PRIVACY POLICY

lunaflowers.uz

Tashkent, Republic of Uzbekistan | Effective Date: June 10, 2026

1. General Provisions

1.1. This Privacy Policy ("Policy") describes how Lunagroup A LLC ("Operator", "we", "us") collects, stores, uses and protects personal data of users ("User", "you") of the website https://lunaflowers.uz ("Site").

1.2. The Operator is Lunagroup A LLC, TIN 313 078 551, Tashkent, Republic of Uzbekistan.

1.3. This Policy is developed in compliance with the Law of the Republic of Uzbekistan "On Personal Data" (No. ZRU-547, dated 02 July 2019) and other applicable data protection regulations.

1.4. By using the Site, placing an order or registering, you acknowledge that you have read this Policy and consent to the processing of your personal data under the terms set out herein. If you disagree, please discontinue using the Site immediately.

1.5. We may update this Policy at any time. The current version is available at https://lunaflowers.uz/page/privacy_policy. Continued use of the Site after an update constitutes acceptance of the revised Policy.

2. Data We Collect

2.1. When you place an order and/or register, we collect the following personal data:

– first and last name of the Buyer and/or Recipient;

– contact phone number;

– email address (if provided during registration or checkout);

– delivery address;

– card message text and special instructions (if provided).

2.2. When you use the Site, we automatically collect technical data:

– device IP address;

– browser type and operating system;

– pages visited and duration of your session;

– referral source;

– cookie and similar tracking technology data.

2.3. We do not collect special categories of personal data (health, racial or ethnic origin, political opinions, religious beliefs, etc.).

2.4. We do not collect or store payment card details. Payment data is processed exclusively by certified payment systems (Payme, Click, Freedom Pay).

3. Purposes and Legal Bases for Processing

3.1. We process personal data for the following purposes:

– Contract performance: order placement, confirmation, delivery and payment (legal basis: contract performance, Art. 6 ZRU-547);

– Communication: order status notifications and responding to enquiries (legal basis: contract performance and legitimate interest);

– Marketing communications: newsletters, promotions and special offers — only with your explicit consent (legal basis: consent);

– Site improvement: user behaviour analytics, bug fixing (legal basis: legitimate interest);

– Legal compliance: responding to lawful requests from authorities (legal basis: legal obligation).

4. Data Retention

4.1. We retain personal data only as long as necessary for the stated purposes:

– order data — 5 (five) years from order fulfilment (tax and accounting requirements);

– account data — for the lifetime of the account plus 1 (one) year after deletion;

– technical logs and cookies — up to 1 (one) year;

– marketing data — until consent is withdrawn.

4.2. Upon expiry of the retention period, data is anonymised or securely deleted.

5. Sharing Data with Third Parties

5.1. We do not sell or rent personal data. Data may be shared only in the following cases:

– payment processors (Payme, Click, Freedom Pay) — to process payments;

– courier and logistics services — to fulfil delivery;

– IT service providers (hosting, CRM, analytics) — under data processing agreements ensuring adequate protection;

– competent government authorities — where required by law (request, order or court decision).

5.2. All third parties receiving personal data are contractually bound to treat it as confidential and use it only for the specified purpose.

6. Cookies

6.1. The Site uses cookies — small text files stored on your device — to maintain session settings, shopping cart contents and language preferences, and to collect anonymised analytics.

6.2. We use the following cookie categories:

– Essential (technical) — required for Site functionality; cannot be disabled;

– Analytical — collect anonymised statistics to improve the Site;

– Marketing — used to serve relevant advertising (enabled only with your consent).

6.3. You can manage cookies through your browser settings. Disabling essential cookies may affect Site functionality.

7. Data Security

7.1. We implement technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure:

– all data transmitted via the Site is encrypted using HTTPS;

– access to personal data is restricted to employees who require it to perform their duties;

– all employees handling personal data sign a non-disclosure agreement;

– payment card data is processed only on secured pages of certified payment systems.

8. Your Rights

8.1. Under ZRU-547 you have the right to:

– obtain information about the scope and purposes of processing your personal data;

– request correction of inaccurate or outdated data;

– object to processing for direct marketing purposes;

– withdraw consent at any time (withdrawal does not affect the lawfulness of prior processing);

– request erasure of data where there is no lawful basis for further processing.

8.2. To exercise your rights, send a request to support@lunaflowers.uz stating your name, contact details and the nature of your request. We will respond within 30 (thirty) calendar days.

9. Children's Privacy

9.1. The Site is not intended for persons under 18. We do not knowingly collect personal data from minors. If we become aware that such data has been collected, it will be deleted immediately.

10. Third-Party Links

10.1. The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies independently.

11. Contact Information

For questions regarding the processing of your personal data, please contact us:

Lunagroup A LLC

Address: Tashkent, Sergeli district, Khalqobod MFY, Yangi Koyliq Street, 10B

Email: support@lunaflowers.uz

Phone: +998 99 084 88 88

Website: https://lunaflowers.uz