Dalja Flower ("the company") protects the personal data of its users in accordance with the Personal Information Protection Act of Korea, and sets out this policy so that any related concern can be dealt with promptly.
We do not collect your password. Signing in happens only through a Google or Kakao account, and those passwords are never passed to us.
When you sign in with Google we ask for three permissions only — openid, email, profile. We do not touch your Gmail, contacts, calendar or any other Google data.
| What we collect | How | |
|---|---|---|
| Order (required) | Orderer's name, phone or messenger, email; recipient's name, phone, delivery address; payment details | Entered on the order form |
| Order (optional) | Ribbon wording, card message, delivery notes, any funeral or wedding notice you paste in (link or text) | Entered on the order form |
| Cash receipt / tax invoice | Cash-receipt number, company name, business registration number, representative's name, email | Entered on the order form, only if you ask for one |
| Google sign-in | Name, email address, profile picture, Google account identifier | Passed to us by Google when you sign in |
| Enquiries | Whatever you tell us while we help you | Phone (1666-3393), KakaoTalk open chat, live chat |
As a rule we destroy personal data without delay once the purpose it was collected for has been met. The following are kept for the periods required by Korean law.
| What is kept | Period | Under |
|---|---|---|
| Records of contracts and withdrawal of subscription | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints and dispute resolution | 3 years | Act on Consumer Protection in Electronic Commerce |
| Records of display and advertising | 6 months | Act on Consumer Protection in Electronic Commerce |
| Website access logs | 3 months | Protection of Communications Secrets Act |
Your signed-in state is stored in your browser only, for up to 30 days. It disappears as soon as you sign out or clear your browser data.
To count visitors we do not store IP addresses. At the moment of the visit we mix the IP address with a random value that is valid for that day only and keep an irreversible marker. Because the marker changes when the date changes, the same person cannot be followed from one day to the next, and it is deleted after three months. Of the country we record only the two-letter code (for example KR).
We do not give your personal data to third parties. What is needed to make and deliver the flowers is not handed to a third party but processed as a delegated task under section 5.
Otherwise we share data only where you have separately agreed, or where the law specifically requires it, and even then only the minimum needed for that purpose.
To run the service we delegate the processing of personal data as follows.
| Who | What they do |
|---|---|
| Paran Flower Network Co., Ltd. | Runs the order system (flowerpay.co.kr), assigns the florist in the delivery area to make and deliver the flowers, passes on the delivery photograph |
| KSNET Co., Ltd. | Processes card and simple-pay payments |
| Vercel Inc. | Website hosting (transferred abroad — see section 6) |
| Google LLC | Google account sign-in (transferred abroad — see section 6) |
Your order is made and delivered by a partner florist near the delivery address. What that florist needs — the recipient's name and phone number, the delivery address, the requested date and time, the ribbon or card wording — reaches them through the processor above, which counts as sub-delegation. We consent to it and supervise it through the processor. Your own name and phone number are not passed on, except where they form part of the ribbon or card wording.
The safe handling of personal data is written into each delegation contract. If a processor changes, we will say so on this page.
| Who receives it | Country | What is transferred | When and how | Kept until |
|---|---|---|---|---|
| Vercel Inc. (privacy@vercel.com) | United States | Website access logs, order form data | Sent over the network as you use the service | End of the contract |
| Google LLC | United States | Google account identifier, name, email, profile picture | Sent over the network when you sign in with Google | End of the contract |
You may refuse the transfer abroad. If you do, you can order as a guest instead of signing in with Google, or order by phone (1666-3393).
You may at any time ask to see, correct, delete or suspend the processing of your personal data. Write to the contact in section 11 and we will act without delay. Data we are required by law to keep (section 3) cannot be deleted before that period ends.
To disconnect your Google account, remove access for "달자네꽃배달" under Google Account > Third-party apps & services.
Personal data is destroyed without delay once its retention period has passed or its purpose has been met. Electronic files are deleted so that they cannot be recovered; paper is shredded or burned. Cash-receipt numbers are destroyed once the receipt has been issued.
We use no advertising or tracking cookies. Your signed-in state, and values you have saved such as a delivery address or ribbon wording, are kept in your own browser's storage (localStorage) and are not sent to our servers. You can delete them at any time in your browser settings.
| Name | Han Da-kyung |
| Position | Owner |
| Phone | 1666-3393 (from abroad: +82 70-7919-3057) |
| daljaflowers@gmail.com |
Complaints about the handling of personal data may also be taken to the Korea Internet & Security Agency's Privacy Infringement Report Centre (privacy.kisa.or.kr / 118), the Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972), the Supreme Prosecutors' Office Cyber Investigation Division (1301), or the National Police Agency Cyber Bureau (182).
This privacy policy applies from 10 August 2026. If it changes, we will post the change on this page seven days before it takes effect.