Privacy policy

Pretty Farm Girl LLC

https://www.prettyfarmgirl.com

Effective Date: November 11, 2026

Cookie controls update — November 11, 2026. Our cookie banner and Cookie Preferences controls are scheduled to launch on December 1, 2026. Until then, contact customerservice@prettyfarmgirl.com or call 941-229-6265 with privacy or advertising opt-out requests. The browser and provider controls described in our Cookie Policy remain available.

1. WHO WE ARE AND WHAT THIS POLICY COVERS

1.1 Who we are. Pretty Farm Girl LLC ("Pretty Farm Girl", "we", "us" or "our") is a Florida company that handcrafts natural skincare and sells it, together with a small range of products made by other companies, through https://www.prettyfarmgirl.com, our customer account portal, our text and email programs, our customer service chat and our Sarasota, Florida pick-up location (the "Services").

1.2 Scope. This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit or shop with us, contact us, or join our programs. It does not cover our creators, affiliates, wholesale partners or job applicants, whose information is handled under the agreements and notices we give them, or third-party websites we link to.

1.3 Relationship to our Terms. This Privacy Policy forms part of our Terms of Service (https://www.prettyfarmgirl.com/policies/terms-of-service). If they conflict on how we handle personal information, this Privacy Policy controls.

2. KEY TERMS

2.1 Personal information. "Personal information" means information that identifies, relates to, or can reasonably be linked to you or your household or device. It does not include de-identified or aggregated information that cannot reasonably be linked to you.

2.2 Service providers. "Service providers" are companies that process personal information on our behalf and under our instructions, such as our e-commerce platform, help desk, email and text messaging platform, and shipping partners.

2.3 Targeted advertising, sale and sharing. Some state privacy laws treat disclosing personal information to advertising partners for ads based on your activity across other websites as "targeted advertising", and in some cases as a "sale" or "sharing" of personal information, even where no money changes hands. We use these terms in Sections 12, 17 and 18 in that legal sense.

3. PERSONAL INFORMATION YOU GIVE US

We collect information you provide directly, including:

Contact and order details: name, email address, phone number, billing and shipping address, and pick-up details.

Account details: login credentials, saved addresses, preferences, subscription settings and order history.

Payment details: payment card and billing information, which is collected and processed by Shopify and its payment partners. We receive limited details, such as card type, the last four digits and payment confirmation, but not your full card number.

Communications: messages you send us by chat, email, text, phone, social media or contact forms, including photos you send of a damaged or incorrect order.

Quiz answers and preferences: answers to our skincare quiz, such as skin type, skin concerns and product preferences.

Reviews and content: reviews, ratings, photos and videos you submit.

Program details: information you give when joining our rewards and referral program, affiliate or creator programs, or wholesale program, such as business name and tax or resale information for wholesale applicants.

Shipping protection claims: details you provide to us or to our shipping protection provider to make a claim.

4. PERSONAL INFORMATION COLLECTED AUTOMATICALLY

When you use the Services, we and our partners automatically collect:

Device and network information: IP address, browser type, device type, operating system, language and approximate location derived from IP address.

Usage information: pages viewed, products viewed, items added to your cart or wishlist, checkout activity, searches, referring websites, links clicked, time on page, and emails or texts opened or clicked.

Session interaction information: mouse movements, clicks, scrolls and taps on our website, collected through session analytics tools described in Section 11.

Advertising and attribution identifiers: cookie identifiers, advertising identifiers, campaign and affiliate parameters, and similar identifiers used to measure which advertisements, creators or referrals led to a visit or purchase.

This information is collected through cookies, pixels, tags, software development kits and similar technologies, as described in our Cookie Policy.

5. PERSONAL INFORMATION FROM OTHER SOURCES

We may receive personal information from:

Shopify and our service providers, for example order, fraud-screening and delivery information.

Advertising and analytics partners, such as Google, Meta and our attribution providers, which provide information about how you interacted with our advertisements.

Social media platforms, when you interact with our pages, tag us, or message us, in line with your settings on those platforms.

Creators, affiliates and referring customers, for example where a referral code or link you used is linked to your order.

Shipping carriers and our shipping protection provider, for delivery status and claims.

6. CUSTOMER SERVICE CHAT AND AI-ASSISTED ASSISTANT

6.1 How chat works. Our website chat is operated through a third-party help desk platform. Some responses are generated by an AI-assisted automated assistant, and conversations may be passed to a member of our team.

6.2 What we collect. When you use chat, we and our help desk provider collect and store the content of your conversation, your name and email address if provided, your order details, the page you were on and device information. By using chat you consent to this recording and storage.

6.3 How we use chat information. We use chat information to answer your questions, manage orders, keep records of our communications, train our team and improve the accuracy of our automated assistant. Our help desk provider processes this information as our service provider.

6.4 Please limit what you share. Do not share payment card numbers, passwords or detailed medical information in chat.

7. SKINCARE QUIZ, REVIEWS AND SOCIAL CONTENT

7.1 Quiz answers. We use your skincare quiz answers to recommend products and, if you give us your email address or phone number, to send you related product suggestions. Quiz answers describe skin type and cosmetic concerns. Please do not enter medical diagnoses in the quiz.

7.2 Public reviews. Reviews you post, together with the display name and any photos you include, are public and can be seen by anyone. Do not include personal information you do not want to be public.

7.3 Use in advertising. We use your name, photo, image or review in paid advertising only with your separate written consent.

8. HOW WE USE PERSONAL INFORMATION

We use personal information to:

process, ship and deliver orders, arrange local pick-up, and manage subscriptions;

create and manage your account and our rewards and referral program;

provide customer service, handle product questions and adverse reaction reports, and resolve damaged, incorrect or lost order claims;

send transactional messages about orders, shipping, subscriptions and your account;

send marketing emails and texts where you have opted in or where otherwise permitted by law;

show you advertising on other websites and platforms and measure its effectiveness, subject to your choices in Section 17;

understand how visitors use our store, fix problems, test different prices, offers and layouts, and improve our products and Services;

display reviews and run promotions, giveaways and referral campaigns;

detect and prevent fraud, abuse of promotions, chargeback abuse and security incidents;

comply with our legal obligations, including tax, product safety and record-keeping obligations, and respond to lawful requests; and

establish, exercise or defend legal claims and enforce our Terms.

9. TEXT MESSAGE PROGRAM

9.1 Consent. If you opt in to our text messages, we collect your mobile number, your consent record and your messaging activity. Our text program is operated through our email and text messaging service provider. Consent to marketing texts is not a condition of purchase.

9.2 No sharing of mobile opt-in data. We do not sell, rent or share your mobile phone number or text messaging opt-in data with third parties or affiliates for their own marketing purposes. This does not prevent disclosure to service providers that operate our text program on our behalf, or disclosures required by law.

9.3 Opting out. You can opt out at any time by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL or UNSUBSCRIBE, or by contacting us by any other reasonable means. See Section 15 of our Terms of Service for full text program terms.

10. EMAIL MARKETING

If you subscribe to our emails or make a purchase, we may send you marketing emails about our products, offers and content. Our emails may contain pixels that tell us whether an email was opened and which links were clicked. You can unsubscribe at any time using the link in any marketing email. We will continue to send transactional emails about your orders, subscriptions and account.

11. COOKIES, PIXELS AND SESSION ANALYTICS

11.1 Cookie Policy. We and our partners use cookies and similar technologies to run our store, remember your cart and preferences, understand how our store is used, and support advertising. Our Cookie Policy (https://www.prettyfarmgirl.com/pages/cookie-policy) lists the categories and the main providers we use.

11.2 Cookie choices. Our cookie banner and the "Cookie Preferences" link are scheduled to become available on December 1, 2026. Once available, the banner will let you accept, decline or manage non-essential cookies, and the footer link will let you change your choices. Until then, you can use the browser and provider controls described in our Cookie Policy or contact us under Section 25 with a privacy request.

11.3 Session analytics. With your consent where we request it, we use session analytics tools that record how visitors interact with our pages, such as clicks, scrolls and mouse movements, and produce heatmaps and session replays. We use these tools to find and fix problems in our store. We configure these tools to mask text you type into form fields, and we do not use them to capture payment information, which is entered on Shopify's secure checkout.

11.4 Abandoned cart reminders. If you have given us your email address or mobile number and have opted in where required, we use cookies and similar technologies to recognize when you leave items in your cart or checkout, so that we can send a reminder email or text.

12. TARGETED ADVERTISING AND MEASUREMENT

12.1 Our advertising partners. We use advertising and measurement services provided by companies such as Google and Meta, and attribution and analytics services such as Triple Whale. These partners use cookies, pixels and similar technologies to collect information about your activity on our store, such as pages viewed, items added to cart and purchases, and may combine it with information they hold to show you our advertisements on other websites and apps and to measure performance.

12.2 Customer lists. We may share hashed (encoded) email addresses or phone numbers with advertising platforms to show ads to existing customers, to exclude them from certain ads, or to find similar audiences.

12.3 Legal characterization. Under some state privacy laws, these activities may be considered targeted advertising, a sale or sharing of personal information. You can opt out as described in Section 17.

12.4 Partners' own policies. These partners also process information under their own privacy policies. You can learn more about Google's practices at https://policies.google.com/technologies/partner-sites and manage Meta's ad settings at https://www.facebook.com/adpreferences.

13. HOW WE DISCLOSE PERSONAL INFORMATION

We disclose personal information to:

Service providers that support our business, including e-commerce hosting and checkout, payment processing, help desk and chat, email and text messaging, reviews and loyalty, subscriptions, product quiz, bundle and post-purchase offer tools, testing and analytics, cloud storage, and order fulfillment.

Shipping carriers and our shipping protection provider, to deliver orders and handle claims.

Advertising, analytics and attribution partners, as described in Section 12.

Creator, affiliate and referral platforms, to credit referrals and commissions, generally using order identifiers and referral codes rather than your contact details.

Professional advisers, such as accountants, lawyers and insurers, under duties of confidentiality.

Authorities and others where required, to comply with law, respond to lawful requests, protect safety, prevent fraud, or enforce our Terms.

A buyer or successor, in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this Privacy Policy.

Others with your direction or consent, for example when you send a gift to someone or link a social media account.

14. OUR RELATIONSHIP WITH SHOPIFY

Our store is hosted on Shopify, which processes personal information on our behalf to provide and improve the Services. Shopify also uses certain information about your interactions with our store, with other merchants and with Shopify for its own purposes, such as fraud prevention, its Shop app and its enhanced features, and in those cases Shopify is responsible for that processing. To learn more, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers and the Shopify Privacy Portal at https://privacy.shopify.com/en.

15. SUBSCRIPTIONS, REWARDS AND PROGRAMS

15.1 Subscriptions. If you subscribe, our subscription service provider processes your subscription schedule, products, payment token and shipping details so that renewal orders can be placed and charged. You can manage or cancel your subscription in your customer account.

15.2 Rewards and referrals. If you join our rewards and referral program, our loyalty provider processes your account, points balance, referral links and the purchases and actions that earn points. If you refer a friend, you confirm that you have their permission to send them a referral.

15.3 Promotions and giveaways. If you enter a giveaway or promotion, we use your information to run it, notify winners and comply with the official rules. Public winner announcements are made only as stated in those rules.

16. SENSITIVE PERSONAL INFORMATION

16.1 What we do not seek. We do not ask for information about your health diagnoses, racial or ethnic origin, religious beliefs, sexual orientation, citizenship or immigration status, genetic data or biometric data. If you choose to tell us about a skin condition, allergy or reaction, for example in a chat or a reaction report, we use it only to respond to you, to handle your report, and to meet our legal obligations.

16.2 No sale of sensitive data. We do not sell sensitive personal data, and we do not use it for targeted advertising. If this ever changes, we will obtain your prior consent where required and provide any notice required by Florida or other applicable law.

17. YOUR PRIVACY CHOICES

17.1 Advertising and cookies. You can manage cookies using the browser and provider controls described in our Cookie Policy. Our cookie banner and "Cookie Preferences" link are scheduled to launch on December 1, 2026. Once available, you will also be able to decline or withdraw consent to non-essential cookies through those controls.

17.2 Opt out of targeted advertising, sale or sharing. You can opt out of targeted advertising and any sale or sharing of your personal information through the "Your Privacy Choices" link in our website footer, or by contacting us under Section 25.

17.3 Global Privacy Control. Where required by applicable law, we treat a Global Privacy Control signal sent by your browser as a valid request to opt out of targeted advertising and any sale or sharing of personal information linked to that browser or device.

17.4 Marketing messages. You can unsubscribe from emails using the link in any marketing email, and from texts by replying STOP or by any reasonable means described in Section 9.3.

17.5 Platform and device settings. You can also limit ad personalization through your browser, device, Google and Meta account settings.

18. YOUR STATE PRIVACY RIGHTS

18.1 Your rights. Depending on the state where you live and whether that state's privacy law applies to us, you may have the right to:

confirm whether we process your personal information and access it;

correct inaccurate personal information;

delete personal information;

obtain a copy of your personal information in a portable format;

opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects; and

appeal our decision on your request.

18.2 We do not discriminate. We will not deny you goods, charge you different prices or provide a different quality of service because you exercised these rights. Rewards program benefits that depend on the use of your information are explained in the program terms.

18.3 Limits. These rights are subject to exceptions under applicable law, for example where we must keep information to complete a transaction, prevent fraud or comply with legal obligations.

19. HOW TO EXERCISE YOUR RIGHTS AND APPEAL

19.1 Making a request. To make a request, email customerservice@prettyfarmgirl.com with the subject line "Privacy Request", or call 941-229-6265. Rights relating to information Shopify processes for its own purposes may also be exercised through https://privacy.shopify.com/en.

19.2 Verification. To protect you, we will verify your identity before acting on a request, usually by matching information you give us with information in our records, such as your email address and a recent order number. We will not ask for more information than we need.

19.3 Authorized agents. You may use an authorized agent where your state's law permits. We may require proof that the agent is authorized and may ask you to verify your identity directly with us.

19.4 Timing. We will respond within the time required by applicable law, which is generally 45 days, and will tell you if we need an extension that the law permits.

19.5 Appeals. If we decline your request, you may appeal by replying to our decision or emailing customerservice@prettyfarmgirl.com with the subject line "Privacy Appeal". We will respond in writing within the time required by law. If you are not satisfied with our response, you may contact your state Attorney General.

20. FLORIDA RESIDENTS

20.1 Our home state. We are based in Florida and handle personal information in line with applicable Florida law, including the Florida Information Protection Act of 2014, section 501.171, Florida Statutes.

20.2 Security breach notice. If a breach of security affects your personal information as defined in that Act, we will notify you as required by Florida law, which generally requires notice no later than 30 days after a breach is determined or there is reason to believe one has occurred, unless a delay is authorized by law.

20.3 Florida Digital Bill of Rights. Florida's Digital Bill of Rights, sections 501.701 to 501.722, Florida Statutes, applies primarily to very large businesses that meet specific revenue and activity thresholds. Whether or not those thresholds apply to us, Florida residents may use the requests described in Sections 17 to 19, and we do not sell sensitive personal data, as stated in Section 16.2.

21. CHILDREN AND TEENS

21.1 Children under 13. Our Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

21.2 Teens. Teens aged 13 to 17 may shop only with the involvement and permission of a parent or guardian, as stated in our Terms of Service. We do not knowingly sell personal information of, or use it for targeted advertising to, consumers we know are under 18.

22. DATA SECURITY

We use administrative, technical and physical safeguards appropriate to the nature of the information we hold, including encrypted checkout through Shopify, access controls for our team and service providers, and contractual confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your account password and contact us promptly if you suspect unauthorized access.

23. DATA RETENTION

We keep personal information only for as long as needed for the purposes described in this Privacy Policy, including to meet legal, tax, accounting, product safety and dispute resolution obligations. As a general guide:

order, payment and tax records are kept for up to seven years after the transaction;

account information is kept while your account is open and for a reasonable period after closure;

marketing lists are kept until you unsubscribe, after which we keep a suppression record so that we do not contact you again;

chat and customer service records are kept for up to three years after the conversation, unless needed for a longer-running claim;

adverse reaction reports and related records are kept for as long as required by applicable product safety law; and

analytics and session data are kept in line with the retention settings of the provider and generally for no longer than 13 months in identifiable form.

When information is no longer needed, we delete it or de-identify it.

24. INTERNATIONAL TRANSFERS AND CANADIAN CUSTOMERS

24.1 Where we process information. We are based in the United States, and personal information is stored and processed in the United States and in other countries where our service providers operate. Privacy laws in those countries may differ from the laws where you live.

24.2 Customers in Canada. If you order from Canada, your information is transferred to and processed in the United States, where it may be accessible to authorities under U.S. law. You may ask us to access or correct your personal information, or ask questions about our service providers outside Canada, by contacting us under Section 25.

24.3 Visitors from elsewhere. Our store is directed to customers in the United States and Canada. If you visit from another country, you understand that your information will be processed in the United States.

25. CHANGES AND CONTACT

25.1 Changes. We may update this Privacy Policy from time to time. We will post the updated version with a new Effective Date and, where the change is material, give notice on our website or by email. Where the law requires your consent to a change, we will ask for it.

25.2 Contact us. For questions or requests about this Privacy Policy, contact: