Privacy Policy
At Wallflower we look after your data with the same care we put into a bouquet: we ask only for what we need, we use it for what we promised, and we don’t pass it around.
Who we are
Wallflower Flowers & Gifts, a florist in Guatemala City. Our website address is https://wallflowerguatemala.com. You can write to us at [email protected] or on WhatsApp at +502 3841 6986.
What we ask for, and why
When you place an order
- Name, address, department, phone number and email: to prepare your order, deliver it, and keep you posted.
- NIT (tax ID): to issue your invoice.
- ID number (DPI) and a photo of it: required by the card payment process to verify your identity and prevent fraud.
- Order notes: the message card and any delivery instructions you write for us.
When you pay by card
Your card details go straight to Banco Industrial (Pay Bi), which processes the charge. We do not store them on this site — they are never kept in our database or in our email.
When you are just browsing
- Store cookies: the ones the cart needs to remember what you added and to keep your session.
- Language cookie (
wf_idioma): remembers for one year whether you prefer the site in Spanish or in English. - Server logs: IP address, browser and pages visited, kept for security and to spot attacks.
The photo of your ID
It is the most sensitive thing you trust us with, so it gets its own section:
- It is stored outside the site’s public folder, under a random name and with restricted permissions: there is no web address anyone could use to download it.
- Only whoever runs the shop can see it, from the admin panel.
- It is attached only to the internal new-order notice. It is never sent to the customer or to third parties.
- If you leave the order unfinished, it deletes itself after 7 days.
Who we share your data with
- Banco Industrial (Pay Bi), to take card payments. Its form also loads a fraud-prevention service (online-metrix) and Google reCAPTCHA, which examine the session to detect suspicious transactions.
- Whoever makes the delivery: the name, address and phone number of the recipient — the minimum needed to bring them the flowers.
And nobody else. We do not sell or hand over your data to third parties for advertising.
How long we keep it
Orders and their billing details are kept for as long as we need them to handle claims, guarantees and tax obligations. Photos of IDs from orders that were never completed are deleted after 7 days.
Your rights
You can ask us at any time what data of yours we hold, to correct it, or to delete it. Write to [email protected] or message us on WhatsApp at +502 3841 6986 and we will get back to you. Please note that we cannot delete the data of orders already invoiced, because the law requires us to keep it.
Security
The site always runs over an encrypted connection (HTTPS) and sits behind Cloudflare. Access to the admin panel is restricted, and sensitive files live out of the web’s reach.
Changes to this policy
If we ever change the way we handle your data, we will update this page and the date below.
Last updated: August 13, 2026.