Privacy policy

Privacy Policy

Last updated: 8 September 2026

Minulilled respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, place an order, receive a flower delivery, contact us or otherwise interact with our services.

This Privacy Policy applies to customers, website visitors and recipients of products ordered through Minulilled.

1. Who We Are

Minulilled is an online flower gifting service operated by EuroBlooms OÜ, an Estonian private limited company. We offer flower and gift delivery services, with orders prepared and delivered through local florists.

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:

EuroBlooms OÜ
Registry code: 17585654
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115, Estonia
Email: contact@minulilled.ee
Website: minulilled.ee

EuroBlooms OÜ is responsible for determining how and why personal data collected through Minulilled is processed, except where another organisation acts as an independent data controller.

2. Personal Data We Collect

The personal data we collect depends on how you interact with Minulilled.

Customer Information

When you place an order, create an account or contact us, we may collect information including:

  • Your name

  • Email address

  • Telephone number

  • Billing address

  • Delivery information

  • Order details

  • Products purchased

  • Payment-related information

  • Communications with our customer service team

  • Information you voluntarily provide to us

Recipient Information

Flowers are frequently purchased as gifts. This means the person receiving the flowers may be different from the person placing the order.

When you place an order, you may provide information about the recipient, including:

  • Recipient's name

  • Delivery address

  • Recipient's telephone number

  • Delivery instructions

  • Requested delivery date

  • Personal card message

We use this information primarily to prepare, coordinate and deliver your order.

You should only provide another person's personal information where you have an appropriate reason to provide that information.

We do not use recipient information supplied solely for the purpose of delivering a gift to send unrelated marketing communications to the recipient unless we have an independent lawful basis to do so.

3. Payment Information

Payments made through Minulilled are processed by payment service providers available through our online store.

We generally do not receive or store complete payment card details ourselves.

Depending on the payment method used, we may receive limited payment information such as:

  • Payment status

  • Payment method

  • Transaction identifier

  • Amount paid

  • Currency

  • Information necessary to process a refund

  • Information used for fraud prevention

Payment providers may process personal information in accordance with their own privacy policies and legal obligations.

4. Information Collected Automatically

When you visit Minulilled, certain information may be collected automatically through cookies, server logs and similar technologies.

This may include:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Approximate location derived from your IP address

  • Pages viewed

  • Products viewed

  • Referring website

  • Date and time of visits

  • Interactions with our website

  • Shopping cart activity

  • Cookie and device identifiers

We may use this information to operate the website, understand how customers use Minulilled, improve our services, maintain security and, where permitted, measure advertising and marketing performance.

5. How We Use Your Personal Data

We may process personal information to:

  • Accept and process orders

  • Process payments

  • Arrange the preparation of flowers and gifts

  • Arrange delivery through local florists

  • Provide relevant order information to the florist fulfilling an order

  • Communicate order confirmations and delivery information

  • Contact customers or recipients when necessary for delivery

  • Process cancellations, complaints, replacements and refunds

  • Provide customer service

  • Maintain customer accounts

  • Prevent and detect fraud

  • Protect the security of our website and services

  • Maintain business and accounting records

  • Improve our website, products and services

  • Understand how customers use our website

  • Measure website and marketing performance

  • Send marketing communications where legally permitted

  • Comply with tax, accounting and other legal obligations

  • Establish, exercise or defend legal claims

We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.

6. Legal Bases for Processing

Under the GDPR, we must have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on one or more of the following legal bases.

Performance of a Contract

We process personal information where necessary to enter into or perform our contract with you.

For example, this includes processing information required to accept your order, arrange payment, prepare the flowers and complete delivery.

Legal Obligations

We may process and retain information where necessary to comply with our legal obligations, including accounting, taxation and regulatory requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

These interests may include:

  • Operating and improving our business

  • Providing customer service

  • Preventing fraud

  • Protecting our systems

  • Understanding website performance

  • Managing relationships with florists and service providers

  • Establishing or defending legal claims

Consent

Where required, we rely on your consent.

This may apply, for example, to certain marketing communications and the use of non-essential cookies or similar technologies.

Where processing is based on consent, you may withdraw that consent at any time.

7. Local Florists and Order Fulfilment

Minulilled works with local flower shops and florists to prepare and deliver orders.

To fulfil an order, we may provide the florist responsible for that order with information necessary to prepare and complete the delivery.

This may include:

  • Recipient's name

  • Delivery address

  • Recipient's telephone number

  • Delivery date

  • Delivery instructions

  • Products ordered

  • Personal card message

  • Other information reasonably necessary to complete the order

We aim to limit the information shared with florists to information reasonably necessary to prepare, deliver and manage the relevant order.

Local florists may also need to use the provided information to contact the recipient, resolve delivery difficulties or otherwise complete the requested service.

8. Shopify and Other Service Providers

Minulilled uses third-party technology and service providers to operate our business.

Our online store is operated using Shopify.

We may also use third-party providers for services including:

  • Website hosting and e-commerce

  • Payment processing

  • Email and communications

  • Order management

  • Delivery and fulfilment

  • Analytics

  • Advertising

  • Marketing

  • Fraud prevention and security

  • Accounting

  • IT and cloud infrastructure

  • Professional and legal services

These organisations may process personal information where necessary to provide their services to us.

