XL Bouquet · Bangkok
Privacy policy
Your information and your rights
Updated 13 October 2026
We use information to handle enquiries, prepare and deliver bouquets, provide support and protect orders. Provide current contact details and an address to arrange delivery.
Google Analytics
With your consent, the storefront uses Google Analytics 4 to measure visits, cart actions and messenger clicks. Advertising personalisation is disabled. Our events exclude contacts, addresses and order messages. Payment and order result pages do not load the tag. Change your choice using Cookie settings in the storefront footer. Google processes technical data under its privacy policy.
Confirmed purchase statistics
When purchase reporting is enabled and you consent to analytics, a confirmed non-test purchase may be sent to Google: browser and session identifiers, a pseudonymous transaction identifier, product codes, quantities and the value in THB. Consent is checked at checkout; server-side analytics identifiers are removed after sending, withdrawal or 24 hours. Rejecting cookies in the same browser withdraws a not-yet-sent event for the latest order in the current session. This cannot recall statistics already sent; contact us for deletion requests or withdrawal for other orders. Test orders are not reported as purchases.
Advertising measurement
The separate Analytics + ad measurement choice allows Google to associate advertising visits with confirmed purchases using technical identifiers. Analytics only does not grant this permission. Advertising personalisation and contact-based enhanced matching remain disabled. Only bounded campaign labels and click identifiers are used; private order-page parameters are excluded. Changing your choice in the same browser withdraws not-yet-sent advertising measurement for the latest order in the current session. Data already sent or a network request already in flight cannot be automatically recalled.
Who handles your data
The public brand is XL Bouquet, a Bangkok flower service. Data enquiries: WhatsApp +7 950 741-00-02 or Telegram @xlbouquet, email xlbouquetbangkok@gmail.com. Seller: Individual entrepreneur ALESIA RUBANOVA. Legal form: Individual Entrepreneur. Country of registration: Georgia. Identification number: 305790338. Registration date: 17 July 2025. Registered address: Georgia, Tbilisi, Saburtalo district, Bakhtrioni street, No. 22, apartment No. 75.
Information collected
Information you enter includes sender and recipient names and contacts, address, delivery date and window, products, comments, card message, payment method and enquiry history. Messenger clicks record the channel and source page; a click does not reveal your messenger conversation. The server may also keep technical request logs for security.
Purposes and grounds
Order information is used to take steps at your request and fulfil an agreed order. Enquiry history supports customer service; technical records help prevent abuse and errors. Financial records are retained where applicable law requires it. Optional marketing needs a separate lawful basis: ordering does not itself subscribe you to advertising. Checkout requires sender and recipient contacts, an address, a delivery date and a window. Email and comments are optional.
Recipients and external services
Authorised staff can access the order system and its Telegram workspace. Couriers receive information needed for delivery. If you provide an email address, order and received-payment confirmations are sent through Beget, which processes the email address and message contents. Hosting and messengers may process technical information outside your country. WhatsApp, Telegram, MAX and Instagram also apply their own policies when you use them. We do not request bank passwords, CVV or full card numbers in the order form.
Browser storage and retention
Your browser stores the cart, language and currency locally; unfinished forms and order access are session-based. Server drafts are designed to expire after 24 hours. Order and enquiry history supports fulfilment, customer service and dispute handling; there is currently no universal automatic deletion period for history. Deletion requests are assessed against open orders and legally required retention. Backup deletion follows the retention cycle and is not immediate.
Rights and protection
You may request access, correction, deletion or restricted processing, object, withdraw consent where processing relies on it, and exercise other applicable rights, including complaints to the competent authority. Contact us above; we may verify your connection to the order to protect personal information. Provide recipient information only with a lawful basis. Keep your private order access link confidential. Policy changes are published here.