Privacy policy

At Floraïku Paris (Memo America INC), we respect the right to privacy of our visitors and recognize the importance of protecting the information collected about them. This privacy policy concerns how we collect, store, and use the personal information you provide to us.

Floraïku Paris is committed to processing your personal data in accordance with applicable United States federal and state privacy laws, which define the conditions under which personal data may be processed.

Any information collected through the website that allows you to be identified directly or indirectly is considered personal data and will be processed in accordance with this policy.

Any questions regarding our privacy policy should be addressed to contactusa@floraiku.com or visit the Contact Us page on this site. If you are under 16, you must inform a parent or guardian of our privacy policy to obtain their consent before registering, subscribing, or placing an order with us.

Data Controller and Data Protection Officer

The data controller of the data collected and processed on our website is Memo America INC, which operates Floraïku Paris US. You can reach our data protection contact using the details set out below.

Purposes of Processing, Legal Bases, and Retention Periods

We only collect and process data that is strictly necessary for the purposes we set. We only retain them for the necessary time.

Processing Purpose	Legal Basis	Data Processed	Retention Period
Managing requests received through the contact form	Legitimate interest to respond to your contact requests	Name, first name, email address, phone number, order number, content of your message	For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect. At the end of this period and if no activity is detected on your account, all your personal information will be deleted from Floraïku Paris servers.
Creating a user account and providing an identifier	Legitimate interest to manage customer and user accounts	Customer ID, name, first name, postal address, email, age... Managing login with Facebook & Google services if applicable	For the duration of the commercial relationship or until the account is deleted by the user or 3 years from the last account activity
Managing the loyalty program and referrals	Legitimate interest to provide customers with a loyalty and referral program, user consent	Customer ID, name, first name, email, age, number of referrals, number of loyalty points	For the duration of the commercial relationship or until the account is deleted by the user or 3 years from the last account activity
Managing product or service orders	Contract execution	Customer ID, name, first name, postal address, email, order history, amounts, products ordered	5 years from the end of the contractual relationship. Archiving for accounting purposes up to 10 years
Managing payment for products and services	Contract execution for providing purchased goods and services	Name, first name, banking information, billing information, credit card number, cardholder name, card expiration date, visual cryptogram (processed to validate payment but never retained)	Retention of banking data for 13 months (in accordance with applicable payment-card rules). The visual cryptogram of the credit card is never retained
Retaining credit card data for future purchases	Consent	Name, first name, banking information, billing information, credit card number, cardholder name, card expiration date	Until consent withdrawal or card validity duration
Managing newsletter and Member List subscription	User consent to disseminate information via the newsletter	Email address, first name	For the duration of the person's newsletter subscription
Operating online help for real-time assistance	Legitimate interest to provide users with a real-time help tool	Customer ID, name, first name, help request, date and time of request, written conversation, order tracking number	Data is retained for 3 years from the last contact, then deleted
Scheduling online appointments	Legitimate interest to provide an online appointment scheduling tool with store advisors	Name, first name, phone number, email address, date and place of appointment	For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect. At the end of this period and if no activity is detected on your account, all your personal information will be deleted from Floraïku Paris servers.
Managing marketing activities	Legitimate interest to develop marketing and communication activities about our products and services, user consent for mailing activities	Name, first name, customer ID, purchased products and services, mobile phone number (SMS), postal address, email address	For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect
Managing job applications through the dedicated site section	Consent to allow job applications through the site to develop company staff	CV and cover letters. Recruitment portal: https://memo-international.talentview.io/en	Information is retained for 2 years from the last contact with the candidate, then deleted
Allowing you to post comments on our site	Legitimate interest to allow access to product reviews quickly	Username, rating, message content collected via the judge.me platform	Information is present on the site as long as Floraïku Paris has not removed them or they are present on the judge.me platform

For cookie management processing, you can consult the cookie policy accessible here: www.floraiku.com/pages/cookies-policy.

Special Provisions for Marketing Opt-in and Opt-out

By registering, subscribing, or using our services with your specific consent, Floraïku Paris is able to use your personal data for marketing purposes in accordance with this policy. All personal information shared with Floraïku Paris will not be retained in an identifiable format longer than necessary.

