Privacy policy

Last updated: August 21, 2026

Pastel Roast operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Pastel Roast is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person.

Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an identifiable person.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact details, including your name, address, billing address, shipping address, phone number, and email address.
• Payment and transaction information processed in connection with your purchase, such as order details, form of payment, payment confirmation, and transaction history. Payment card details are collected and processed by Shopify and its payment processors; Pastel Roast does not directly store your complete payment card number or card security code.
• Account information, including account identifiers, preferences and settings, and authentication information processed through Shopify, where applicable.
• Transaction information, including items you view, place in your cart, purchase, return, exchange, or cancel, and your past transactions.
• Communications with us, including information you provide when contacting us, such as through a customer support inquiry.
• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information, including information regarding how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us, make a purchase, or otherwise provide personal information to us.
• Automatically through the Services, including from your device when you use the Services or visit our website, and through cookies and similar technologies.
• From our service providers, including providers that enable technology, payment processing, fulfillment, shipping, customer support, or other services on our behalf.
• From our partners or other third parties, where applicable.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We may use your personal information to provide the Services, perform our contract with you, process payments, fulfill orders, remember preferences, send account or order notifications, process purchases, returns, exchanges, or other transactions, manage your account where applicable, arrange shipping, and improve the Services.

Marketing and Communications. We may use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications by email or other channels and, where applicable, displaying advertising related to our products.

Security and Fraud Prevention. We may use personal information to authenticate accounts, provide a secure shopping and payment experience, detect or investigate potentially fraudulent, illegal, unsafe, or malicious activity, and protect the Services.

Communicating with You. We may use personal information to provide customer support, respond to inquiries, and maintain our business relationship with you.

Legal Reasons. We may use personal information to comply with applicable law, respond to valid legal process, respond to lawful requests from government authorities, participate in legal proceedings, or enforce or investigate potential violations of our terms or policies.

If you use an account through the Services, you are responsible for protecting your account credentials and should not share passwords or other access credentials with others.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes consistent with this Privacy Policy.

These circumstances may include:

• Shopify and other service providers that perform services on our behalf, including payment processing, IT services, analytics, customer support, cloud storage, fulfillment, and shipping.
• Business and marketing partners, where applicable, to help provide or support advertising and marketing for our products. Depending on where you reside, you may have certain rights relating to targeted advertising or the sale or sharing of personal information.
• Third parties at your direction or with your consent, including where disclosure is necessary to fulfill or ship an order or provide a service you request.
• Parties involved in a business or legal transaction, including in connection with a merger, acquisition, restructuring, bankruptcy, legal obligation, subpoena, court order, enforcement of our terms or policies, or protection of our rights or the rights of others.

Relationship with Shopify

The Services are hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Shopify platform and related services.

Information you submit through the Services may be transmitted to and processed by Shopify and applicable service providers, including service providers located in countries other than where you reside.

Shopify may also process information in connection with platform features made available to us as a Shopify merchant.

Where Shopify is independently responsible for processing personal information, Shopify is responsible for responding to applicable requests concerning that processing.

To learn more about Shopify’s privacy practices, you may review the:

Shopify Consumer Privacy Policy

Depending on where you live, you may also exercise certain rights relating to information processed by Shopify through the:

Shopify Privacy Portal

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that is not controlled by Pastel Roast, you should review that site’s privacy, security, and other applicable policies.

We are not responsible for the privacy or security practices of third-party websites or platforms.

Information you provide in public or semi-public areas, including on third-party platforms, may be viewable by other users.

The inclusion of a third-party link does not, by itself, imply endorsement of that third party or its content.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction.

If you are a parent or guardian and believe that a child has provided personal information to us, you may contact us using the information below to request that it be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share,” as those terms may be defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee perfect security.

Information transmitted over the internet or through electronic communications may also be subject to security risks while in transit. You should avoid sending sensitive or confidential information through unsecured communication channels.

How long we retain personal information depends on factors including whether the information is needed to maintain or provide an account or the Services, fulfill orders or provide customer support, comply with legal or regulatory obligations, resolve disputes, or enforce contracts, terms, or policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below.

These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions permitted by applicable law.

• Right to Access / Know. You may have the right to request access to personal information we maintain about you.
• Right to Delete. You may have the right to request deletion of certain personal information we maintain about you.
• Right to Correct. You may have the right to request correction of inaccurate personal information.
• Right of Portability. You may have the right to receive a copy of certain personal information and, in some circumstances, request that it be transferred to another party.
• Right to Opt Out of Targeted Advertising or Sale/Sharing. Depending on where you reside, you may have the right to opt out of the “sale” or “sharing” of personal information or processing for purposes considered “targeted advertising” under applicable law. Where applicable, you may exercise these rights through our Data Sharing Opt-Out page. Where applicable and supported by the privacy controls enabled on the Services, recognized browser-based privacy preference signals, such as Global Privacy Control (“GPC”), may also be treated as an opt-out request in accordance with applicable law and the functionality provided through Shopify. To learn more about Global Privacy Control, visit globalprivacycontrol.org.
• Managing Communication Preferences. If we send promotional emails, you may opt out by using the unsubscribe option included in those communications. Even after opting out of promotional communications, we may continue sending non-promotional communications relating to your account, purchases, or orders.

Other than as described above, we do not currently recognize other “Do Not Track” signals that may be sent by a browser or device.

You may exercise applicable privacy rights through the privacy controls available on the Services or by contacting us using the information in the Contact section below.

For information about rights relating to personal information processed independently by Shopify, you may visit the Shopify Privacy Portal.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

We may need to verify your identity before processing a request, as permitted or required by law.

Where permitted, you may designate an authorized agent to submit a request on your behalf. We may require proof that the agent has been authorized to act for you and may also require you to verify your identity directly.

We will respond to valid requests within the period required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the contact information below.

Depending on where you live, you may also have the right to appeal a decision relating to a privacy request or lodge a complaint with an applicable data protection authority.

International Transfers

We and our service providers may transfer, store, and process your personal information outside the country where you live.

Where required by applicable law, such transfers will be subject to appropriate safeguards or recognized transfer mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements, regulatory requirements, or other operational reasons.

When we update this Privacy Policy, we will post the revised version on this website, update the Last updated date, and provide additional notice where required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any privacy rights described above, please contact us at:

support@pastelroast.com