What we keep, and what we cannot see.

To deliver flowers we need your name and number, the recipient's name, number and address, the date, and what you would like sent. If you make an account we keep your email as well.

If you write a card, we keep what you wrote until the flowers are delivered, because somebody has to print it.

Making and delivering your order, and contacting you about it. Nothing else. We do not sell your details, we do not share them with advertisers, and we do not send marketing you did not ask for.

The recipient's details are used to deliver the flowers and are not added to any list.

We never see, handle or store your card number, expiry date or CVV. When you pay, you are taken to the secure payment page of Bank of Maldives, and your card details are entered there, on the bank's own system.

Every page on this site, and the bank's payment page, is served over an encrypted HTTPS connection using TLS. Card data travels only between your browser and the bank, in encrypted form, and never passes through our website.

Bank of Maldives operates the payment gateway to PCI DSS standards. All we receive back is a reference number and whether the payment succeeded, and we confirm that by asking the bank directly rather than trusting the message we are sent.

A recording is locked on your own phone before it is uploaded. The key that opens it is written into the QR image in your browser and never reaches us, so the shop cannot play your message and could not hand it over if it were asked to.

It opens once, on the first phone that opens it. Recordings are deleted on the date shown when you made one.

An arrangement you make, and the message with it, are packed into the link itself rather than saved anywhere. Browsers never send that part of a link to a server, so we have no copy of it. If you lose the link, we cannot recover it, and that is the same fact stated from the other side.

Bank of Maldives, for card payments. Our email provider, to send you a code or an order confirmation. Our hosting provider, to run the site. Each sees only what it needs.

We count visits ourselves rather than handing you to somebody else's analytics. No advertising identifiers, nothing shared with anybody, and no addresses kept.

One cookie is set, and it holds a random number and nothing else. It lets us tell whether somebody has read the site before, which is the difference between twenty people looking once and five people looking four times. It is not built from your address or your browser, it is attached to no name or account, it is never sent anywhere else, and it can be cleared at any time in your browser settings. We also record which pages were opened, how long each was open, the country the request came from, whether it was read on a phone or a computer, and the site you followed a link from. Nothing recorded can say who somebody is.

Order records are kept as long as the law requires us to keep books. Card messages are deleted once delivered. Voice recordings are deleted on their expiry date. An account can be deleted whenever you ask.

Ask us what we hold about you and we will tell you. Ask us to correct it and we will. Ask us to delete it and we will, except where we are required to keep a record of a sale.

Write to blooms@norrisflowers.com.

Norris Flowers is a registered business name of Aromyst, a sole proprietorship registered in the Republic of Maldives.

Registration No. SP00432024 · UEI 2024SP31149H · Business name BN52482026 · Business activity BP74762026 · TIN 1123595

Registered and postal address: Serenity Falls, S. Hithadhoo 19020, Republic of Maldives

Customer service: blooms@norrisflowers.com · +960 999 1856 · Every day, 9am to 6pm