Privacy Policy

• Information you give us: your name, email address, shipping and billing address, phone number, order details, account login, and any messages or marketing preferences you share with us.
• Information collected automatically: device and browser type, IP address, pages viewed, referring links, and approximate location, gathered through cookies and similar technologies.
• Payment information: card details are entered into and processed by Shopify Payments. We do not see or store full payment card numbers on our own systems.

• To process, fulfill, and ship your orders, and to take payment through Shopify.
• To provide customer service and respond to your questions.
• To send marketing and email communications where you have opted in, and transactional messages about your orders.
• To operate, secure, and improve our website, and to prevent fraud and abuse.
• To meet our legal, tax, and accounting obligations.

• Our online store, checkout, and payments run on Shopify. To provide these services, Shopify stores and processes customer information — including contact, order, and payment details — and also offers marketing tools (such as email and abandoned-cart features) that we may use to communicate with you.
• Depending on the activity, Shopify acts as our service provider/processor or, for some purposes, as an independent controller of your information. Shopify’s own handling of personal information is governed by the Shopify Privacy Policy, which we encourage you to review.

• We use essential cookies that make the site and checkout work, and, with your consent where required, analytics and marketing cookies that help us understand usage and measure campaigns.
• You can manage cookies through your browser settings. We honor recognized opt-out signals such as Global Privacy Control (GPC) where applicable.

• With service providers who work on our behalf — Shopify (store platform, payments, and marketing tools), shipping carriers, email and analytics providers — only as needed to provide their services.
• For legal and safety reasons, to comply with the law, enforce our terms, or protect rights and safety.
• In connection with a business transfer, such as a merger or sale of assets.
• We do not sell your personal information for money. Some uses of advertising and analytics cookies may be considered “selling” or “sharing” for cross-context behavioral advertising under certain state laws; you can opt out using the “Your privacy choices” link in our footer.

If you opt in to marketing emails or texts, you can unsubscribe at any time using the link in each message or by contacting us. We will still send transactional messages necessary to fulfill your orders.

We keep order and transaction records for as long as needed to provide our services and to satisfy tax and legal obligations (generally several years). Account information is kept while your account is active, and marketing data until you opt out.

• Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive information; and to not be discriminated against for exercising these rights.
• California residents have these rights under the CCPA/CPRA, and residents of states such as Virginia, Colorado, and Connecticut have comparable rights. If you are in the EU or UK, you have rights under the GDPR, and we process your data on lawful bases including contract, consent, and legitimate interests.
• To exercise any right, email support@petalworkscoffee.com or use the “Your privacy choices” link in our footer. We will verify and respond within the time the law requires.

Payments are handled in a PCI-DSS-compliant environment through Shopify, and information is encrypted in transit. We restrict access to personal information, but no method of transmission or storage is completely secure.

We operate from the United States. If you contact us from outside the U.S., your information may be transferred to and processed in the U.S. and other countries, with appropriate safeguards where required.

Our site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us and we will delete it.

We may update this policy from time to time. We will post the revised version here with a new “last updated” date, and, where appropriate, notify you of material changes.

Questions about privacy? Email support@petalworkscoffee.com or write to Petalworks Coffee, Mansfield, Texas, United States.