Privacy notice

Who we are

Elaxia Global is a fresh cut flower sourcing and export business based in Bengaluru, Karnataka, India. We are a sole proprietorship. We decide why and how the personal data described here is used, so we are responsible for it. Some laws call this the “data controller” or “data fiduciary”.

This notice covers this website and the enquiries that reach us from it. Contact details for privacy questions and complaints are in the Grievance Officer section at the end.

What we collect

• What you send us: When you contact us on WhatsApp or by email, we receive what you send. Usually that is your name, company, phone number or email address, country, and the details of your enquiry, such as flowers, quantities, dates and destination.
• The enquiry builder: The enquiry builder on this site only writes a message inside your browser. Nothing is sent to us until you send it yourself from WhatsApp or your email app.
• Analytics, only if you accept: With your consent, Google Analytics 4 records the pages you visit, your device and browser type, your approximate location (country or city) and a few clicks, described below. It uses a random identifier stored in a cookie. It never receives your name, phone number, email address or message.
• Your cookie choice: Your browser keeps a note of whether you accepted or rejected analytics. It stays on your device and is not sent to us. The cookie policy lists every item.
• Technical data: Like any website, our host, Cloudflare, handles your IP address and browser details to deliver pages and protect the site from attacks.

The site has no forms, accounts or payments. We do not ask for sensitive personal data such as passwords, health details or bank card numbers on this site.

The analytics events

When analytics is on, the site sends Google only these events, each with values from a fixed list:

• WhatsApp or email enquiry: that you opened an enquiry in WhatsApp or your email app, with the flower types and destination country you picked and the kind of page you were on.
• Calendar filter: the flower and month you chose in the seasonality calendar.
• Sound: whether you switched the ambient sound on or off.

Free text, names, numbers and email addresses are filtered out before anything reaches Google. Google signals and advertising features are switched off.

Why we use it

• To answer your enquiry and handle orders: we use what you send us to reply, prepare quotations, and arrange sourcing, packing, documents and shipment. We do this because you asked us to, and to take steps towards or perform a contract with you. Under India’s Digital Personal Data Protection Act 2023, this is data you have chosen to give us for that purpose.
• To keep business records: tax, customs and export laws require us to keep order and shipment records.
• To improve the site: analytics shows which pages help buyers. We do this only with your consent, which you can withdraw at any time.
• To keep the site secure: our host uses technical data to block attacks. This is in our legitimate interest and yours.

We do not sell personal data. We do not use it for automated decisions or profiling. We will not send you promotional messages unless you have agreed to receive them, and you can tell us to stop at any time.

Who receives it

• WhatsApp (Meta): WhatsApp messages pass through WhatsApp, run by Meta, under WhatsApp’s privacy policy.
• Our email provider: emails you send us are stored by our email service provider.
• Google: only if you accept analytics. Read how Google uses information from sites or apps that use its services.
• Cloudflare: hosts the website and handles the technical data needed to deliver it.
• Partners in an order: when you place an order, we share only what each needs, such as consignee details on shipping documents, with growers, freight forwarders, customs agents, airlines, inspection authorities and banks.
• Authorities: when the law requires it.

International transfers

We are in India, so data you send us from another country comes to India. WhatsApp, Google, Cloudflare and our email provider may also store and process it in other countries where they operate, under their own safeguards. We do not transfer personal data to any country where Indian law forbids it.

How long we keep it

• Enquiries that do not lead to an order: to be confirmed before launch.
• Order and shipment records: for as long as Indian tax and export law requires.
• Analytics data: Google Analytics keeps user-level data for 14 months; reports after that show only totals.
• Your cookie choice: 12 months, then the site asks you again.

When we no longer need data, we delete it.

How we protect it

The website has no database of visitors, so there is nothing on it to steal. It is served only over an encrypted (HTTPS) connection. Our WhatsApp and email accounts are protected with strong passwords and two-step verification, and only people who need your data to handle your enquiry or order can see it.

Your rights

You can ask us to:

• show you the personal data we hold about you;
• correct or update it;
• delete it, unless the law requires us to keep it;
• stop using it for a purpose, or withdraw your consent (for analytics, use Cookie settings at the foot of any page);
• nominate someone to act for you if you die or cannot act yourself.

Withdrawing consent does not affect what was done before. To use any right, contact the Grievance Officer below. We may ask you to confirm who you are, and we will resolve your request within one month.

Where you are

We give everyone the same rights. If you are not satisfied with our answer, you can also complain to the data protection authority where you live:

• India: the Data Protection Board of India, from 13 May 2027.
• UAE: the UAE Data Office.
• Saudi Arabia: the Saudi Data and Artificial Intelligence Authority (SDAIA).
• Qatar: the National Cyber Security Agency.
• Oman: the Ministry of Transport, Communications and Information Technology.
• Bahrain: the Personal Data Protection Authority.
• Singapore: the Personal Data Protection Commission.

Kuwait and Malaysia have no data protection law that applies to a business outside them in our position, but the same rights apply to you.

Children

This site is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children’s data.

Changes to this notice

We will update this notice when our practices or the law change, and show the new date at the top. If we change what analytics is used for, the site will ask for your choice again.