Privacy Policy
Last Updated: August 18, 2026
Oceania Flowers & Gifts (“Oceania,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when visiting, shopping on, or otherwise interacting with oceaniamall.com (the “Website”).
This Privacy Policy explains what information we collect, why we collect it, how we use and disclose it, how long we retain it, and the choices and privacy rights that may be available to you.
By using our Website, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
The information we collect depends on how you interact with Oceania Flowers & Gifts.
Information You Provide
We may collect information such as:
Full name
Email address
Telephone number
Billing address
Delivery address
Account credentials
Order information
Recipient information
Gift messages
Delivery instructions
Product preferences
Reviews
Customer-support communications
Newsletter preferences
Marketing preferences
Information submitted through forms
Other information you voluntarily provide
Recipient Information
Because flowers and gifts are frequently purchased for another person, customers may provide information about recipients, including:
Recipient name
Telephone number
Delivery address
Delivery instructions
Requested delivery date
Gift message
Occasion
If you provide another person's information, you should only provide information reasonably necessary for us to fulfill your order and should have appropriate authority to provide it.
We use recipient information primarily to fulfill and support the requested delivery.
2. Account Information
When you create an Oceania Flowers & Gifts account, we may maintain information including:
Name
Email address
Password credentials in securely hashed form
Saved addresses
Order history
Wishlist
Account preferences
Communication preferences
Rewards or gift-card information where applicable
We do not store your password in readable plain text.
3. Payment Information
Payments may be processed through third-party payment providers.
Depending on the payment methods enabled on our Website, these providers may include services such as:
Stripe
PayPal
Square
Authorize.Net
Apple Pay through a supported processor
Google Pay through a supported processor
M-Pesa
Other payment providers made available at checkout
Payment providers may collect payment-card details, account information, transaction information, authentication data, and fraud-prevention information directly.
Oceania Flowers & Gifts does not intend to store complete payment-card numbers or card security codes on its own application servers.
We may receive limited payment-related information such as:
Payment status
Transaction identifier
Payment method
Amount
Currency
Refund status
Fraud/risk information
Limited masked payment information
Third-party payment providers process information according to their own privacy policies and legal obligations.
4. Information Collected Automatically
When you access the Website, certain technical information may be collected automatically.
This may include:
IP address
Browser type
Device type
Operating system
Referring website
Pages viewed
Products viewed
Date and time of access
Session information
Shopping-cart activity
Website interactions
Approximate geographic information
Error and performance information
Cookie and similar technology identifiers
We use this information for security, operation, analytics, troubleshooting, personalization, and Website improvement.
5. Cookies and Similar Technologies
We use cookies and similar technologies for purposes such as:
Authentication
Security
Shopping-cart functionality
Checkout
Remembering preferences
Analytics
Website performance
Marketing where permitted
Fraud prevention
Where required by applicable law, non-essential cookies are used only after obtaining appropriate consent.
Please review our Cookie Policy for additional information about our use of cookies and your available choices.
6. How We Use Personal Information
We may use personal information to:
Process purchases
Deliver flowers and gifts
Process payments
Create and manage accounts
Maintain shopping carts
Communicate about orders
Provide order-status updates
Process refunds and cancellations
Respond to inquiries
Provide customer support
Prevent fraud and abuse
Protect our customers and Website
Improve our products and services
Analyze Website performance
Maintain business records
Manage promotions
Administer gift cards or rewards where offered
Send requested communications
Send marketing communications where permitted
Personalize customer experiences
Comply with legal obligations
Establish, exercise, or defend legal claims
We will not use personal information for materially incompatible purposes without an appropriate legal basis or notice where required.
7. Order and Delivery Communications
We may contact you regarding an order through channels such as:
Email
Telephone
SMS/text message where applicable
Website notifications
Transactional communications may include:
Order confirmation
Payment confirmation
Delivery scheduling
Delivery problems
Order preparation updates
Out-for-delivery notifications
Delivery confirmation
Cancellation information
Refund information
Customer-support messages
These operational communications are separate from optional promotional marketing.
