Privacy Policy – Petals of Elegance™
Petals of Elegance™ operates from Finland, European Union. Our digital products and services are available to customers worldwide.
This Privacy Policy explains how personal data is handled.
Last updated: [May 2026]
1. Introduction
Welcome to Petals of Elegance™ ("we," "our," or "us"). Petals of Elegance™ is an online brand based in Finland, European Union, offering digital products and related content to an international audience. We are committed to protecting your privacy and handling your personal data in an open and transparent manner.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you:
Visit our website;
Purchase or download our digital products;
Subscribe to our newsletter or marketing communications;
Contact us;
Interact with our content, services, or social media channels.
This Privacy Policy is designed to comply with applicable privacy and data protection laws, including:
The European Union General Data Protection Regulation (GDPR);
Finland’s data protection legislation;
Applicable consumer protection and e-commerce regulations;
Other applicable international privacy and consumer protection laws where relevant.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller Information
Data Controller: Petals of Elegance™
Location: Finland, European Union
Email: petalsofelegance@protonmail.com
Website: www.petalsofelegance.com
If you have questions about this Privacy Policy or the way your personal data is handled, you may contact us using the details above.
3. What Personal Data We Collect
We may collect and process the following categories of personal data.
3.1 Information You Provide Directly
You may provide us with personal data when you:
Make a purchase;
Create an account;
Subscribe to emails or newsletters;
Contact customer support;
Fill out forms;
Participate in surveys, promotions, or questionnaires.
This information may include:
Full name;
Email address;
Billing address;
Country or region;
Payment-related information;
Account login details;
Messages or communications you send to us.
3.2 Payment Information
Payments made through our website are processed using secure third-party payment processors integrated with Squarespace. We do not directly collect or store full credit card numbers, banking information, or other sensitive payment credentials on our own servers.
Depending on your location and the payment method selected, payment processing may be handled by Squarespace Payments and/or third-party payment providers such as Stripe, PayPal, or other payment partners supported by Squarespace.
These payment providers may collect and process payment-related personal data in accordance with their own privacy policies and security standards.
We may receive limited transaction-related information, including:
Payment confirmation;
Transaction ID;
Purchase amount;
Purchase date;
Billing name;
Partial billing details;
Payment status.
This information is used for purposes such as:
Order fulfillment;
Customer support;
Accounting and tax compliance;
Fraud prevention;
Refund processing;
Business record keeping.
All payment transactions are processed using industry-standard security measures and encryption technologies.
3.3 Automatically Collected Information
Our website is hosted and operated using Squarespace. As part of providing website functionality, Squarespace and integrated third-party services may automatically collect certain technical and usage-related information when you access or use our website.
When you visit our website, certain technical information may be collected automatically.
This may include:
IP address;
Browser type and version;
Device type;
Operating system;
Referring URLs;
Pages visited;
Time spent on pages;
Date and time of access;
Language settings;
Cookies and similar technologies.
3.4 Marketing and Analytics Data
We may collect information regarding:
Newsletter engagement;
Email open rates;
Link clicks;
Marketing preferences;
Website analytics;
Advertising interactions.
4. How We Use Personal Data
We process personal data only where we have a lawful basis under the GDPR.
We may use personal data for the following purposes:
4.1 To Provide Our Services
Including:
Processing purchases;
Delivering digital products;
Managing customer accounts;
Providing customer support;
Maintaining website functionality.
Legal basis: Contract performance.
4.2 To Manage Payments and Prevent Fraud
Including:
Verifying transactions;
Preventing fraudulent activity;
Securing our systems and services.
Legal basis: Legitimate interests and legal obligations.
4.3 To Communicate With You
Including:
Responding to inquiries;
Sending order confirmations;
Providing updates regarding products or services;
Sending administrative notices.
Legal basis: Contract performance and legitimate interests.
4.4 Marketing and Promotional Communications
We may use Substack and related email communication tools to manage newsletters, email subscriptions, and marketing communications.
If you subscribe to our newsletter, your information may be processed through Substack’s platform and infrastructure in accordance with Substack’s applicable privacy and data processing practices.
We may send newsletters, promotional emails, editorial content, product updates, and other communications related to Petals of Elegance™
We may send newsletters, promotional emails, or updates about products, services, or content.
Where required by law, we will obtain your consent before sending marketing communications.
You may unsubscribe at any time by:
Clicking the unsubscribe link in emails; or
Contacting us directly.
Legal basis: Consent and/or legitimate interests.
