The small print
Privacy
What is kept
Your account details, your orders, the recipient’s name, phone and address, and the card message, so the order can be made and delivered.
How it is kept
Recipient details and card messages are stored encrypted. Passwords are never stored in readable form.
Payments
Paynow handles online payments. Cathy Florist does not see or keep your card or mobile money details.
You receive emails about your orders. The newsletter is sent only if you sign up, and every issue says how to stop it. So that a missing email can be traced, the shop keeps a short record of each email it sends: the address, which email, when, and whether the mail server accepted it. It is deleted after 90 days.
Site statistics
To learn which flowers people look at, save and buy, the shop counts page visits and actions such as adding to the basket, using PostHog. This is done from our server: no tracking script runs in your browser and no extra cookie is set. Your name, email, phone and address are never sent. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
Protection against abuse
Sign-in, sign-up, checkout and the shop’s forms use Google reCAPTCHA to tell people from automated abuse. Google’s script loads only when you start on one of those forms, and Google’s Privacy Policy and Terms apply to it.
Website support
Problems with the website itself go to Elite Performance Exclusive, who build and run it, at the support address shown at the foot of every page. What you send is used only to fix the problem.
Your birthday
If you add your birthday on your account page (day and month only, optional), it is kept encrypted with your account. You can remove it at any time; it goes when your account does.
Your delivery pin
The pin you put on the map is kept with the order, encrypted like the address, so the driver can find the door. The map pictures come from OpenStreetMap; your phone asks them for the area on screen, not for your pin. Your phone's location is used only if you press "Use my location", and only to place the pin. When you type an address, what you type is sent from our server (not your phone) to OpenStreetMap's Photon search to suggest places in Zimbabwe; nothing else about you goes with it.
The site helper
The chat button answers from this shop's own pages, products and settings, and from answers the shop has written. No outside AI service is used. If it cannot answer, the question is kept for 90 days so the shop can teach it: only the words, with email addresses and numbers removed; never your name, account, IP address or the page you were on. Questions it answers are not kept.
Your details
You can change your details in your account. To have them removed, email Cathy Florist.