You have the right to know at any time what information is held about you in our systems. You have the right to review and update your personal data. If, for any reason, you believe the personal information we hold is not accurate, please visit our website and after logging in using the "Login" menu on the home page, your personal information will be available for review and change in the "My Account" section. Information can be changed online in "My Details", "Shipping Details", and "My Email Preferences". You can change or delete recorded credit/debit card details each time you make a purchase. You can also delete recorded credit/debit card details by adding or changing a shipping/billing address. If you change your billing or shipping address while your order is still being processed, the order will be reprocessed through security validation checks. If you prefer, you can contact us by email at contactusa@floraiku.com, and we will assist you in modifying these personal data.

When registering at us.floraiku.com concerning marketing messages you receive, you can withdraw your consent at any time by selecting the unsubscribe option included in these messages. You can choose to prevent the use of your personal information for marketing or targeting purposes by Floraïku Paris. If you wish to unsubscribe from Floraïku Paris information or delete all your data from our database, you can contact us to make a deletion request (see further).

Personal Data of Minors

Floraïku Paris services and products are not intended for minors.

It is the responsibility of minors' parents or any person with parental authority to decide whether their child is authorized to use the services and products offered by Floraïku Paris.

Recipients of Your Data

Distribution within Floraïku Paris

The data collected through our site is intended for the Floraïku Paris marketing department and other internal departments for processing your orders and implementing the aforementioned processes.

Distribution to our partners

The information we store will neither be sold nor used for purposes other than guaranteeing you the best possible service. Your personal data may only be disclosed to third parties when necessary to achieve the purposes described above. These third parties are companies or organizations to which we transfer the responsibility of managing services on our behalf or which require it by local laws. We ensure that third parties handle your personal data with the utmost care and in compliance with the GDPR, whether they are based within or outside the European Union.

These third parties include:

• Credit reference agencies
• Couriers
• Payment providers
• IT support
• Marketing communication agencies and consultants
• Market research and analysis service providers
• Legal advisors and other professional consultants
• Regulatory bodies, governments, and enforcement agencies

Data Transfer

Some recipients of personal data may be located outside the European Union. These recipient countries may be recognized by the European Commission as providing an adequate level of personal data protection or may not be subject to any adequacy decision.

In any case, appropriate protection measures to safeguard your personal data are in place in accordance with the General Data Protection Regulation (GDPR).

For example, hosting the site by our provider Cloudflare involves data transfers outside the European Union, particularly to the United States and Canada, carried out in accordance with applicable data protection laws and appropriate safeguards.

Data Security and Confidentiality

Because your data is valuable to you, we do everything possible to guarantee its security and confidentiality. We have implemented an information security management system and constantly maintain our security at the state of the art. We always prioritize securing the personal data you entrust to us.

Your Questions and Your Rights

We are committed to answering your questions clearly and precisely, as well as providing the necessary elements when exercising your rights. We give you control over your data and how it is used. Generally, you can exercise the following rights depending on the processing grounds:

• Right of access: the right to obtain confirmation that your personal data is or is not being processed and to receive communication of it;
• Right of rectification: the right to obtain the correction of inaccurate personal data or to complete incomplete data;
• Right of erasure: the right to obtain the deletion of your personal data when possible;
• Right to object: the right to object at any time to the processing of your personal data when based on our legitimate interest;
• Right to withdraw consent: when the processing of your data is based on your consent. You can exercise this right at any time without justification;
• Right to restriction: the right to request the freezing of data processing for a given period;
• Right to portability: the right to receive the personal data you have provided in a structured, commonly readable format and to transfer it to a third party;
• Right to complaint: the right to lodge a complaint with the competent authority in your jurisdiction if you believe your rights are not respected.

Exercising Your Rights

To exercise your rights or to address any questions about data processing, you can contact us:

• By mail: Memo America INC, 60 Broad Street, Ste 3502, New York, NY 10004, USA, attn: personal data protection service.
• By email: contactusa@floraiku.com

If you believe after contacting us that your "Data Protection" rights are not respected, you can lodge a complaint with the data protection or consumer protection authority in your state (for example, California residents may contact the California Privacy Protection Agency or the California Attorney General).

Data Protection Policy Update

This personal data protection policy was published on 18/07/2024. In case of modification of this policy, you will be informed on this page.