Privacy Policy

Last updated: January 2025

1. Introduction

At Nama Iskra, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make purchases, or contact the flower house.

This policy is designed for online flower and coffee retail operations and should be reviewed for applicable Indonesian data protection requirements before launch. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Data

We may collect personally identifiable information that you voluntarily provide when making purchases or creating an account, including:

  • Name and contact information (email, phone number)
  • Billing and shipping addresses
  • Payment information (processed securely through our payment provider)
  • Account credentials
  • Order history and preferences
  • Gift message content

Automatically Collected Data

When you visit our website, we automatically collect certain information, including:

  • IP address and browser type
  • Device information and operating system
  • Pages viewed and time spent on site
  • Referring website and search terms
  • Click patterns and interaction data

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders
  • Send order confirmations and delivery updates
  • Provide customer support
  • Send marketing communications (with your consent)
  • Improve our website and services
  • Detect and prevent fraud
  • Comply with legal obligations
  • Personalize your shopping experience

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us:

  • Remember your preferences and shopping cart
  • Understand how you use our website
  • Deliver relevant advertisements
  • Improve site performance

Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality
  • Performance Cookies: Help us understand how visitors interact with our site
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

5. Third-Party Services

We may share your information with third-party service providers who assist us in operating our business:

  • Payment Processors: Stripe for secure payment processing
  • Delivery Services: Shipping and logistics partners
  • Analytics: Google Analytics for website analytics
  • Email Services: For transactional and marketing emails
  • Cloud Hosting: For secure data storage

These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

GDPR Rights (EU Residents)

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request limited processing of your data
  • Right to Portability: Receive your data in a portable format
  • Right to Object: Object to processing of your data

CCPA Rights (California Residents)

  • Right to Know: What personal information we collect and how it's used
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the sale of personal information
  • Right to Non-Discrimination: Equal service regardless of privacy choices

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • SSL/TLS encryption for data transmission
  • Secure payment processing through PCI-compliant providers
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Employee training on data protection

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Typical retention periods include:

  • Account information: Until account deletion or 3 years of inactivity
  • Order records: 7 years for tax and legal compliance
  • Marketing preferences: Until you opt out
  • Analytics data: 26 months

9. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

For questions about your personal information, please Contact the Belgrade team

By using our website, you acknowledge that you have read and understood this Privacy Policy. For information about our terms and conditions, please visit our Terms of Service.

Optional sample-card attribution · 5 October 2026

On the Nama welcome page, you may choose “Remember my sample”. We then store a random visit reference in the nama_sample_visit cookie for 30 days in this browser, linked to the card inside your sample parcel. This lets us connect a confirmed paid coffee or pantry order to that sample channel. Opening the page alone does not enable this attribution or subscribe you to marketing emails.

You can shop without remembering the visit. “Forget this visit” removes the browser reference and stops future attribution from it. A link already recorded against a paid order may remain with that order’s business records. Marketplace recipient details are used to fulfil the platform order; buyer support and refunds use the Ananas channels.

Contact the Belgrade team about your records →