Privacy & Data Protection Policy

At Famous Roses, trust is at the heart of our relationship with customers. This Privacy & Data Protection Policy explains how we handle personal information under the General Data Protection Regulation (GDPR).

Last updated: 12 October 2026

1. Who we are

Famous Roses is operated by GREEN-E CONCEPT S.R.L., the data controller, registered at Str. Lotrioara Nr. 5, Sector 3, Bucharest, 032163, Romania. Trade Register number: J40/5704/2002. Company registration/VAT number: RO 14742549. Website: en.famousroses.eu. Privacy enquiries: info@famousroses.eu.

2. What personal information we collect

Depending on your interactions with our store, we may collect your name, email address, telephone number, billing and delivery addresses; order history, purchased products, order values, discounts, delivery details, returns, complaints and customer service correspondence; payment status, transaction references and billing information; newsletter subscription status and consent records; and technical information such as IP address, browser, device and cookie-related data where applicable.

Payment providers process payments. We do not need to hold complete payment card details to fulfil your orders. We do not intentionally request special-category personal data for ordinary retail purchases.

3. Why we process your information and our legal bases

We use personal information to process orders and payments and arrange delivery (performance of a contract); provide order-related support, returns and warranties (contract, legal obligation or legitimate interests as applicable); retain invoices and accounting documentation (legal obligation); recognise returning customers and assess relevant discounts (contractual necessity or legitimate interests, depending on the circumstances); maintain site security and prevent fraud (legitimate interests or legal obligation); and send newsletters and promotional emails only to subscribers who have consented (consent). Non-essential cookies and similar technologies are used only where permitted and, where required, after consent.

Where we rely on legitimate interests, we assess whether processing is necessary and proportionate and respect applicable rights, including the right to object.

4. Customer relationships and promotional discounts

We may use relevant purchase history and customer relationship information to recognise returning customers and determine eligibility for preferential pricing. Famous Roses may offer discounts to returning customers, introductory offers to new customers, discounts for larger-volume orders and general promotions publicly available on our website.

Discount eligibility is independent of newsletter subscription. You do not need to subscribe to marketing emails to receive any offer for which you are eligible. You may object to processing based on legitimate interests by contacting us, and we will assess that objection in accordance with the GDPR.

5. Marketing emails and newsletters

We send newsletters and promotional emails only to individuals who have subscribed. These may include information about roses, gardening advice, seasonal recommendations, new varieties, public promotions and customer offers. Placing an order or creating an account does not automatically subscribe you.

You can withdraw marketing consent at any time using the unsubscribe link in our emails or by emailing info@famousroses.eu. Withdrawal does not affect the lawfulness of earlier consent-based processing, your eligibility for discounts or necessary transactional communications regarding orders.

6. How long we keep personal information

We retain personal data only for as long as reasonably necessary for an identified lawful purpose or as required or permitted under applicable law. Different categories of information have different retention needs; we do not apply a universal period to every customer record.

Customer accounts and purchase history

Relevant customer and order history may be retained while our customer relationship remains active and, where reasonably necessary and proportionate, afterwards to provide continuity of service, recognise returning customers, assess preferential discounts, resolve enquiries and complaints, administer warranties and handle legal claims. We periodically review records associated with extended inactivity and delete or anonymise data where continued retention is no longer justified. The possibility of future purchases alone does not justify unlimited retention.

Financial and accounting records

We retain invoices, transaction records and supporting financial documents for periods required by Romanian and other applicable laws. Where applicable, Romanian accounting rules prescribe a five-year retention period calculated from 1 July of the year following the relevant financial year; particular documents or circumstances may be subject to different or longer requirements. Such records may need to be preserved even after an account deletion request, and their use is restricted to relevant lawful purposes.

Marketing, enquiries and technical data

Marketing subscription information is maintained while you remain subscribed; after unsubscribing, we may keep limited suppression or consent records as needed to respect your preferences and demonstrate compliance. Customer enquiries and complaints are kept for the time reasonably needed to resolve them, administer warranties and address legal claims. Technical and cookie data are retained according to their purposes and applicable cookie rules, as explained in our Cookie Policy.

7. Your GDPR rights

Subject to the applicable legal conditions, you have rights to access your personal information; request rectification or erasure; restrict processing; receive eligible data in a portable format; object to processing based on legitimate interests; withdraw consent; and exercise rights concerning qualifying solely automated decisions. You also have the right to complain to a competent data protection supervisory authority.

To exercise your rights, email info@famousroses.eu. We aim to respond to requests concerning your personal data within seven calendar days of receiving them. If a request is complex or needs identity verification, we will inform you of any delay and respond within the time limits required by the GDPR. We may reasonably verify your identity before disclosing or deleting personal information.

8. Deletion requests

You may ask us to delete your personal information at any time. We delete it without undue delay where the right to erasure applies. We may need to retain limited information where required by law, including financial record-keeping obligations, or where needed to establish, exercise or defend legal claims or meet another applicable GDPR exception. If we cannot delete particular records, we will explain the reason and limit their use to the justified purpose.

9. Who receives your information

We do not sell personal information. We share information only when necessary with relevant service providers and recipients, which may include our ecommerce platform (Shopify), payment processors, courier companies, customer support providers, email marketing providers, product review services, IT and security services, accountants, professional advisers and public authorities where required. Appropriate contractual and organisational safeguards apply where providers process data on our behalf.

10. International data transfers

Some providers may process information outside the European Economic Area. Where transfers are subject to GDPR rules, we use an applicable legal mechanism, such as a European Commission adequacy decision, Standard Contractual Clauses or other appropriate safeguards, and supplementary protections where required. You can ask us about the safeguards relevant to your information at info@famousroses.eu.

11. Cookies

Our website uses essential cookies for shopping basket, checkout and security functions. Other cookies or tracking technologies are used only where permitted by applicable law and, when required, after consent. Please consult our Cookie Policy and available consent controls for further information and preferences.

12. Security

We use appropriate technical and organisational measures intended to protect personal information from unauthorised access, accidental loss, misuse, alteration or disclosure. Access is limited to authorised persons with a legitimate need to use the information. No electronic system can guarantee absolute security.

13. Children's privacy

Our website is intended primarily for adults purchasing gardening products. We do not knowingly collect children's information for targeted marketing. If we learn that information has been collected without a lawful basis or required authorisation, we take appropriate action.

14. Complaints

You may contact us first at info@famousroses.eu with privacy concerns. You also have the right to lodge a complaint with a competent supervisory authority, including Romania's Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro, or the competent authority in the EU/EEA country where you live, work or consider that an infringement occurred.

15. Updates to this policy

We may update this policy to reflect changes in law, our operations or privacy practices. We will revise the date above and, where required, provide additional information or request consent before new processing begins.

16. Contact

GREEN-E CONCEPT S.R.L. — Famous Roses
Str. Lotrioara Nr. 5, Sector 3, Bucharest, 032163, Romania
info@famousroses.eu