Privacy policy

Last updated: 29 October 2026

This Privacy Policy explains how Hadiyya.az (the “Site”, “we”) collects, uses and protects your personal data. The Site operates in accordance with the Law of the Republic of Azerbaijan “On Personal Data”. By using the Site or placing an order you agree to this policy.

1. What we collect

Your photo – the photo you upload for your order and the bouquet image created from it.
Account and contact details – name, e-mail, phone number; for framed prints, city and address for delivery.
Order details – order number, format, size, price, status and dates.
Payment details – the payment result, transaction number and masked card number (e.g. 416973******1234). We never receive or store your full card number, CVV or card password.
Technical data – a hashed form of your IP address to prevent abuse, and your browser session.

Your password is stored only in hashed form; we cannot see it.

2. How we use it

to accept your order, create the bouquet, deliver the digital file and ship the framed print;
to take and verify payment;
to contact you about your order (phone, WhatsApp, e-mail);
to manage your account and show your order history;
to keep the Site secure and prevent fraud.

We do not use your photo or data for advertising, we do not sell them, and we do not publish them as examples without your permission.

3. Who we share data with

Only what is needed to provide the service is shared with:

Epoint (epoint.az) – payment processing. You enter card details directly on Epoint’s secure page.
Hosting provider – the Site and data are stored on a hosting server.
Delivery service – for framed prints, your name, phone and address may be given to the courier.
Public authorities – only when required by law.

4. Retention

We keep your data for as long as needed to fulfil the order, resolve complaints and meet legal record-keeping requirements. You can request deletion of your account or photos at any time (see section 6). Accounting and payment records may be kept for the period required by law.

5. Cookies

The Site uses only a strictly necessary session cookie (sign-in, order steps, security). We do not use advertising or tracking cookies.

6. Your rights

At any time you may ask to:

access the data we hold about you,
correct it (you can also edit it on your account page),
delete your photos, account and personal data,
withdraw your consent to processing.

7. Security

The Site is encrypted with HTTPS (SSL); uploaded photos and the database are kept in a protected folder that is not directly accessible from the browser; the admin panel is password-protected.

8. Children

You must be over 18 to place an order. If the photo includes children, by sending it you confirm that you are their parent or legal guardian and consent to its use.

9. Changes

We may update this policy. The new version is published on this page with its “Last updated” date.

10. Contact

For privacy questions and requests: Baku, Azerbaijan