Privacy policy

Privacy Policy

Last updated: 4 August 2026

Maryia Asenenka, trading as Petal Ritual (“Petal Ritual”, “we”, “us” or “our”), operates this online store and website. Our store is powered by Shopify, which enables us to provide our website, products and related services to you.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, place an order, contact us or otherwise interact with our services.

For the purposes of UK data protection law, Maryia Asenenka, trading as Petal Ritual, is the data controller of your personal information.

Personal information we collect

The personal information we collect depends on how you interact with our website and may include:

Contact information, including your name, email address, telephone number, billing address and delivery address.
Order information, including the products you order, your selected colours, names, wording, personalisation requests, design preferences and any other information you provide for a made-to-order product.
Payment and transaction information, including the payment method used, payment status, order value and transaction details. Payments are processed securely by Shopify and the relevant payment provider. Petal Ritual does not receive or store your complete payment-card details.
Account information, if customer accounts are available and you choose to create one, including your login details, preferences and account settings.
Communications, including information you provide when contacting us with an enquiry, order request, complaint or customer-support issue.
Device and technical information, including your IP address, browser type, device type, network connection and other online identifiers.
Website usage information, including how and when you browse our website, the pages and products you view, items added to your basket and your interactions with our website and communications.
Marketing preferences, including whether you have agreed to receive marketing communications and your cookie choices.

Please do not provide sensitive personal information unless it is necessary for us to respond to a specific request.

How we collect personal information

We may collect personal information:

Directly from you when you place an order, contact us, subscribe to marketing or otherwise provide information to us.
Automatically when you visit or interact with our website, including through cookies and similar technologies.
From Shopify and the service providers that help us operate our website, process payments, fulfil orders and provide customer support.
From delivery companies, payment providers or other third parties where necessary to investigate an order, payment or delivery issue.
From advertising or social-media platforms where you have interacted with our content or advertising and the relevant permissions have been provided.

How we use personal information

We may use personal information to:

Process payments and fulfil made-to-order purchases.
Create products according to your selected options and specifications.
Confirm orders and provide updates about production and delivery.
Arrange shipping and delivery.
Respond to questions, complaints and customer-support requests.
Resolve payment, order or delivery problems.
Manage customer accounts where this feature is available.
Operate, maintain and improve our website and services.
Understand how customers use our website.
Protect our website, customers and business against fraud, misuse and security threats.
Maintain appropriate accounting, tax and business records.
Comply with legal obligations and respond to lawful requests.
Send marketing communications where you have agreed to receive them.
Measure or personalise advertising where the necessary cookie consent has been provided.

Our lawful bases for processing

Under UK data protection law, we rely on the following lawful bases:

Contract: where processing is necessary to process your payment, create and fulfil your order, arrange delivery or provide requested customer support.
Legal obligation: where we need to retain records, meet tax and accounting requirements, respond to lawful requests or comply with applicable laws.
Legitimate interests: where processing is necessary to operate and secure our website, prevent fraud, understand and improve our services or manage our business. We consider and balance these interests against your privacy rights.
Consent: where required for marketing emails, non-essential cookies, analytics or personalised advertising. You can withdraw your consent at any time.

Marketing and advertising

If you choose to subscribe to our marketing emails, we may use your name, email address and interactions with our communications to send you news, product updates and offers.

You can unsubscribe at any time by selecting the unsubscribe link in any marketing email or by contacting hello@petalritual.co.uk. Unsubscribing from marketing will not prevent us from sending service messages relating to an order you have placed.

With your consent, we may use non-essential cookies and similar technologies to understand how visitors use our website and to measure or personalise advertising. Depending on the services enabled on our website, this may involve Shopify, Google or Meta.

You can accept, reject or adjust non-essential cookies using the cookie settings available on our website. You may withdraw your consent at any time. Withdrawing consent does not affect processing that took place before it was withdrawn.

Cookies and similar technologies

Our website uses cookies and similar technologies. Some cookies are strictly necessary for the website, checkout and security features to operate. Other cookies may be used for preferences, analytics, marketing or advertising.

Where required by law, non-essential cookies will not be placed without your consent. More information about the cookies used by our store and how to manage them is available through our cookie banner or cookie settings.

You may also change cookie controls through your browser. Blocking certain cookies may affect how some parts of the website function.

How we share personal information

We may share personal information where reasonably necessary with:

Shopify, which hosts and supports our online store.
Payment providers that securely process transactions.
Delivery companies and postal services that fulfil orders.
Technology providers that support website hosting, security, email and customer communication.
Analytics and advertising providers where those services are enabled and the required consent has been obtained.
Professional advisers, tax authorities, regulators, law-enforcement bodies or other parties where disclosure is required by law.
A purchaser or successor if Petal Ritual is sold, transferred or reorganised.

These organisations may process information on our behalf or for their own stated purposes. We do not sell personal information.

Shopify

Our store is hosted by Shopify. Shopify collects and processes certain personal information when you visit or use our store so that it can provide and improve its services.

Information submitted through our store may be shared with Shopify and relevant service providers, including organisations located outside the United Kingdom.

Shopify may also process information as an independent data controller when providing certain enhanced, analytics or personalised services. You can learn more about Shopify’s processing practices and privacy rights in the Shopify Consumer Privacy Policy.

International transfers

Shopify and some of our other service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred to a country that has not been recognised as providing an adequate level of protection, we or our service providers will use an approved safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Order, payment and accounting records are normally retained for up to six years to meet tax, accounting and legal requirements.

Customer-service communications are retained only while needed to manage an enquiry, order issue, dispute or related legal matter.

Customer account information is retained while the account remains active or until you request its deletion, unless we need to retain particular information for legal or contractual reasons.

Marketing information is retained until you unsubscribe or withdraw your consent. We may retain a minimal suppression record to ensure that we respect your request not to receive further marketing.

We may retain information for longer where necessary to establish, exercise or defend a legal claim or comply with a legal obligation.

Security

We use reasonable organisational and technical measures to protect personal information. However, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

Please do not send payment-card details or other sensitive information to us by unsecured email or social-media message.

If you create a customer account, you are responsible for keeping your login details confidential and should not share your password with anyone.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request that we restrict how your information is used.
Object to certain processing based on legitimate interests.
Object at any time to the use of your information for direct marketing.
Request a portable copy of certain information.
Withdraw consent where processing is based on consent.
Complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain order information to meet tax and accounting requirements.

To exercise your rights, contact hello@petalritual.co.uk. We may need to request information to confirm your identity before responding. We will respond within the period required by applicable law.

Children’s information

Our website and products are not directed at children, and we do not knowingly collect personal information directly from children.

A customer may provide a child’s name or similar information when ordering a personalised product. We use that information only to create and fulfil the requested order and retain it only as part of the relevant order record where necessary.

If you believe a child has provided personal information to us without appropriate permission, please contact hello@petalritual.co.uk.

Third-party websites

Our website may contain links to websites, social-media platforms or services operated by third parties. We do not control these third parties and are not responsible for their privacy or security practices.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

Complaints

If you have concerns about how we use your personal information, please contact us first at hello@petalritual.co.uk so that we can investigate.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices or legal obligations.

When we update this policy, we will publish the revised version on this website and change the “Last updated” date. Where required by law, we will provide additional notice.