Privacy Policy

1. Who we are

flowerful Ltd ("flowerful", "we", "us", "our") is a company registered in the United Kingdom. We are the data controller for the personal data described in this policy. Our founder, Ian, handles all data protection matters directly — you can reach him at ian@drinkflowerful.com.

This policy explains what we collect through drinkflowerful.com, why, how long we keep it, and the rights you have over it. It's written to be consistent with the UK GDPR, the EU General Data Protection Regulation (GDPR), the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), and the personal data protection laws of other GCC states (including Saudi Arabia's PDPL and Bahrain's PDPL), which share a broadly similar consent-based framework.

2. What we collect

At this pre-launch stage, we collect the minimum needed to let you know when flowerful launches:

• Email address — when you submit the "Join the list" form.
• Language preference — which of EN / AR / RU you were viewing the site in when you signed up.
• Consent timestamp — the date and time you ticked the consent box, as proof of opt-in.
• Standard technical logs — our hosting and form-processing providers (Vercel and Google) automatically log things like IP address and browser type for security and abuse prevention. We don't access or use these for marketing.

We do not collect payment information, government ID, precise location, or any special-category data (health, religion, etc.) through this site. We do not use advertising cookies, tracking pixels, or third-party analytics.

3. Why we collect it

We use your email address for exactly one purpose: to tell you when flowerful launches and becomes available to buy. We may also use it to share meaningful pre-launch updates directly relevant to that (for example, a change in launch date). We will not sell, rent, or share your email address with third parties for their own marketing.

4. Our legal basis for processing

Under UK/EU GDPR Article 6(1)(a), the UAE PDPL, and equivalent GCC laws, we rely on your freely given, informed consent as the legal basis for collecting and using your email address. You give this consent by ticking the checkbox next to the signup form before submitting it — the box is never pre-ticked. You can withdraw consent at any time (see Section 7), and doing so is as easy as giving it.

5. Where your data is stored

Signup data is stored in a private Google Sheet, processed via Google's infrastructure (Google LLC and its European/international subsidiaries). Google acts as our data processor and processes data under its own data processing terms and appropriate safeguards for international transfers, including the EU Standard Contractual Clauses where relevant. Our website itself is hosted on Vercel. Neither provider is authorised to use your data for their own purposes.

We do not currently use a dedicated email marketing platform (such as Mailchimp or Klaviyo). If we adopt one before launch, we will update this policy and, where required, seek fresh consent.

6. How long we keep it

We keep your email address until either: (a) you unsubscribe or ask us to delete it, or (b) 24 months pass with no engagement from us or you, whichever comes first. Once flowerful launches and the pre-launch list has served its purpose, we will review the list and delete any data we no longer have a reason to keep.

7. Your rights

Depending on where you're based, you have some or all of the following rights under GDPR, the UAE PDPL, and comparable GCC laws:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure ("right to be forgotten").
• Withdraw consent at any time, with no effect on processing that happened before withdrawal.
• Object to or restrict how we process your data.
• Request a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email ian@drinkflowerful.com with the subject line "Privacy request." We'll respond within 30 days.

8. Cookies

drinkflowerful.com does not use tracking or advertising cookies. We use your browser's local storage (not a cookie) to remember your language preference (EN/AR/RU) between visits — this stays on your device and is never sent to us.

9. Children's privacy

flowerful is an adult-facing consumer product and this site is not directed at, and does not knowingly collect data from, anyone under 18. If you believe a minor has submitted their email to us, contact us and we'll remove it.

10. Changes to this policy

We may update this policy as the business develops — particularly around launch, when manufacturing, distribution, and possibly a proper email platform come online. We'll update the "Last updated" date above whenever we do, and material changes will be reflected in what you're consenting to on the signup form.

11. Contact us

For anything in this policy, or any privacy question at all, email ian@drinkflowerful.com.