Privacy Policy

Effective Date: 1 May 2025
Last Updated: 7 Oct 2025

At Petal & Still, protecting your peace of mind goes hand in hand with protecting your personal data.
Whether you’re browsing, placing an order, or simply taking a quiet moment on our site, we believe transparency is part of the trust we build together.

This Privacy Policy explains how we collect, use, and protect your information in line with U.S. privacy laws (including the California Consumer Privacy Act, “CCPA/CPRA”) and applicable international standards such as the UK and EU GDPR.

1. Who We Are

Petal & Still is a creative studio based in Hong Kong, offering pressed-flower artworks, DIY art kits, and other nature-inspired creations to customers across the United States, the United Kingdom, the European Union, and beyond.

Website: https://petalandstill.com
Email: [email protected]

📬 Our studio address is available upon legitimate business request.

We are responsible for how your personal data is collected and used when you visit or shop on our website.

2. Information We Collect

We collect personal data to help us process your orders, improve your experience, and communicate with you responsibly.

Information you provide:

  • Name
  • Email address
  • Shipping and billing address
  • Order and payment details
  • Messages or questions you send us

Information collected automatically:

  • IP address, browser type, and device information
  • Pages visited and time spent on the site
  • Cookies and analytics identifiers
  • Referral sources (e.g., social media or search engines)

These details help us understand how visitors use our site and ensure it runs smoothly.

3. How We Use Your Information

We use your information to:

  • Process and deliver your orders
  • Send confirmations, shipping updates, or support replies
  • Improve website performance and product experience
  • Send optional marketing emails (only if you subscribe)

We only collect what’s necessary and use it for the purposes you’d reasonably expect.

4. How We Share Information

We share data only with trusted service providers that help us operate our shop securely:

  • Payments: Stripe and PayPal process your payments safely. We never store full payment details.
  • Email: Brevo (formerly Sendinblue) sends order updates and optional newsletters.
  • Analytics: Google Analytics and Rank Math SEO help us understand site traffic. We do not use data for advertising or behavioral profiling.
  • Security: We may temporarily log IP addresses to prevent abuse or unauthorized access.

We do not sell or share personal data for advertising or marketing purposes.
All partners are carefully chosen for strong privacy and security standards.

5. Cookies & Tracking

We use cookies and similar technologies to:

  • Keep your shopping cart and checkout working properly
  • Analyze visitor behavior to improve the experience
  • Remember your preferences (with your consent)

You can manage cookies via:

  • Our cookie banner
  • Your browser settings

We store cookie preferences for up to 6 months.
We do not use cookies for targeted advertising, and we do not currently respond to “Do Not Track” signals due to a lack of consistent standards.

➡️ See our Cookie Policy for more details.

6. Data Retention

We keep your personal data only as long as necessary:

  • To fulfil and support your orders
  • To meet legal or tax requirements (typically up to 6 years)
  • Until you unsubscribe or request deletion (for marketing)

When we no longer need your data, we delete or anonymize it securely.

7. Your Privacy Rights

If you’re located in the United States (including California), you may:

  • Request access to the personal information we hold about you
  • Ask for correction or deletion of your data
  • Request details about how and why we collect information
  • Opt out of sale or sharing of data (not applicable here)
  • Be treated equally regardless of whether you exercise these rights

If you’re located in the UK or EU, you also have rights under GDPR, such as:

  • Access, correction, deletion, restriction, and data portability
  • The right to withdraw consent for marketing at any time

📩 To exercise your rights, contact us at [email protected].
We may need to verify your identity and will respond within 30–45 days.

8. Data Storage & Security

Depending on the tools we use, your data may be processed or stored in the U.S., U.K., E.U., or Hong Kong.
We use secure systems, encryption, and access controls to keep your information safe, and only team members or trusted partners who need it for your order can access it.

Your peace of mind matters — your data stays protected wherever it travels.

9. Children’s Privacy

Our site and products are not intended for anyone under 16.
We do not knowingly collect personal data from children.
If we learn that we have, we’ll delete it promptly.

10. Updates to This Policy

We may update this Privacy Policy as our practices evolve or as laws change.
If we do, we’ll revise the “Last Updated” date above.
We encourage you to review this page occasionally to stay informed.

11. Contact Us

If you have any questions or privacy concerns:

Petal & Still
📧 [email protected]
🌐 https://petalandstill.com

We aim to reply to privacy-related messages within 3–5 business days.
If you receive an email in error or wish to unsubscribe, you can do so via the link in our emails or by contacting us directly.

Thank you for trusting Petal & Still with your quiet moments online. 🌿