Summary
This website keeps a few small settings in your browser so it remembers how you like it to look and which country’s prices to show. These are stored in your browser’s local storage, not as cookies, and they are never sent to us. Our forms are protected by a bot check that may set one strictly necessary token. No analytics or marketing tags load before you give consent, and at the time of writing none are installed at all.
This policy is published by GetFloristPOS (the legal entity named on your invoice). It applies to this marketing website. The hosted point-of-sale application you log into as a customer uses its own session cookies to keep you signed in; those are strictly necessary for the service to work and are described at the end of this page.
What cookies and local storage are
A cookie is a small text file a website asks your browser to keep, which is sent back to the website with each request. Local storage is a similar feature that lets a page save small pieces of information in your browser, but the information stays on your device and is not sent with requests. Both can be “strictly necessary” (needed for something you asked for), “functional” (remembering your preferences), “analytics” (measuring how a site is used) or “marketing” (tracking you across sites for advertising).
Privacy laws, including the ePrivacy rules many visitors expect, the UAE’s Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and US state privacy laws such as the CCPA/CPRA, treat these technologies in similar ways: strictly necessary and simple preference storage can be used without consent, and anything that measures or tracks you should wait until you agree. That is the rule we follow in every market, including Pakistan, where no comprehensive data protection law is in force yet.
What we store
| Name | Purpose | Type | Duration | Set before consent? |
|---|---|---|---|---|
| gfp-theme | Remembers whether you chose light or dark mode | Local storage, functional (preference) | Until you clear it | Yes, only when you change the setting |
| gfp-palette | Remembers the color palette you picked | Local storage, functional (preference) | Until you clear it | Yes, only when you change the setting |
| gfp-country | Remembers your country (USA, UAE or Pakistan) so the right prices, currency and tax notes show | Local storage, functional (preference) | Until you clear it | Yes, only when you choose a country |
| gfp-consent | Records your choice on the consent banner so we do not ask on every page | Local storage, strictly necessary | Until you clear it or change your choice | Yes, when you make a choice |
| gfp-a11y | Remembers accessibility settings such as text size, contrast and reduced motion | Local storage, functional (preference) | Until you clear it | Yes, only when you change a setting |
| gfp-recent-searches | Keeps your last few help-center and site searches on your device for quick access | Local storage, functional (preference) | Until you clear it | Yes, only when you search |
| Cloudflare Turnstile token (for example cf_clearance or an in-page token) | Checks that a form is being sent by a person, not a spam bot | Cookie or token, strictly necessary (security) | Session or up to the provider’s short expiry | Yes, on pages with a form |
| _ga | Google Analytics 4: distinguishes visitors | Cookie, analytics | Up to 2 years | No. Only after you select “Accept analytics”. Not currently loaded |
| ga<ID> | Google Analytics 4: keeps session state | Cookie, analytics | Up to 2 years | No. Only after you select “Accept analytics”. Not currently loaded |
The local storage items contain only the setting itself, such as “dark” or “AE”. They do not contain your name, email or any identifier, and the site does not read them for tracking.
Strictly necessary items
The consent record and the Turnstile check are strictly necessary. Without the consent record, we could not remember that you said no. Without Turnstile, our forms would fill with automated spam and real enquiries from florists would be lost. Turnstile is provided by Cloudflare, which processes technical signals from your browser (such as IP address and browser characteristics) to make its decision. It is designed to avoid tracking you across sites, and we use it for security only.
Preference items
The theme, palette, country, accessibility and recent-search items exist only because you used a feature that asked for them. Because they stay on your device and are used only to give you the setting you chose, they do not require consent under the laws above. You can delete them at any time, and the site will simply return to its defaults.
Analytics and marketing
At the time of writing, this website does not load any analytics, advertising or social media tracking tags.
If we add Google Analytics 4 in future, it will load only after you select “Accept analytics” on the consent banner. Until then, no request is made to Google and no analytics cookies are set. If you accept, GA4 will set the _ga and _ga_<ID> cookies listed above to count visits and see which pages are useful. We would configure it to avoid advertising features, and we would update this page and the date at the top before switching it on. If you decline, or never answer, analytics stays off.
We do not use marketing pixels, retargeting cookies or cross-site advertising trackers. We do not sell or share personal data for cross-context behavioral advertising.
Your choices
Changing your consent
You can change your consent choice at any time using the cookie or privacy settings link in the site footer, which reopens the consent banner. Withdrawing consent stops analytics from loading on future pages. You may also want to delete any analytics cookies already set, using your browser settings.
Clearing local storage
Clearing “site data”, “cookies and other site data” or “local storage” for this site in your browser removes every gfp- item. Each browser places this setting a little differently, usually under Privacy or Site settings.
Browser and device controls
You can block cookies in your browser. If you block strictly necessary items, forms may refuse to send because the bot check cannot complete. If that happens, use the phone or WhatsApp numbers on the contact page instead.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics and of any sale or sharing of personal data, without you needing to touch the banner.
Cookies in the point-of-sale application
When you log in to your GetFloristPOS account, the application sets session and security cookies (for example a login session cookie and a cross-site request forgery token) so it knows you are signed in and that each action really came from you. These are strictly necessary, expire when you log out or after a period of inactivity, and are not used for analytics or advertising. Your shop’s online store may set a cart or session cookie so shoppers can place orders; as the florist, you are responsible for any additional tags you add to your own store and for the consent notice your customers see.
Data we receive from these items
Local storage items are not sent to us. Turnstile data goes to Cloudflare for the security check. If analytics is ever enabled and you accept it, aggregated usage data would be processed by Google on our behalf. How we handle any personal data is explained in our Privacy Policy.
Changes to this policy
When we add, remove or change anything stored in your browser, we will update the table and the date at the top of this page. If we introduce a new analytics or marketing tool, it will wait for your consent.
Contact
Questions about this policy: use the contact form at /contact, or the privacy address shown via the Show email button on /contact. This page explains our practices; it is not legal advice.
Contact about this policy
Use the contact form, or the privacy address: