Privacy Policy

Effective Date: March 20, 2026

Data Controller: PT Rejeki Elok Dinamika NIB: 1612250133664 Address: Kencana Tower Level Mezzanine, Jl. Meruya Ilir Raya No.88, Jakarta Barat, DKI Jakarta 11620

1. Introduction

Mix Flowers ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and protect your personal data when you use mix.florist or communicate with us.

2. Data We Collect

When you place an order:

Name, phone number, email address
Delivery address (yours or recipient's)
Payment information (processed securely by our payment partners — we do not store card details)
Order history and preferences

When you contact us:

WhatsApp messages and conversation history
Instagram direct messages
Email correspondence

Automatically collected:

Device type, browser, and IP address
Pages visited and time spent on site
Cookies for site functionality and analytics

3. How We Use Your Data

Order fulfillment: Processing orders, arranging delivery, sending order confirmations and updates
Customer service: Responding to inquiries via WhatsApp, Instagram, or email
Personalization: Product recommendations based on order history and preferences
AI-powered assistance: Our AI assistant Julia may use your conversation history to provide better recommendations (conversations are not shared with third parties)
Marketing: Promotional offers and new collection announcements (only with your consent — you can opt out anytime)
Legal compliance: Tax reporting and regulatory requirements under Indonesian law

4. Data Sharing

We share your data only with:

Delivery partners (GoSend, GrabExpress, JNE, J&T) — name, phone, and delivery address for order fulfillment
Payment processors (Xendit, Midtrans) — payment details for transaction processing
Cloud infrastructure (Supabase, Fly.io, Vercel) — for hosting and data storage
Law enforcement — only when required by Indonesian law or court order

We never sell your personal data to third parties.

5. Data Security

All data is encrypted in transit (TLS/SSL) and at rest
Payment processing is handled by PCI-DSS compliant partners
Access to customer data is restricted to authorized personnel only
Our database is hosted in the Asia-Pacific region (Singapore) with automated backups

6. Data Retention

Order data: Retained for 5 years (tax compliance requirement)
Conversation history: Retained for 12 months, then anonymized
Account data: Retained as long as your account is active; deleted within 30 days of account deletion request

7. Your Rights

Under Indonesian data protection regulations (UU PDP No. 27/2022), you have the right to:

Access your personal data
Correct inaccurate data
Delete your data (subject to legal retention requirements)
Withdraw consent for marketing communications
Request portability of your data in a machine-readable format

To exercise these rights, contact us at support@mix.florist.

8. Cookies

We use essential cookies for site functionality and analytics cookies to understand how visitors use our site. You can disable cookies in your browser settings, though some features may not work properly.

9. Children's Privacy

mix.florist is not directed at children under 17. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us for removal.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of mix.florist after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests:

Email: support@mix.florist
WhatsApp: +62 878-1888-9997
Address: PT Rejeki Elok Dinamika, Kencana Tower Level Mezzanine, Jl. Meruya Ilir Raya No.88, Jakarta Barat, DKI Jakarta 11620