Privacy Policy

Last updated: March 2026

Grace & Petal (operated by Digitera LLC) is committed to protecting your personal information and your right to privacy. This policy explains what data we collect, how we use it, and your rights as a customer.

1. Information We Collect

When you visit our store or place an order, we may collect the following:

• Identity data: name, email address, phone number
• Address data: delivery address and billing address
• Transaction data: order details, purchase history (payment details are handled securely by Shopify — we do not store card numbers)
• Technical data: IP address, browser type, pages visited, time on site (collected via cookies and analytics tools)
• Communications: emails or messages you send us
• Marketing preferences: your consent to receive newsletters

2. How We Use Your Information

We use your data only for the following purposes:

• To process and fulfil your orders
• To send order confirmations and shipping notifications
• To respond to customer service enquiries
• To send marketing emails — only if you have explicitly opted in
• To improve our website, products, and customer experience
• To comply with legal and regulatory obligations
• To detect and prevent fraud

3. Cookies

We use cookies to improve your browsing experience, remember preferences, analyse site traffic, and support marketing activities. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

4. Third-Party Services

We share data only with trusted third-party services necessary to operate our business:

• Shopify Inc. — e-commerce platform, payment processing (PCI DSS compliant)
• Google Analytics — anonymous website traffic analysis
• Email marketing provider — for opted-in newsletters only
• Shipping carriers — delivery address for order fulfilment

All third-party processors are bound by data processing agreements and applicable privacy law.

5. Data Sharing

We do not sell, rent, or trade your personal data to any third party. Your information is only shared with service providers directly required to fulfil your order and operate our store.

6. Data Retention

We retain your personal data for as long as necessary to fulfil orders and comply with legal obligations. Transaction records are typically retained for up to 7 years in accordance with applicable accounting and tax law.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Objection: Object to processing of your data for marketing purposes
• Withdrawal of consent: Unsubscribe from marketing emails at any time via the link in any email

To exercise any of these rights, contact us at contact@graceandpetal.com. We will respond within 30 days.

8. Security

We use SSL/TLS encryption and Shopify's PCI DSS-compliant infrastructure to protect your personal and payment data. While no online system is 100% secure, we take all reasonable technical and organisational measures to safeguard your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact Us

For any privacy-related questions or to exercise your rights, contact us at: