Security & data
What we do to keep your order book safe, and what we don’t claim. No badges we haven’t earned.
Hosted for you
GetFloristPOS runs on servers we operate. Nothing to install or patch in the shop.
Encrypted in transit
Every page and the app use HTTPS, so data between the shop and the server is encrypted.
Daily backups
Databases are backed up daily and kept off the main server, so a hardware failure doesn’t cost you your order book.
Roles and PINs
Staff see only what their role allows. Discounts, refunds and capacity overrides can require a manager.
Your data, exportable
Export products, customers, sales and stock to CSV at any time, including after you cancel (for 30 days).
Payments stay with your processor
Card numbers are handled by your payment processor’s terminal or checkout, not stored by the POS.
What we don’t claim
We don’t claim PCI DSS, SOC 2, ISO 27001 or any government certification for the POS. Card-data compliance sits with your payment processor. If your business needs a specific certification, ask before you sign up and we’ll answer plainly.
Privacy
How this website and the service handle personal data is in our privacy policy. To access, correct or delete your data, see data requests.
FAQ
Is my flower shop’s data secure in a hosted POS?
GetFloristPOS is hosted on servers we operate, with HTTPS encryption in transit, daily off-server backups, role-based staff access and full export at any time. Card details are handled by your own payment processor, not stored in the POS. We don’t claim certifications such as PCI DSS or SOC 2 for the POS itself.
Who owns the data?
You do. Customer lists, orders and stock are yours. We process them only to run the service and never sell or share them with other shops, networks or advertisers.
Where is data stored?
On our hosting provider’s servers. If your business needs data kept in a specific country, ask on the demo before you sign up.
Do you store credit card numbers?
No. Card payments run through your processor’s terminal or online checkout; the POS records that a payment happened, not the card number.
What happens if I cancel?
You can export everything before and for 30 days after cancelling. After that, your data is deleted from live systems, and from backups as they rotate.
How do I report a security problem?
Use the contact page and mark it as security, or use the privacy address via the Show email button. We acknowledge reports within two business days.
Can staff be stopped from deleting sales?
Yes. Roles control who can edit, refund or delete. Activity is logged per user.
Is two-factor login available?
Strong passwords and per-user logins are required; ask on the demo about two-factor options for owner accounts.
Book a demo and bring your security checklist. If we can’t answer something, we’ll say so.
14-day free trialNo contractNo per-order commission