Privacy Policy

1. Information We Collect

When you use Lotus Blessing, we may collect the following categories of information:

a. Information You Provide to Us

Order Information: the recipient's name, the type of blessing service selected, and any personalised messages or details you provide.
Communications: when you contact us via email or the enquiry form, we collect your name, email address, and the contents of your message.

b. Information Collected Automatically

Device & Usage Data: we may collect your IP address, browser type, operating system, referring URLs, pages visited, and the date/time of your visit.
Cookies & Similar Technologies: we use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy below for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfil your blessing orders (all of which are virtual/digital services)
To generate and deliver digital certificates and blessing confirmations
To send you service-related communications (order confirmations, certificate notifications)
To improve our website, services, and user experience
To detect, prevent, and address technical issues or fraudulent activity
To comply with legal obligations

Enquiries submitted through this website are recorded on the Lotus Blessing customer platform so that our team can respond to you. Platform-side processing is governed by the same purpose limitation described here.

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

Service Providers: we engage trusted third-party service providers who assist us in operating our website and processing payments (e.g., PayPal). These providers are contractually bound to protect your data.
Legal Compliance: we may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
Business Transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We use PayPal as our payment processor. When you make a payment, your payment details are handled directly by PayPal in accordance with their privacy policy. We do not store your credit card or banking details on our servers.

4. Data Retention

We retain your personal information for as long as needed to provide you with our services. Specifically:

Order data: retained for legal and tax purposes as required by applicable law (typically 6-7 years).
Communication data: retained for the duration of our customer relationship.

When data is no longer needed, we securely delete or anonymise it.

5. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

GDPR Rights (EU/EEA)

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

CCPA Rights (California)

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising your rights
Right to request disclosure of data collection and sharing practices

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by applicable law.

6. Cookie Policy

Lotus Blessing uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic.

Types of Cookies We Use

Category	Purpose	Duration
Essential	Session management and consent state. Required for the website to function.	Session / Persistent
Functional	Remember your preferences, language settings, and UI customisations.	1 year
Analytics	Help us understand how visitors interact with our website and how we can improve.	Up to 2 years

When you first visit our website, you will see a cookie consent banner where you can choose to accept or decline non-essential cookies. You can also manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

Encryption in transit: all data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
Least-privilege platform access: this website holds no AI or payment credentials; platform capabilities are accessed through short-lived, site-bound credentials issued by the platform.
Regular security reviews: we periodically review our security practices to maintain a high level of protection.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: [email protected]
Response Time: we will respond to your inquiry within 30 days.

For GDPR-related matters, you also have the right to lodge a complaint with your local data protection authority.

Our Commitment to Your Privacy