Privacy Policy

Last Updated: March 3, 2026

Introduction

Welcome to Honest Petal ("we," "our," or "us"), a website operated by Leafspire LLC. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit honestpetal.com (the "Website").

Information We Collect

Information you provide to us: If you subscribe to our email newsletter, we collect your email address. If you contact us by email, we collect your name, email address, and the contents of your message.

Automatically collected information: When you visit the Website, we and our service providers may automatically collect:

• IP address (used for security and to derive approximate location)
• Device type, operating system, and browser type/version
• Pages viewed, links clicked, and time spent on pages
• Date, time, and duration of your visit
• Referring URL (the page that linked you to us)
• General location (city/region) derived from your IP address

This information is used for security, analytics, and performance purposes. We do not use it to try to identify you by name, but it may be considered "personal information" or "personal data" under certain privacy laws.

How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Website
• Send our email newsletter to subscribers
• Respond to inquiries and messages
• Understand how visitors use our content so we can improve it
• Protect against fraud, spam, abuse, and security incidents
• Comply with legal obligations

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Website and understand how it is used. Cookies on this site fall into the following categories:

• Essential cookies: Required for basic site functionality and security (e.g., Cloudflare security cookies). These cannot be disabled without affecting how the site works.
• Affiliate tracking cookies: When you click an affiliate link, the affiliate network (such as ShareASale or Skimlinks) may place a cookie on your browser to track the referral. This is how we earn commissions on qualifying purchases. These cookies are set and controlled by third parties and are governed by their respective privacy policies.
• Email provider cookies: Our email service provider (Klaviyo) may set cookies related to newsletter signup forms and email engagement tracking.

Managing cookies: You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. You can also opt out of specific tracking through these tools:

• ShareASale: ShareASale Privacy Policy
• Skimlinks: Skimlinks Privacy Policy (includes opt-out)

Disabling cookies may affect site functionality.

Do Not Track: Some browsers send a "Do Not Track" signal. The Website does not currently respond to DNT signals, as there is no industry-standard way to do so.

Third-Party Services

We use the following third-party services, each of which may collect data in accordance with their own privacy policies:

• Cloudflare — DNS, security, and performance. May collect IP addresses, device/browser data, and request metadata for security and analytics. Cloudflare Privacy Policy
• Vercel — Website hosting. May collect server logs including IP addresses and request data. Vercel Privacy Policy
• Klaviyo — Email newsletter. Collects email addresses of subscribers and tracks email opens/clicks. Klaviyo Privacy Policy
• ShareASale — Affiliate link tracking and commissions. ShareASale Privacy Policy
• Skimlinks — Affiliate link tracking and commissions. Skimlinks Privacy Policy

We do not currently use Google Analytics, ad networks, or embedded third-party content (videos, social media widgets, etc.).

Third-Party Links

The Website contains links to third-party websites, including retailer sites reached through affiliate links. We are not responsible for the privacy practices of those sites. Your interactions with third-party websites are governed by their own privacy policies.

Email Newsletter

If you subscribe to our newsletter via Klaviyo, we collect your email address. Klaviyo may also track whether you open emails and click links within them. You can unsubscribe at any time using the link at the bottom of any email. After you unsubscribe, we stop sending you marketing emails. We or our email service provider may retain your email address on a suppression list to ensure we honor your opt-out.

How We Share Information

We may share information in the following circumstances:

• Service providers: With the third-party services listed above, to the extent necessary for them to provide their services (hosting, email delivery, affiliate tracking, security).
• Legal requirements: If required by law, regulation, legal process, or governmental request.
• Safety and rights: To protect the rights, safety, and security of Leafspire LLC, our visitors, or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your information may be transferred as part of that transaction.

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We do not knowingly collect or process sensitive personal information for the purpose of inferring characteristics about you.

Data Retention

• Email addresses: Retained as long as you remain subscribed to the newsletter. After unsubscribing, your address may be kept on a suppression list to honor your opt-out.
• Server/hosting logs: Retained by our hosting providers (Vercel, Cloudflare) according to their standard retention periods, typically 30–90 days.
• Contact messages: Retained as long as reasonably necessary to respond and for our records, then deleted.

Data Security

We use reasonable administrative, technical, and organizational measures to protect information. The Website is served over HTTPS, and our service providers maintain their own security programs. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

The Website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us so we can delete it.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you
• Request correction or deletion of your personal information
• Opt out of certain processing activities
• Withdraw consent (where processing is based on consent)

California residents: Under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion, and opt out of any sale or sharing. We do not sell or share personal information as defined under these laws.

EEA/UK residents: Under the GDPR/UK GDPR, you have additional rights including data portability, the right to object to processing based on legitimate interests, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at nicole@honestpetal.com.

Legal Bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Consent: Email newsletter subscription.
• Legitimate interests: Site security, fraud prevention, analytics and improving the Website, responding to inquiries.
• Legal obligation: Compliance with applicable laws and regulations.

International Data Transfers

Our service providers (including Cloudflare, Vercel, and Klaviyo) may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to support these transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. Continued use of the Website after we post changes means you acknowledge the updated policy.

Contact

If you have questions about this Privacy Policy, contact us at:

Leafspire LLC
nicole@honestpetal.com