Privacy Policy

01Information we collect

Depending on the features you use, we may collect your name, telephone, email, WhatsApp contact preference, order and product details, delivery date, funeral venue, room or address, deceased name and gender, sender names, relationships, religious preferences, card wording and special requirements. Not every field is mandatory.

We also retain supplied comments, uploads, payment evidence, card proofs, confirmations, change requests, service communications, payment references and delivery photos. Optional family lists, joint orders, electronic obituaries and planning tools process information supplied for those features. Only provide other people’s information that you are entitled to share and that is needed for the service.

02Orders and delivery

We use information to create and follow up orders, check wording, prepare cards and flowers, reconcile payments and refunds, arrange delivery, provide photos or receipts, and handle enquiries and disputes. Staff, delivery personnel and relevant service partners can use information needed for their work.

Printed cards, delivery photos and published obituaries may contain the names and wording you supply. Share private order and collaboration links only with intended people: a link holder may be able to view or edit information within that link’s permissions.

03WhatsApp and email

When you contact us on WhatsApp or choose WhatsApp follow-up, messages are processed through Meta’s WhatsApp Business API. Our staff workspace can retain conversations, attachments and sending or read statuses for continuity. Approved templates or assisted replies may be used when enabled.

Order instructions, private links, card proofs and service notices may be emailed. Our shared customer-service mailbox uses Google Workspace/Gmail and may synchronise messages, attachments and work records into our system. Loading remote images in an email may tell its sender that the email was opened.

04Payment information

Card and PayPal payments use Stripe/PayPal payment interfaces. Those providers process card details entered into their interfaces. Our system retains order amounts, payment methods, statuses, transaction references and reconciliation records. Do not put card security codes or passwords in comments or email.

FPS, bank-transfer and PayMe evidence may contain payer, bank-account or transaction information for staff checking. You may redact unrelated information while keeping the amount, date and necessary reference visible. Uploading evidence does not establish that funds have been verified as received.

05AI-assisted features

Where a feature is enabled and the applicable authorisation is in place, DeepSeek or another specified processor may help organise card wording, interpret messages or provide suggestions. Inputs may include supplied wording, deceased and sender information, product context or relevant excerpts identified by the feature. Avoid supplying unnecessary contact or payment information.

Some workflows limit or mask data; this is not a guarantee of complete anonymisation. Attachment or image analysis is also subject to feature settings and authorisation. AI suggestions can be wrong and require customer or staff review. An AI suggestion alone does not confirm payment or approve a card. Providers’ own terms govern their processing, retention and use of data.

06Cookies, browsing and analytics

Cookies, sessions and browser storage support the cart, sign-in, language, drafts and security checks. Server records may include IP addresses, browser information, request times and errors for security and troubleshooting.

When enabled on the live website, Google Analytics/Google Ads help measure browsing, checkout steps, placed orders and advertising performance, including device, cookie, product, amount and journey events. Browser privacy signals are handled where supported by the implementation. You can manage cookies and tracking in your browser; blocking essential cookies may affect the cart, sign-in and saved progress.

07Service providers and storage

We use hosting, storage, email, Meta WhatsApp, Stripe/PayPal and enabled AI or other technical providers. Providers outside Hong Kong may process information; their own privacy and retention policies also apply.

Necessary information may be shared with delivery and support personnel, or disclosed for legal requirements, security, disputes or protection of rights. Third-party pages linked from this website are the responsibility of those third parties.

08Retention and security

There is no single automatic deletion period for all records. Retention depends on order, service, accounting, reconciliation, dispute and system-maintenance needs. Backups, transactions and amendment histories may be retained longer. Expiry of a private link does not delete the order record.

We use access controls, private file locations and applicable credential safeguards, but no online system can guarantee absolute security. Do not publish private order or editing links. Contact us if you believe a link has been disclosed.

09Your choices and requests

You can ask us for access or corrections, or request deletion, restricted use or an end to non-essential communications. We assess requests against the records, identity checks, applicable requirements and retention needs, and explain any parts we cannot delete or restrict.

Deletion may not immediately remove accounting, transaction, audit or backup records, or copies already held by intended recipients and providers. For an ongoing order, also tell us whether delivery or contact arrangements need to change.

10Policy updates

Features and service providers may change. We will update this page and its effective date accordingly. Also review the data notices and sharing settings for any particular feature you use.