Effective date: 24 September 2026
Ling Flowery respects the privacy of the people who purchase from us, receive gifts from us, communicate with our Concierge, engage us for floral commissions, or otherwise interact with our website and services.
This Privacy Notice explains how Ling Flowery (Malaysia) Sdn. Bhd. [Company Registration No. 202601030143 (1692238-H)] (“Ling Flowery”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data.
This Notice applies to our website, online ordering services, Ling Flowery Concierge, bespoke floral services, corporate services, event and concert commissions, Ling Flowery Privé, delivery services and other services offered by Ling Flowery.
For privacy enquiries or requests, please contact:
Email: privacy@lingflowery.com
Business correspondence address: B-21-2, Jalan C180/1, Dataran C180, 43200 Cheras, Selangor, Malaysia.
This address is not a walk-in or customer collection point.
Personal data we collect
Depending on how you interact with Ling Flowery, we may collect:
- Customer and sender information, including your name, telephone number, email address, billing or contact address, order information and communications with us.
- Recipient information, including the recipient's name, telephone number, delivery address, delivery instructions and, where provided, email address.
- Order and gifting information, including products ordered, delivery date and time, card messages, occasion information and other details necessary to prepare and fulfil an order.
- Concierge, bespoke and project information, including preferences, briefs, correspondence, photographs, reference images, screenshots, logos, invitations, venue information and other files or information you choose to provide.
- Corporate information, including company name, business contact details and floral, colour, design, gifting or project preferences that the corporate client chooses to provide.
- Payment and transaction information, including payment status, amount, transaction references and payment-related information made available to us by our payment provider. Payment card processing is handled by Airwallex or another payment provider made known to you at checkout. Ling Flowery does not store your full card number or card verification value (CVV).
- Delivery records, including proof-of-delivery information and delivery timestamps.
- Website and technical information, which may include IP address, browser and device information, cookie identifiers, pages viewed, interactions with our website, referring sources and similar technical or analytics information.
- Communications, including communications made through email, telephone, WhatsApp, WeChat or other channels through which you choose to contact us.
We do not intentionally require sensitive personal information unless it is genuinely necessary for a particular request. Please avoid sending unnecessary sensitive information in card messages, reference files or Concierge communications.
How we receive personal data
We may receive personal data:
- from you directly;
- from a person placing an order or arranging a service for you;
- from a corporate representative acting on behalf of an organisation;
- from a sender who provides recipient information to enable us to fulfil a gift or delivery;
- from our website and related technologies;
- from payment, communications, analytics, hosting and technology providers used in operating our services;
- from our delivery personnel; and
- from hotels, restaurants, venues or other service providers where necessary for a service you have asked us to coordinate.
Where somebody provides us with another person's information, we expect that information to be provided lawfully and for a legitimate purpose connected with the requested service.
How we use personal data
We may process personal data to:
- process, prepare, administer and fulfil orders;
- communicate with customers, senders and recipients;
- arrange and complete deliveries;
- verify payment status, administer refunds and manage transaction records;
- provide Ling Flowery Concierge assistance;
- prepare quotations, designs, bespoke commissions and corporate proposals;
- coordinate events, concert tributes, corporate gifting and other commissioned work;
- coordinate Ling Flowery Privé requests;
- communicate with hotels, restaurants, venues and other third parties where you ask us to assist with such arrangements;
- maintain proof-of-delivery and operational records;
- respond to complaints, disputes, quality issues and refund or cancellation requests;
- protect our website, customers, business and systems against misuse, fraud and security threats;
- operate, troubleshoot, analyse and improve our website and services;
- understand website performance and customer interactions through analytics and similar technologies;
- comply with legal, accounting, regulatory and tax obligations;
- establish, exercise or defend legal rights; and
- carry out other purposes directly related to the purposes described above or which we explain to you when the information is collected.
Where consent is required by law, we will process the relevant information based on that consent.
Other processing may take place where permitted under applicable law, including where necessary to perform a contract, take steps requested before entering into a contract, or comply with a legal obligation.
Gift recipients
Many Ling Flowery orders are gifts. This means we may receive the recipient's information from the sender rather than directly from the recipient.
We use recipient information only as reasonably necessary to prepare, coordinate and complete the delivery, communicate about the delivery, resolve delivery problems, maintain appropriate delivery records and deal with related customer-service matters.
A recipient will not be added to Ling Flowery marketing merely because somebody has sent flowers or another gift to them.
Recipient information will only be used for marketing if the recipient separately chooses to opt in.
The person providing recipient information is responsible for ensuring that the information is accurate and that they are permitted to provide it for the purpose of arranging the order or delivery.
Marketing choices
Ling Flowery does not currently use customer or recipient information for general promotional messaging without an appropriate opt-in.
Where we offer an optional newsletter, membership programme, event notification, marketing subscription or similar feature, participation will be voluntary and any applicable choices will be presented separately.
You may withdraw a marketing choice at any time using the unsubscribe facility provided or by contacting privacy@lingflowery.com.
Photographs and reference materials
Customers may provide us with photographs, screenshots, inspiration images, invitations, logos, designs, venue photographs and other reference materials.
We use such materials for purposes connected with the enquiry, order, design, commission or service for which they were provided and for reasonable related business records.
Providing a file to Ling Flowery does not by itself give us permission to publish it on our website, portfolio, advertisements or social-media channels.
Where identifiable personal information appears in supplied material, you may ask us to delete it by contacting privacy@lingflowery.com, subject to information that we reasonably need to retain for legal, contractual, dispute-resolution or other lawful purposes.
Corporate preferences
Where a business chooses to become or interact with us as a corporate client, we may retain information the business chooses to provide about its preferred floral styles, colours, flowers, gifting requirements, branding or recurring project requirements.
