Vivapetal
Request pricing

Legal

Privacy Policy

Last updated: 9 October 2026. This page explains what personal data VivaPetal collects, why we collect it, who we share it with, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and similar privacy laws.

1. Who we are (data controller)

VivaPetal is a sole-proprietor business based in Kunming, Yunnan, China, supplying preserved flower raw materials to florists, studios, gift manufacturers and other business customers worldwide. For the purposes of the GDPR we act as the data controller for the personal data described below.

You can reach us about any privacy matter at privacy@vivapetal.com.

2. What data we collect

We only collect what we need to respond to and serve wholesale inquiries:

  • Inquiry form — the fields you choose to submit: name, company, country, email, WhatsApp / phone, business type, products of interest, estimated quantity and your message.
  • Email correspondence — messages you send us and our replies.
  • Technical data — your IP address and approximate country, provided automatically by our hosting provider (Cloudflare) for security and abuse prevention. We do not use this to identify you personally.

We do not collect payment card details on this site, and we do not buy or receive personal data about you from third parties.

3. Why we use it and the legal basis

  • To reply to your inquiry and prepare quotes — based on your consent when you submit the form (GDPR Art. 6(1)(a)) and our legitimate interest in serving prospective customers (Art. 6(1)(f)).
  • To deliver samples and fulfil orders — necessary to take steps at your request before entering a contract (Art. 6(1)(b)).
  • To keep the site secure — our legitimate interest in preventing abuse and attacks (Art. 6(1)(f)).

4. Cookies and similar technologies

This website does not use analytics, advertising or cross-site tracking cookies. Our hosting provider (Cloudflare) may set strictly necessary security cookies to distinguish genuine visitors from automated traffic; these are not used for profiling and cannot be switched off without breaking the site. We place no third-party marketing cookies.

5. Who we share data with

We share personal data only with the processors needed to run the site:

  • Cloudflare, Inc. (United States) — website hosting, CDN and security.
  • Resend, Inc. (United States) — delivers inquiry emails to our inbox.

We do not sell your data, and we do not share it with any other party except where required by law. Both providers are bound by data-processing terms.

6. International transfers

Because our processors are based in the United States, your data may be transferred outside the European Economic Area. Where this happens we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent safeguards to protect the data.

7. How long we keep data

  • Inquiry records and email correspondence: up to 24 months from your last contact, then deleted.
  • Technical security logs: up to 30 days.

8. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Have inaccurate data corrected (Art. 16)
  • Have your data erased (Art. 17)
  • Restrict or object to processing (Art. 18, 21)
  • Receive your data in a portable format (Art. 20)
  • Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, email privacy@vivapetal.com. We respond within one month. You also have the right to lodge a complaint with your local data protection authority.

9. Children

This site is intended for business customers. We do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

We may update this policy and will revise the “Last updated” date above. Material changes will be noted on this page.

VivaPetal · Kunming, Yunnan, China · privacy@vivapetal.com