Privacy Policy
Effective Date: March 1, 2026
1. INTRODUCTION
Pètal (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website, place an order, or interact with us.
This Policy is designed to comply with applicable privacy laws, including:
-
General Data Protection Regulation (EU) 2016/679 (“GDPR”)
-
California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”)
By using our website, you agree to the terms of this Privacy Policy.
Payments are processed via third-party providers. We do not store full payment details.
2. INFORMATION WE COLLECT
We collect information in several ways:
2.1 Information You Provide Directly
When you place an order or contact us, we may collect:
-
Full name
-
Email address
-
Phone number
-
Billing address
-
Delivery address
-
Recipient details (name, phone, address)
-
Order notes and special instructions
2.2 Payment Information
All payments are processed via secure third-party providers.
We do not store full credit/debit card numbers.
2.3 Automatically Collected Information
When you use our website, we automatically collect:
-
IP address
-
Browser type and version
-
Device type and operating system
-
Pages visited and time spent
-
Referring URLs
-
Interaction behavior
2.4 Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to enhance functionality and analyze usage.
3. TYPES OF COOKIES WE USE
-
Strictly Necessary Cookies – essential for website functionality
-
Performance & Analytics Cookies – to understand usage patterns
-
Marketing Cookies – to deliver relevant advertising
You can manage your preferences via our cookie consent banner.
4. PURPOSES OF PROCESSING
We process your personal data for the following purposes:
-
To process and fulfill orders
-
To coordinate delivery services
-
To communicate with you regarding your order
-
To provide customer support
-
To improve website performance and usability
-
To prevent fraud and ensure security
-
To comply with legal obligations
-
To send marketing communications (only with your consent)
5. LEGAL BASIS FOR PROCESSING (GDPR)
If you are located in the European Economic Area (EEA), we rely on the following legal bases:
-
Contractual necessity – to process and deliver your orders
-
Consent – for marketing communications and non-essential cookies
-
Legitimate interest – for analytics, fraud prevention, and service improvement
-
Legal obligation – to comply with applicable laws
6. DISCLOSURE OF PERSONAL INFORMATION
We may share your personal data with:
-
Payment processors
-
Delivery and logistics partners
-
IT service providers (hosting, analytics)
-
Marketing platforms (only where consent is given)
We do not sell your personal data.
7. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries outside your country of residence, including the United States.
Where required, we implement appropriate safeguards such as:
-
Standard Contractual Clauses (SCCs)
-
Secure data transfer mechanisms
8. DATA RETENTION
We retain personal data only for as long as necessary to:
-
Fulfill orders
-
Provide customer support
-
Comply with legal and tax obligations
-
Resolve disputes and enforce agreements
9. DATA SECURITY
We implement reasonable administrative, technical, and physical safeguards to protect your personal data.
However, no method of transmission over the Internet is 100% secure.
10. YOUR RIGHTS UNDER GDPR
If you are located in the EEA, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion of your data
-
Restrict processing
-
Object to processing
-
Request data portability
-
Withdraw consent at any time
To exercise your rights, contact: petalbouqet@gmail.com
11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
If you are a California resident, you have the right to:
11.1 Right to Know
Request details about:
-
Categories of personal data collected
-
Sources of data
-
Purpose of collection
-
Third parties with whom data is shared
11.2 Right to Delete
Request deletion of your personal data (subject to legal exceptions).
11.3 Right to Correct
Request correction of inaccurate information.
11.4 Right to Opt-Out
We do not sell or share personal data as defined by CCPA.
11.5 Right to Non-Discrimination
You will not be discriminated against for exercising your rights.
To submit a request: petalbouqet@gmail.com
12. SENSITIVE PERSONAL INFORMATION
We do not intentionally collect or use sensitive personal information beyond what is necessary to provide services.
13. CHILDREN’S PRIVACY
Our services are not directed to individuals under the age of 13.
We do not knowingly collect personal data from children.
14. THIRD-PARTY LINKS
Our website may contain links to third-party websites.
We are not responsible for their privacy practices.
15. COOKIE CONSENT
Upon visiting our website, you will be presented with a cookie banner allowing you to:
-
Accept all cookies
-
Reject non-essential cookies
-
Customize preferences
Your choices will be stored and can be updated at any time.
16. DO NOT TRACK SIGNALS
We currently do not respond to “Do Not Track” signals due to lack of consistent industry standards.
17. CHANGES TO THIS POLICY
We reserve the right to update this Privacy Policy at any time.
Changes will be posted on this page with an updated effective date.
18. CONTACT INFORMATION
If you have any questions or wish to exercise your rights, please contact:
57 Via Amistosa, F
Rancho Santa Margarita, California 92688
United States
Phone: 818 588 7873
Email: petalbouqet@gmail.com
By using our website, you acknowledge that you have read and understood this Privacy Policy.