. If you believe a child has provided personal data to us without appropriate permission, please contact us.

Our website may link to third-party websites, payment services, social-media platforms or partner services. Those organisations control their own privacy practices. We encourage you to review their privacy notices before providing personal data. Moon n Bloom is not responsible for third-party privacy practices or content.

We may update this Privacy Policy to reflect changes to our services, technology, partners or legal obligations. The latest version will be posted on our website with the revised date. Where a change is material, we may provide an additional notice by email or through your account.

For questions, requests or complaints about this Privacy Policy or our handling of personal data, contact:

If you are not satisfied with our response, you may have the right to complain to the data-protection regulator or other competent authority in your country.