PRIVACY POLICY

At Petalhue, we collect only what’s needed—and never share it beyond what’s strictly necessary to deliver, secure, and improve your experience.

How We Collect Data

We collect personal data you provide directly—such as when you create an account, make a purchase, contact customer support, or complete a survey. This includes billing and shipping details, payment information, and authentication data. We also collect technical data automatically when you use our services: device type, IP address, operating system, browser type, usage patterns, diagnostic logs, and approximate location (derived from GPS, IP, or other signals).

Why We Process It

We process personal data solely to fulfill the purposes for which it was collected: delivering orders, maintaining accounts, responding to inquiries, improving service reliability, analyzing product usage, and supporting fraud detection and operational integrity. Where required by law—including for residents of the European Economic Area (EEA)—our processing under Article 6(1) of the General Data Protection Regulation (EU) is grounded in lawful bases such as consent, contract performance, or legal obligation.

Who Receives It & Why

We disclose personal data only to strategic partners who assist us in providing, operating, or enhancing our products, services, and advertising. These partners do not receive your data for their own marketing purposes unless you have given prior express consent. We may also share data with affiliated companies and, in the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business—including in connection with bankruptcy or similar proceedings—with the relevant third party.

How Long We Keep It

We retain personal data only as long as it is necessary to fulfill the purposes outlined in this Privacy Statement. A longer retention period is required or permitted by law, we will retain it only to the extent and for the duration mandated by applicable legal requirements.

How We Protect It

We apply reasonable technical, administrative, and physical security measures to safeguard your personal data against unauthorized access, misuse, alteration, or destruction. These include encryption in transit, access controls, regular system monitoring, and staff protocols designed to preserve confidentiality and integrity.

What You Control

You decide whether to provide personal data, and you control how it’s used for marketing: prior express consent is required before we send promotional messages or share your data with third parties for their marketing. You may withdraw your consent by contacting us. You also hold the right to access, correct, delete, restrict, or object to further processing of your personal data; to receive your personal data in a structured and standard format; and to lodge a complaint with the competent data protection authority. To protect privacy and security, we may request data to confirm your identity before fulfilling these requests. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal data.

We do not knowingly collect personal data from children under 16—or the equivalent minimum age depending on the jurisdiction. If we learn that we have collected the personal data of a child under 16, we will take steps to delete the data as soon as possible.

When Laws Require Disclosure

We may disclose personal data by law, legal process, litigation, and/or requests from public and governmental authorities—including those outside your country of residence. Disclosure may also occur where necessary for national security, law enforcement, or other issues of public importance.

What Happens If We Change This

We may update this Privacy Statement to reflect changes in law, technology, or business practices. Continued use of our services after the effective date of a revised statement constitutes acceptance of the updated terms. If you disagree with the changes, please discontinue use and contact us to close your account.

To exercise any right described here—or ask how your data is handled—email cs@petalhue.com. We’ll respond within 30 days.