4.5 Analytics and Website Improvement
We use analytics tools and performance data to:
Understand website usage;
Improve user experience;
Optimize content and marketing;
Monitor website performance and security.
Legal basis: Consent (where required) and legitimate interests.
4.6 Compliance With Legal Obligations
We may process personal data when necessary to:
Comply with applicable laws;
Respond to lawful requests;
Maintain accounting and tax records;
Enforce legal rights.
Legal basis: Legal obligations.
5. Legal Bases for Processing Under GDPR
Under the GDPR, we rely on one or more of the following legal bases:
Contract: Processing necessary to fulfill purchases or provide services;
Consent: For marketing communications, certain cookies, and optional processing activities;
Legitimate Interests: For website administration, analytics, fraud prevention, and business operations;
Legal Obligation: To comply with tax, accounting, consumer, or regulatory requirements.
Where processing is based on consent, you may withdraw consent at any time.
6. Cookies and Tracking Technologies
We may use cookies, pixels, tags, scripts, and similar technologies.
6.1 What Cookies Are
Cookies are small text files stored on your device when you visit a website.
They help websites function properly and provide information about website usage.
6.2 Types of Cookies We May Use
Because our website is hosted on Squarespace, Squarespace may place certain cookies or similar technologies necessary for website operation, analytics, security, and performance. Additional third-party integrations connected to our website may also use cookies or tracking technologies.
Essential Cookies
Necessary for website functionality, security, checkout, and account access.
Analytics Cookies
Used to understand website usage and improve performance.
Marketing Cookies
Used to personalize advertising and measure campaign effectiveness.
Preference Cookies
Used to remember user preferences and settings.
6.3 Cookie Consent
Where legally required, we will request your consent before placing non-essential cookies on your device.
You may manage cookie preferences through:
Our cookie banner or settings tool;
Your browser settings.
Please note that disabling certain cookies may affect website functionality.
7. Sharing of Personal Data
We do not sell personal data.
However, we may share personal data with trusted third parties where necessary for business operations.
7.1 Service Providers
We may use third-party service providers and platforms to operate Petals of Elegance™, including Squarespace for website hosting, infrastructure, and related services.
We may share information with providers that assist with:
Payment processing;
Website hosting;
Email delivery;
Analytics;
Cloud storage;
Customer support;
Marketing services;
Security and fraud prevention.
These providers are contractually required to protect personal data and process it only according to our instructions.
7.2 Legal Requirements
We may disclose personal data if required to:
Comply with laws or regulations;
Respond to legal requests;
Protect our legal rights;
Prevent fraud or security threats.
7.3 Business Transfers
If Petals of Elegance™ undergoes a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction.
8. International Data Transfers
Because Petals of Elegance™ serves an international audience and uses internationally operating service providers, personal data may be transferred to and processed in countries outside your country of residence, including outside the European Economic Area (EEA).
Because some service providers may operate outside the European Economic Area (EEA), personal data may be transferred internationally.
When personal data is transferred outside the EEA, we take steps to ensure appropriate safeguards are in place, including:
European Commission adequacy decisions;
Standard Contractual Clauses (SCCs);
Other legally approved safeguards.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Retention periods may depend on:
Legal obligations;
Accounting and tax requirements;
Dispute resolution needs;
Security and fraud prevention;
Contractual obligations.
When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of.
10. Your Rights Under GDPR
If you are located in the European Economic Area, you may have the following rights regarding your personal data.
10.1 Right of Access
You may request access to the personal data we hold about you.
10.2 Right to Rectification
You may request correction of inaccurate or incomplete data.
10.3 Right to Erasure
You may request deletion of your personal data in certain circumstances.
10.4 Right to Restrict Processing
You may request limitation of processing under certain conditions.
10.5 Right to Data Portability
You may request a copy of your data in a structured, commonly used, machine-readable format.
10.6 Right to Object
You may object to certain processing activities, including direct marketing.
10.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.
10.8 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority.
11. Security Measures
We implement reasonable technical and organizational measures to protect personal data against:
Unauthorized access;
Loss;
Misuse;
Alteration;
Disclosure;
Destruction.
Security measures may include:
SSL/TLS encryption;
Access controls;
Secure hosting environments;
Password protection;
Monitoring and security tools.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Third-Party Services and Links
Our website is hosted on Squarespace. Squarespace may process certain personal data on our behalf to provide website hosting, analytics, security, content delivery, e-commerce functionality, and related technical services.
You can learn more about Squarespace’s privacy practices through Squarespace’s own privacy documentation.
Our website may also contain links to third-party websites, platforms, or services.
