Privacy Policy

NouraBloom Flowers L.L.C. is a florist registered in Dubai, United Arab Emirates, trading from Warehouse 14, Alserkal Avenue, Al Quoz 1, Dubai. We are the controller of the personal data described below, which means we decide what is collected and what happens to it.

Data protection questions go to hello@nourabloom.ae or to the studio on +971 4 555 0180. A named person handles them; there is no ticketing system to get lost in.

We collect the minimum a florist needs to put the right flowers at the right door on the right day.

• Your contact details. Name, mobile number, email address, and the billing address if you ask for an invoice.
• Recipient details. The name, mobile number and delivery address of whoever receives the flowers, plus any access notes you give the driver. If you are sending to someone else, you are giving us their details and you confirm you are entitled to do so.
• Order content. What you ordered, the delivery date and window, and the message you asked us to handwrite on the card.
• Correspondence. Enquiries you send through the contact form, by email or over WhatsApp, and the notes we make on a call.
• Technical data. Standard server logs from our hosting provider, containing IP address, browser and the pages requested. We do not run advertising trackers or third-party analytics pixels on this site.

We do not ask for a date of birth, a national identity number or an Emirates ID, and you should not send them to us.

Each field has a job. In practice we use your data to:

• Take, confirm and fulfil your order, including calling you to arrange payment because no online gateway is live yet.
• Let a driver find the address, call ahead, and confirm handover with a photograph where the recipient is out.
• Handwrite and attach your gift message.
• Answer your enquiry, and follow up three days after delivery on a share of orders to check how the flowers are holding.
• Meet UAE tax and accounting obligations, which require us to keep invoice records.
• Investigate a complaint, a failed delivery or a disputed payment.

We do not sell your data, we do not rent it, and we do not add you to a marketing list because you placed an order. The newsletter is opt-in only and every send carries an unsubscribe link that works immediately.

There is currently no payment gateway on nourabloom.ae. No card number, expiry date or security code is ever typed into this website, and none is stored on our systems, because there is nothing here to type it into.

Once your order is placed we call you to arrange payment by bank card link, transfer or cash on delivery. Card links are generated and hosted by our bank, expire after use, and we see only the confirmation that a payment succeeded — never the card details behind it.

When a gateway does go live, this section will be rewritten before it is switched on, and the date at the top of this page will change.

This site uses browser storage rather than tracking cookies. What is stored on your device is:

• Your basket. Kept in local storage so it survives a refresh and is still there when you come back tomorrow.
• Your wishlist. Saved the same way, on your device only. If you clear your browser data it is gone, and we cannot restore it.
• Interface preferences. Small values such as which delivery emirate you last chose.

None of this is transmitted to us until you actually place an order, and none of it is used to build a profile or to follow you to another website.

Deliveries are made by our own drivers, on our own payroll, which keeps the list short. Your data reaches a third party only in these cases:

• Our hosting and infrastructure providers, which process server logs and store the order database.
• The messaging provider that sends order confirmations and delivery notifications by SMS or WhatsApp.
• Our bank, when a card payment link is issued to you.
• Our accountants and, where the law requires it, the UAE tax authority.
• A courier partner, only for the rare oversized event order we cannot carry ourselves, and only the delivery address.

Each of them receives the minimum needed for that task. None of them is permitted to use your details for their own marketing.

Order records, including recipient addresses, are kept for five years from the date of delivery, which is the period UAE tax and commercial record-keeping rules require of us.

Gift message text is deleted ninety days after delivery. We have no reason to keep what you wrote on the card, and every reason not to.

Contact form enquiries that do not become orders are deleted after twelve months. Newsletter subscriptions last until you unsubscribe, and the record of the unsubscribe itself is kept so we do not contact you again by mistake.

Consistent with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong, which for a delivery address we will do immediately.
• Delete data we no longer need, subject to the five-year record-keeping obligation above.
• Stop sending you marketing, which takes effect on the next send at the latest.
• Explain how a particular decision or record came about.

Write to hello@nourabloom.ae with the mobile number you used to order. We answer within thirty days and usually within three working days. There is no charge.

If you received a delivery and want to know how we got your address, contact us and we will tell you who placed the order and remove your details from our records, unless the order is still within the tax retention window, in which case the invoice record stays and the contact details are suppressed.

We will also add you to a do-not-deliver list on request, so no future order to your address is accepted.

The site is served over HTTPS, access to the order database is limited to studio staff who need it, and driver devices show only the deliveries assigned to them for that day. No system is perfect; if we ever suffer a breach affecting your data we will tell you and the relevant authority without waiting to be asked.

We update this notice when what we do changes, not on a schedule. The version in force is the one on this page, dated 1 September 2026.

If you are unhappy with how we have handled your data, tell us first through the contact page so we can fix it. You retain the right to complain to the UAE Data Office.