Who We Are
Difleur is a women-led export broker of Ecuadorian flowers. We are responsible for the personal data described in this policy.
Our offices are at N72 Juan Procel, El Condado, Quito, Ecuador, and at 7901 4th St N, STE 300, St. Petersburg, FL 33702, USA.
For any privacy question or request, email us at info@difleur.com.
Information We Collect
We collect information you give us directly, and a limited amount of technical information that is created when you use the site.
- Account information
- When you create an account, we receive your email address and display name. You can sign in with Google or with an email and password through Firebase Authentication, a Google service. Your password is handled by Google and Firebase; we never see or store it. When you place an order, we also save your phone number, company and country to your profile.
- Order information
- When you place an order, we collect your name, company, email, phone, country, shipping address, destination airport, requested delivery date, notes, and the products, colors and number of boxes you order.
- Request a Quote form
- When you request a quote, we collect your company name, contact name, email, phone, country of destination, products of interest, estimated quantity, preferred delivery date, whether you are a registered importer, the type of quote you want, destination airport, whether you have a freight forwarder (and, if not, whether you would like us to arrange logistics), your comments, and your agreement to be contacted about your request.
- Contact form
- When you write to us through the contact form, we collect your name, email and message.
- Technical information
- Our servers receive your IP address and basic request details (such as the page or service requested, time, and browser type) and keep them in service logs. We use the IP address to limit the number of requests from one address and to prevent abuse.
- Cookies and browser storage
- The site stores your cart and your sign-in session in your browser. Analytics cookies are set only when analytics is enabled. See Cookies and Browser Storage below for details.
We do not collect payment card details on this website. Orders are placed without online payment.
How We Use Your Information
- To process your orders and prepare quotes, including confirming varieties, colors, box quantities, delivery dates and shipping details.
- To reply to your questions and messages.
- To create and operate your account, including signing you in and showing your order history.
- To notify our team: new orders, quote requests and contact messages are sent by email to info@difleur.com so we can respond.
- To keep the site secure and prevent spam and abuse, including rate limiting and, when enabled, Google reCAPTCHA on our forms.
- To understand how the site is used and improve it, using Google Analytics 4 when enabled.
- To meet legal, tax and accounting obligations and to protect our rights.
- We do not sell your personal data.
- We do not send you marketing emails unless you separately opt in. We do not run a newsletter today.
Service Providers We Use
We share personal data only with service providers that help us run the site and our business, and only as needed for the purposes above. They process it on our behalf and under their own terms and privacy policies.
- Google Cloud and Firebase
- Hosting of our backend services, our database (Cloud Firestore), sign-in (Firebase Authentication) and file storage. Data is stored in the United States (us-central1 region).
- Netlify
- Hosting and delivery of this website (content delivery network).
- Resend
- Sending the transactional emails that notify our team of new orders, quote requests and contact messages.
- Google Analytics 4 (when enabled)
- Measuring visits and how pages are used, so we can improve the site.
- Google reCAPTCHA (when enabled)
- Telling people and automated spam apart on our forms. reCAPTCHA collects hardware and software information and sends it to Google, subject to Google's Privacy Policy and Terms of Service.
- Elfsight WhatsApp chat widget (when enabled)
- Shows a chat button that loads code from Elfsight. If you start a chat, the conversation takes place on WhatsApp, a Meta service, under WhatsApp's own terms and privacy policy.
Some product photos come from Wikimedia Commons and Unsplash. These are image sources only; we do not share personal data with them.
We may also disclose information if required by law, to respond to valid legal requests, or to protect the rights, safety and property of Difleur, our customers or others.
International Transfers
We operate from Ecuador and the United States, and our service providers store data in the United States. Your information may therefore be transferred to, stored in, and accessed from countries other than your own, including Ecuador and the United States, whose data protection laws may differ from those where you live. We rely on our providers' contractual and security commitments to protect it.
How Long We Keep Your Information
- Orders and quote requests: for as long as needed to fulfill them, support your business with us, and meet legal, tax and accounting requirements.
- Contact messages: until your inquiry is resolved, and for a reasonable period afterward in case you follow up.
- Accounts: until you ask us to delete your account. Some order records may need to be kept after that for legal or accounting reasons.
- Technical logs: for a limited period, then deleted automatically according to our providers' log retention settings.
When we no longer need personal data, we delete it or keep it in a form that no longer identifies you.
How We Protect Your Information
- All traffic between your browser and our site and services is encrypted in transit (HTTPS).
- Access to our systems and data is restricted to authorized people and services.
- Your browser cannot write to our database directly. Every order and form submission goes through our servers, which check it first.
No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards as the site evolves.
Your Choices and Rights
You can ask us to:
- Access the personal data we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your personal data or your account.
- Object to, or ask us to limit, certain uses of your data.
To make a request, email info@difleur.com from the address linked to your account or order. We may need to confirm your identity before acting on it, and we will reply within a reasonable time.
Depending on where you are, you may have additional rights, for example under Ecuador's Organic Law on Personal Data Protection (LOPDP), the EU or UK GDPR, or US state privacy laws such as California's CCPA as amended by the CPRA. These may include data portability or the right to complain to your local data protection authority. Whether a law applies depends on your location and the circumstances, and we will handle each request in line with the law that applies to it.
Children
This website is for businesses buying flowers wholesale. It is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe a minor has given us personal data, contact us and we will delete it.
Changes to This Policy
We may update this policy as our website and services change. When we do, we will post the new version on this page and update the "Last updated" date at the top. If a change is significant, we will make it clear on the site.
Contact Us
If you have questions about this policy or how we handle your information, contact us.
Offices
- N72 Juan Procel, El Condado, Quito, Ecuador
- 7901 4th St N, STE 300, St. Petersburg, FL 33702, USA