Privacy policy

Last updated: 2026-06-26

Bonita Blomster is operated by Bonita Services AS (org. no. 931498169), Odinsgate 17, 0266 Oslo, Norway (“we”, “us”). This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase using our store and website (the “Services”), or otherwise communicate with us. Our store is powered by Shopify, which helps us provide the Services. For the purposes of applicable data protection law (including the GDPR), Bonita Services AS is the data controller. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understand it.

Personal Information We Collect

Depending on how you interact with the Services, we may collect or process:

  • Contact details — your name, billing and shipping address, phone number and email.
  • Recipient details — when you send an order to someone else, the recipient’s name, delivery address, phone number, and any card or gift message you provide.
  • Order & transaction details — the items you view, add to your cart and purchase, return or cancel, and your order history.
  • Payment information — processed securely by our payment providers; we do not store full card numbers.
  • Account information — if you create an account: username, password and preferences.
  • Communications — the information you include when you contact us.
  • Device & usage information — your device, browser, IP address, and how you interact with the Services, via cookies and similar technologies.

How We Use Your Personal Information

  • To provide the Services — to perform our contract with you: process payments, prepare and fulfil your orders, arrange delivery or pickup, handle returns, manage your account and provide customer support.
  • Marketing — to send you marketing communications, only where you have consented; you can opt out at any time.
  • Security & fraud prevention — to secure the Services and detect or prevent fraud and misuse.
  • Legal reasons — to comply with applicable law and respond to lawful requests.

Our Order Management and Fulfilment

To prepare and deliver your order, we process order details — including your and the recipient’s contact and delivery information, and any card message — in our own order-management and fulfilment systems, in addition to Shopify. We use this information to arrange and route deliveries, print card messages, coordinate store pickup and provide customer service. We also use privacy-friendly website analytics to understand how our site is used.

Ordering for Someone Else

When you place an order for delivery to another person, you provide us with that person’s personal information. We use it solely to fulfil and deliver the order. If you are a recipient and would like to know how we process your information or to exercise your rights, please contact us using the details below.

How We Disclose Personal Information

We share personal information only as needed to run our shop, including with:

  • Shopify — our e-commerce platform and host, which processes personal information to provide and improve the Services (see “Relationship with Shopify” below).
  • Payment providers — such as Stripe and PayPal, to process payments.
  • Delivery partners and delivery/scheduling tools — to calculate delivery, schedule dates and deliver your order.
  • Other service providers — who help us operate (e.g. IT, analytics, customer support).
  • Authorities or others — where required by law, or in connection with a business transaction such as a merger or acquisition.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them, and may share it with third parties that may be located outside your country. In these circumstances, Shopify is responsible for that processing. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Links

Our Services may link to sites operated by third parties. We are not responsible for the privacy practices of those sites; please review their policies.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security and Retention

No security measures are perfect, and we cannot guarantee absolute security. We keep your personal information only as long as necessary for the purposes described here and as required by law — for example, order and accounting records are retained in line with Norwegian bookkeeping rules.

Your Rights

Under the GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal information, and to data portability. Where we rely on consent, you may withdraw it at any time (without affecting prior processing). To exercise your rights, contact us using the details below. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

International Transfers

We may transfer, store and process your personal information outside the country you live in. Where we transfer personal information out of the EEA, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses, unless the destination provides an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the “Last updated” date.

Contact

For questions about this Privacy Policy or to exercise your rights, contact the data controller: Bonita Services AS, Odinsgate 17, 0266 Oslo, Norway — orders@bonitablomster.no, +47 934 76 998.