8. Communications With Gift Recipients
We may contact a gift recipient when reasonably necessary to complete a delivery.
For example, we may contact a recipient to:
Verify a delivery address
Coordinate access
Resolve a delivery problem
Confirm availability to receive an order
We should not use recipient information provided solely for gift delivery for unrelated marketing unless an appropriate independent legal basis exists.
9. Marketing Communications
Where permitted, we may send customers information concerning:
New products
Seasonal flowers
Promotions
Special offers
Events
Gift ideas
Business updates
You can unsubscribe from promotional emails using the unsubscribe mechanism included in applicable communications.
Opting out of marketing does not prevent us from sending necessary transactional communications concerning purchases or accounts.
10. How We Disclose Information
We may disclose personal information to service providers and other parties when reasonably necessary to operate our business.
These may include:
Payment Processors
To authorize, process, verify, refund, and secure payments.
Delivery Providers
To deliver orders and provide delivery updates.
Technology and Hosting Providers
To operate, secure, maintain, and host the Website and related infrastructure.
Email and Messaging Providers
To send order confirmations, account communications, delivery notifications, and authorized marketing communications.
Analytics Providers
To understand Website performance and usage where permitted.
Advertising Providers
To measure or deliver advertising where applicable and permitted.
Professional Advisers
Such as accountants, auditors, attorneys, insurers, and consultants where reasonably necessary.
Government and Legal Authorities
Where disclosure is required or permitted by applicable law.
We do not disclose more information than reasonably necessary for the relevant purpose.
11. Sale or Sharing of Personal Information
Oceania Flowers & Gifts does not sell personal information for money in the ordinary meaning of the word “sell.”
However, some privacy laws define “sale” or “sharing” more broadly and may include certain advertising or analytics activities involving third-party technologies.
Where applicable law provides a right to opt out of such activities, we will provide an appropriate mechanism for exercising that right.
12. Legal Bases Under GDPR
Where the GDPR, UK GDPR, or similar law applies, we may process personal data based on one or more of the following legal bases:
Contract
Processing necessary to:
Process your order
Accept payment
Deliver products
Maintain your account
Provide requested customer service
Legitimate Interests
Processing reasonably necessary for legitimate business interests such as:
Preventing fraud
Maintaining Website security
Improving our services
Managing our business
Understanding Website performance
We consider the impact on your privacy when relying on legitimate interests.
Consent
We may rely on consent for activities such as:
Certain marketing
Non-essential cookies
Certain advertising technologies
Where processing is based on consent, you may withdraw that consent as permitted by applicable law.
Legal Obligation
We may process information when necessary to comply with legal, tax, accounting, regulatory, or other obligations.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable business, legal, accounting, tax, fraud-prevention, dispute-resolution, and regulatory requirements.
Retention periods may differ depending on the type of information.
For example, order and transaction records may need to be retained longer than ordinary Website analytics.
When information is no longer required, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable requirements.
14. Information Security
We implement reasonable administrative, organizational, and technical safeguards designed to protect personal information.
These measures may include:
Secure HTTPS connections
Password hashing
Access controls
Authentication
Role-based permissions
Session protection
Input validation
Security monitoring
Secure payment-provider integrations
Restricted administrative access
Software and security updates
Logging of certain administrative or security activities
However, no internet transmission, computer system, or storage system can guarantee absolute security.
Customers should also protect their account credentials and notify us if they believe their account has been compromised.
15. Third-Party Websites
Our Website may contain links to external websites or services.
These may include:
Social networks
Payment services
Maps
Delivery services
Business partners
Other external resources
Oceania Flowers & Gifts does not control the independent privacy practices of third-party websites.
You should review the privacy policies of third parties before providing personal information to them.
16. Social Media
Oceania Flowers & Gifts may maintain profiles or integrations with social-media services such as Facebook, Instagram, Pinterest, TikTok, YouTube, X, WhatsApp, or other platforms.
When you interact with us through a third-party social platform, the platform may independently process information according to its own privacy policy.
17. International Data Transfers
Our Website, hosting providers, payment processors, technology providers, or other service providers may process information in countries different from the country in which you live.
