Magnolia (flowers-magnolia.com) is a local flower boutique in Netanya, Israel. We respect your privacy and handle personal information in accordance with the Israeli Protection of Privacy Law, 1981, and applicable regulations.

This policy explains what data we collect when you visit our website, create an account, or place an order, and how we use and protect it.

1. Who is responsible for your data

The data controller is Magnolia, Smilanski St 10, Netanya, Israel.
Contact: olga@flowers-magnolia.com · WhatsApp +972-52-538-8181

2. Information we collect

• Order & delivery details: name, phone number, email, delivery and billing address, recipient details, delivery date and instructions, order history.
• Account data: login email, password (stored encrypted), wishlist, preferences.
• Payment data: we do not store full card numbers. Payments are processed by secure payment providers; we receive confirmation and limited transaction details.
• Communications: messages you send us by email, WhatsApp, or contact forms.
• Technical data: IP address, browser type, device, pages visited, cookies (see below).
• Marketing: if you subscribe to our newsletter, we store your email and consent.

3. How we use your information

• Process and deliver your orders (flowers, plants, gift sets) across Israel.
• Contact you or the recipient about delivery status, changes, or issues.
• Provide customer support and handle returns or complaints.
• Improve our website, products, and service.
• Send order confirmations and, with your consent, promotional offers.
• Comply with legal, tax, and accounting obligations in Israel.
• Prevent fraud and protect the security of our systems.

4. Sharing with third parties

We do not sell your personal data. We may share information only when necessary:

• Couriers and delivery partners — to deliver your order to the recipient.
• Payment processors — to complete secure card payments.
• Hosting & IT providers — to operate the website and store data securely.
• Analytics & marketing tools — such as Google Analytics or similar services, subject to their policies and your cookie choices.
• Legal authorities — when required by Israeli law or a valid court order.

All service providers are required to handle data only for the purposes we specify and to protect it appropriately.

5. Orders from abroad

If you order from outside Israel for delivery within Israel, we process your data to fulfil the order. By placing an order, you consent to this processing and transfer of data to Israel for delivery purposes.

6. Cookies

Our website uses cookies and similar technologies for essential functions (shopping cart, login, language), analytics, and optional marketing. You can manage cookie preferences through the notice shown on the site or your browser settings. Disabling some cookies may limit site functionality.

7. Data retention

We keep personal data only as long as needed for the purposes above: order records for accounting and legal requirements (typically up to 7 years where required by law), account data while your account is active, and marketing data until you unsubscribe or withdraw consent.

8. Security

We use reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including HTTPS encryption, access controls, and secure hosting. No online system is 100% secure; please use a strong password and keep your login details confidential.

9. Your rights

Under Israeli privacy law, you may:

• Request access to personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request deletion of data where legally permitted (some order records must be retained for tax purposes).
• Withdraw consent to marketing at any time (unsubscribe link or email us).
• Submit a complaint to the Israeli Privacy Protection Authority if you believe your rights have been violated.

To exercise your rights, contact olga@flowers-magnolia.com. We will respond within a reasonable time as required by law.

EU/EEA residents ordering for delivery in Israel may also have rights under GDPR regarding data you provide; contact us for details.

10. Children

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update. Continued use of the site after changes constitutes acceptance of the updated policy.

Last updated: March 2026