Some service providers may also act as independent data controllers for certain processing activities. Where this applies, their processing of personal information is governed by their own privacy policies and legal obligations.

9. Sharing Personal Data

We do not sell your personal information.

We may share personal information where reasonably necessary with:

  • Local florists fulfilling orders

  • Shopify and our e-commerce service providers

  • Payment providers

  • Delivery and logistics providers

  • IT and hosting providers

  • Email and communication providers

  • Analytics and marketing providers

  • Fraud prevention and security providers

  • Accountants, lawyers and other professional advisers

  • Government authorities or regulators where legally required

We may also disclose personal information where necessary to protect our rights, prevent fraud, comply with legal proceedings or respond to a lawful request from a public authority.

If our business or relevant assets are sold, transferred, merged or reorganised, personal information may be transferred as part of that transaction, subject to applicable data protection law.

10. International Data Transfers

Some service providers used by Minulilled may process personal data outside Estonia or the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we take appropriate measures where required by law to ensure that the information receives an adequate level of protection.

Depending on the destination and service provider, these safeguards may include:

  • An adequacy decision adopted by the European Commission

  • European Commission Standard Contractual Clauses

  • Other legally recognised safeguards

11. Cookies and Similar Technologies

Minulilled may use cookies and similar technologies to operate and improve our website.

Cookies may be used for purposes including:

  • Keeping the website and checkout functioning

  • Remembering shopping cart contents

  • Remembering preferences

  • Maintaining security

  • Understanding website usage

  • Measuring website performance

  • Measuring advertising effectiveness

  • Personalising advertising where permitted

Some cookies are necessary for the operation of the website and cannot reasonably be disabled without affecting essential functionality.

Where required by law, analytics, advertising and other non-essential cookies will only be placed after you have provided the appropriate consent.

You can manage your preferences using the cookie consent controls available on our website.

Additional information about the cookies we use may be provided in our Cookie Policy.

12. Marketing Communications

Where permitted by law, Minulilled may send you information about products, services, special occasions, promotions and offers.

Where marketing is based on your consent, you can withdraw your consent at any time.

You can unsubscribe from marketing emails using the unsubscribe link included in our marketing messages or by contacting:

contact@minulilled.ee

Opting out of marketing communications does not prevent us from sending communications necessary to manage an order or provide a service you have requested.

For example, we may still send order confirmations, payment information, delivery updates or messages concerning a problem with your order.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax and reporting requirements.

The appropriate retention period depends on the nature of the information and why we process it.

For example, information relating to orders and financial transactions may need to be retained for several years to comply with accounting and taxation requirements.

Customer service communications may be retained where reasonably necessary to resolve disputes, establish what occurred with an order or protect our legal rights.

When personal information is no longer required, we will delete or anonymise it where appropriate.

14. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Unauthorised disclosure

  • Alteration

  • Destruction

Access to personal information should be limited to persons and service providers who require it for legitimate business purposes.

Although we take reasonable steps to protect personal information, no website, internet transmission or electronic storage system can guarantee absolute security.

15. Your GDPR Rights

If the GDPR applies to you, you may have a number of rights regarding your personal information.

Subject to applicable legal requirements and exceptions, these may include:

Right of Access

You may request confirmation of whether we process your personal data and request a copy of the personal data we hold about you.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may request that we delete your personal information.

This right is not absolute. For example, we may need to retain certain information to comply with accounting, taxation or other legal obligations.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how we process your personal information.

Right to Object

You may have the right to object to certain processing based on our legitimate interests.

You also have the right to object to the use of your personal data for direct marketing.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format and may have the right to transmit that information to another controller.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your personal information has been processed unlawfully.

16. Exercising Your Rights

To exercise your data protection rights or ask a question about your personal information, contact:

contact@minulilled.ee

We may need to request information to verify your identity before responding to certain requests. This is intended to prevent personal information from being disclosed to someone who is not entitled to receive it.

We will respond to valid requests within the time periods required by applicable data protection law.

17. Recipient Privacy

Because Minulilled is a flower gifting service, we may receive personal information about a recipient from the person placing the order rather than directly from the recipient.

We process this information where necessary to arrange and complete the requested flower or gift delivery and for related legitimate purposes.

Recipient information will not be added to our general marketing lists solely because someone sent that person flowers through Minulilled.

18. Children's Privacy

Minulilled is not intended to collect personal information directly from children.

If we become aware that we have collected personal information from a child in circumstances where parental consent or another lawful basis was required, we will take appropriate steps to address the situation.

19. Third-Party Websites

Our website may contain links to websites, payment services, social networks or other services operated by third parties.

These third parties are responsible for their own privacy practices.

We recommend reviewing the privacy policies of third-party websites before providing them with personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our services

  • Our business operations

  • The technologies we use

  • Our service providers

  • Legal or regulatory requirements

When we make changes, the updated Privacy Policy will be published on Minulilled and the "Last updated" date at the top of this policy will be changed.

21. Contact Us

If you have questions about this Privacy Policy, would like to exercise your data protection rights or have concerns about how your personal information is handled, please contact us:

EuroBlooms OÜ
Registry code: 17585654
Harju maakond, Tallinn, Kesklinna linnaosa
Tartu mnt 67/1-13b
10115 Tallinn
Estonia

Email: contact@minulilled.ee
Website: minulilled.ee

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For EuroBlooms OÜ in Estonia, the relevant supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).