Where applicable privacy law requires safeguards for international transfers of personal information, we will seek to use appropriate transfer mechanisms and protections.
18. Your Privacy Rights
Depending on where you live and the laws applicable to your information, you may have rights concerning your personal information.
These may include the right to:
Request access to personal information
Request correction of inaccurate information
Request deletion
Request restriction of processing
Object to certain processing
Withdraw consent
Request data portability
Opt out of certain marketing
Opt out of certain targeted advertising
Opt out of certain sale or sharing activities
Appeal certain privacy-request decisions
Lodge a complaint with an appropriate supervisory authority
These rights are not absolute and may be subject to exceptions under applicable law.
19. GDPR Rights
Where GDPR or UK GDPR applies, you may have rights including:
Right of access
Right to rectification
Right to erasure
Right to restriction
Right to object
Right to data portability
Right to withdraw consent
Rights relating to certain automated decision-making
You may also have the right to complain to the relevant data-protection authority.
20. United States State Privacy Rights
Residents of certain U.S. states may have additional rights under applicable state privacy laws.
Depending on the jurisdiction and whether applicable legal thresholds are met, these rights may include:
Knowing what personal information is collected
Accessing personal information
Correcting personal information
Deleting personal information
Obtaining a portable copy
Opting out of targeted advertising
Opting out of sale or sharing
Limiting certain uses of sensitive personal information
Appealing a denied request
We will respond to verified privacy requests in accordance with applicable law.
21. California Privacy
Where California privacy law applies, California residents may have rights concerning categories and specific pieces of personal information collected, disclosed, sold, or shared.
We do not discriminate against individuals for exercising applicable privacy rights.
Where legally required, additional California-specific disclosures or opt-out mechanisms will be made available.
22. Verification of Privacy Requests
To protect personal information, we may need to verify your identity before processing certain privacy requests.
Verification may involve confirming information associated with:
Your account
Your email address
Previous transactions
Other information reasonably necessary to verify your identity
We will seek to request only the information reasonably necessary for verification.
23. Authorized Agents
Where applicable law permits, you may designate an authorized agent to submit a privacy request on your behalf.
We may require evidence that the agent has authority to act for you and may separately verify your identity where permitted.
24. Children's Privacy
Oceania Flowers & Gifts provides general flower and gift ecommerce services and is not directed primarily toward children.
We do not knowingly seek to collect personal information from children in violation of applicable privacy law.
If you believe a child has provided personal information improperly, please contact us so that we can review the matter and take appropriate action.
25. Automated Decision-Making
We may use automated tools for purposes such as:
Fraud detection
Security monitoring
Payment risk assessment
Product recommendations
Third-party payment and fraud-prevention providers may also use automated systems according to their own practices.
Where applicable law provides specific rights relating to legally significant automated decision-making, we will honor those rights as required.
26. Fraud Prevention
We may process relevant information to identify and prevent:
Fraudulent payments
Account abuse
Unauthorized transactions
Security attacks
Suspicious account activity
Misuse of promotions
This may involve information from payment processors, security providers, or other service providers.
27. Data Breaches
If a security incident involving personal information occurs, we will investigate the incident and take appropriate measures.
Where applicable law requires notification to affected individuals, regulators, or other authorities, we will provide such notifications within applicable legal requirements.
28. Business Transfers
If Oceania Flowers & Gifts undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable legal requirements and appropriate protections.
29. Changes to This Privacy Policy
We may modify this Privacy Policy from time to time.
Changes may reflect:
New services
New Website functionality
New payment methods
Changes in service providers
Changes in business practices
Legal or regulatory developments
When changes are made, we will update the “Last Updated” date.
Where legally required, we will provide additional notice or request renewed consent.
30. Contact Us
For questions about this Privacy Policy, personal information, or privacy requests, please contact:
Oceania Flowers & Gifts
Website: oceaniamall.com
Privacy/Support Email: Use the current privacy or customer-support email published on our Website.
When submitting a privacy request, please provide sufficient information for us to identify and respond to your request without including unnecessary sensitive information.