Our website may contain links to third-party websites, platforms, or services.
We are not responsible for the privacy practices, policies, or content of third-party services.
We encourage users to review the privacy policies of third parties before providing personal information.
13. Email Marketing
Petals of Elegance™ uses Substack (and related email communication tools) for newsletter distribution, subscriber management, and email communications.
When you subscribe to our newsletter or email communications, personal data such as your email address, subscription preferences, and engagement information may be processed through Substack.
Substack may collect certain analytics and technical information related to email interactions, including:
Email opens;
Link clicks;
Subscription status;
Device or browser information;
Approximate location information.
This information may be used to:
Deliver newsletters;
Improve email performance;
Understand audience engagement;
Maintain subscriber lists;
Prevent spam, abuse, or unauthorized activity.
By subscribing to our newsletter, you acknowledge that your information may be transferred to and processed by Substack and its service providers.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in emails or by contacting us directly.
If you subscribe to our newsletter or marketing communications, we may send emails regarding:
Product launches;
Updates;
Promotions;
Educational or editorial content;
News related to Petals of Elegance™
You may unsubscribe at any time using the unsubscribe link included in emails.
We may use email analytics tools to track engagement such as open rates and clicks.
14. Digital Products and Downloads
Petals of Elegance™ sells digital products.
To provide digital downloads and related services, we may process:
Purchase records;
Download access information;
Customer account details;
Transaction metadata.
We may also maintain records necessary for:
Fraud prevention;
Licensing management;
Customer support;
Legal compliance.
15. Children’s Privacy
Our website and services are not directed to children under the age required by applicable law to provide valid consent.
We do not knowingly collect personal data from children without appropriate legal authorization.
If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
16. Automated Decision-Making
We do not generally engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.
If this changes, we will update this Privacy Policy accordingly and provide any legally required information.
17. Do Not Track Signals
Some browsers may offer “Do Not Track” settings.
Because there is no universally accepted standard for responding to such signals, our website may not respond to Do Not Track requests.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Legal or regulatory changes;
Changes in our services;
Operational changes;
Security or business developments.
Updated versions will be posted on this page with a revised “Last updated” date.
Where required by law, we may provide additional notice regarding significant changes.
19. Contact Information
If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, you may contact:
Petals of Elegance™
Location: Finland, European Union
Email: petalsofelegance@protonmail.com
Website: www.petalsofelegance.com
20. Third-Party Platforms and Services
Petals of Elegance™ may use third-party platforms, software, integrations, and service providers to operate the business, deliver digital products, process payments, communicate with users, and improve website functionality.
These may include, where applicable:
Squarespace;
Payment processors;
Email marketing platforms such as Substack;
Analytics providers;
Advertising and social media platforms;
Cloud storage or business tools;
Customer support systems.
These third parties may process personal data according to their own privacy policies and contractual obligations.
Users are encouraged to review the privacy policies of relevant third-party services before using the website or services.
This includes reviewing Substack’s privacy practices if you subscribe to our newsletter or email communications.
21. Users From Different Jurisdictions
Because Petals of Elegance™ serves an international audience, users may have privacy rights under the laws of their local jurisdiction.
Depending on your location, you may have rights related to:
Accessing your personal data;
Requesting correction or deletion;
Restricting certain processing activities;
Opting out of marketing communications;
Requesting information regarding data sharing;
Filing complaints with local supervisory authorities.
Where required by applicable law, we will honor valid privacy rights requests in accordance with relevant legal requirements.
22. Affiliate Marketing and Sponsored Content
Petals of Elegance™ may participate in affiliate marketing programs.
This means that certain links on our website, newsletters, social media content, or digital products may be affiliate links. If you click an affiliate link and make a purchase, we may receive a commission or other compensation at no additional cost to you.
Affiliate partnerships may involve third-party companies, brands, retailers, or platforms.
These third parties may use cookies, tracking technologies, or similar tools to:
Track referrals;
Attribute commissions;
Measure campaign performance;
Monitor affiliate link activity.
Information collected through affiliate tracking technologies may include:
IP address;
Browser or device information;
Referral URLs;
Purchase activity;
Cookie identifiers;
Interaction with affiliate links.
Affiliate partners and networks may process personal data according to their own privacy policies and practices.
We encourage users to review the privacy policies of any third-party websites or services accessed through affiliate links.
Petals of Elegance™ only promotes products, services, or brands that we believe may be relevant to our audience. However, users are responsible for independently evaluating third-party products or services before making purchasing decisions.