We use this information to understand future briefs and prepare relevant proposals.
We do not intentionally create undisclosed personal profiles about individual recipients from corporate gifting activity.
Membership and account features
Ling Flowery may introduce membership, account or loyalty features from time to time.
Where such services allow members to voluntarily store important dates, recipient information, preferences, favourite flowers or similar information, the information collected and its purpose will be explained at the point of registration or entry.
Additional membership terms or notices may apply.
Payments
Online card and other supported payment transactions are processed through Airwallex or another payment provider displayed to you when payment is made.
Ling Flowery does not store full card numbers or CVV information.
Payment providers may independently process personal and financial information in accordance with their own legal and privacy obligations.
We may receive information necessary to identify the transaction, verify whether payment succeeded, process refunds and reconcile our financial records.
Disclosure to third parties
Where reasonably necessary for the purposes described in this Notice, personal data may be disclosed to classes of third parties including:
- our website, cloud-hosting and database providers, including services such as Vercel and Supabase;
- payment processors, including Airwallex;
- communications providers, including email providers, WhatsApp/Meta and WeChat/Weixin where those communication channels are used;
- email-delivery service providers such as Resend;
- analytics and website-technology providers, including Google Analytics and Google Tag technologies;
- delivery personnel, logistics providers and persons reasonably involved in completing an order;
- hotels, restaurants, venues and other third-party service providers where a customer asks Ling Flowery Privé or our Concierge to coordinate with them;
- professional advisers such as accountants, auditors, insurers, lawyers and other advisers;
- government authorities, regulators, law-enforcement bodies, courts or other persons where disclosure is required or permitted by law; and
- a successor or relevant party in connection with a genuine corporate restructuring, investment, acquisition, merger or sale of all or part of the business, subject to appropriate confidentiality and legal requirements.
We do not sell customer or recipient personal data to advertisers.
Ling Flowery Privé
Ling Flowery Privé may assist customers by identifying, introducing or coordinating with hotels, restaurants, venues and other third-party providers.
Where such coordination requires us to provide information such as your name, contact details, requested date, number of guests or requirements to that provider, we will disclose only information reasonably necessary for the requested arrangement.
The customer contracts with and pays the relevant third-party venue or provider directly unless we expressly agree otherwise in writing.
Processing outside Malaysia
Some of the technology and communications providers used by Ling Flowery operate infrastructure or personnel outside Malaysia.
Accordingly, personal data may in certain circumstances be processed or accessed outside Malaysia.
Where personal data is transferred outside Malaysia, Ling Flowery will take reasonable steps to comply with applicable requirements governing cross-border personal data transfers, including the Personal Data Protection Act 2010 and applicable guidelines issued by the Personal Data Protection Commissioner.
Where required, we will rely on an applicable lawful condition for the transfer and take reasonable precautions regarding the protection of the transferred information.
Cookies and analytics
Our website may use cookies and similar technologies required for website operation, security, shopping functions, preferences, analytics and other permitted purposes.
We may use services such as Google Analytics and Google Tag technologies to understand how visitors interact with our website.
Where a choice is provided for non-essential cookies, you may manage that choice through our Cookie Settings facility.
Changing or disabling certain cookies may affect some website functions.
Retention and deletion
We keep personal data only for as long as it is reasonably necessary for the purpose for which it was collected or for another purpose permitted by law.
The appropriate period may depend on the nature of the information and whether it remains necessary for order fulfilment, customer service, dispute resolution, accounting, taxation, fraud prevention, legal compliance, protection of legal rights or legitimate business records.
When personal data is no longer required for an applicable purpose, we will take reasonable steps to delete, destroy or anonymise it.
A person may also request deletion of personal data by contacting privacy@lingflowery.com.
A deletion request does not require us to erase information that we are required or permitted to retain, including records required for legal, regulatory, taxation, accounting, contractual, fraud-prevention, dispute-resolution or legal-claims purposes.
Security
We take practical technical and organisational steps appropriate to the nature of the personal data we process to protect it against loss, misuse, unauthorised or accidental access, disclosure, alteration or destruction.
No internet transmission or electronic-storage system can be guaranteed to be completely secure.
Where we use service providers to process information on our behalf, we take reasonable steps to use providers that maintain appropriate safeguards.
Your privacy rights and choices
Subject to applicable Malaysian law, you may contact us to:
- request access to personal data we hold about you;
- request correction of inaccurate, incomplete, misleading or outdated personal data;
- withdraw consent where processing depends on consent;
- ask us to limit certain processing where applicable;
- object to or stop direct marketing;
- request deletion of information where appropriate;
- make a data portability request where the right applies and the applicable legal and technical requirements can be satisfied; or
- raise an enquiry or complaint about the handling of your personal data.
We may need to verify your identity before acting on a request.
Certain requests may be refused or limited where permitted by law, including where information relates to another person or where we are required to retain the information.
Information needed to provide our services
Some information is optional. However, information such as sender contact details, recipient details, delivery information and information required for payment or an agreed service may be necessary for us to accept or fulfil an order.
If required information is not provided, we may be unable to process the order, arrange delivery, respond to the request or provide the relevant service.
Changes to this Privacy Notice
We may update this Privacy Notice where our services, technologies or legal obligations change.
The current version will be published on our website together with its effective or last-updated date.
Material changes will apply prospectively except where applicable law requires otherwise.
Contact us
For access, correction, deletion, privacy choices, complaints or other personal-data enquiries:
Ling Flowery (Malaysia) Sdn. Bhd.
Company Registration No. 202601030143 (1692238-H)
Privacy: privacy@lingflowery.com
Business correspondence address: B-21-2, Jalan C180/1, Dataran C180, 43200 Cheras, Selangor, Malaysia.
This address is not a walk-in or customer collection point.