Draft for owner and legal review. Not yet effective.
The operator, contact details, service providers, tracking practices, retention periods and countries served must be confirmed against the live business before publication. Bracketed fields are unresolved. Prepared September 8, 2026.
- Orders and accounts require contact, delivery and transaction information.
- Cart and sign-in features use cookies and similar storage.
- Service providers may process information to operate the store and fulfill your order.
- You can ask about your information and exercise the rights available under applicable law.
Effective date: [Date this notice is verified and published].
1. Who we are and what this notice covers
This Privacy Policy explains how [full legal business name], trading as Premier Petra (“we,” “us” or “our”), handles personal information through petraprime.com and related order and customer-support communications. Our business address is [address]. Where applicable data-protection law uses the term, this business is the controller of the personal information described here.
Contact [email protected] about this notice or your information. Our Terms and Conditions address purchases and use of the storefront. This notice describes data handling; visiting the site does not, by itself, constitute consent to every use of personal information or to optional cookies.
2. Information we collect
Information you provide
- Orders: name, email address, telephone number where requested, billing and shipping addresses, products, quantities, prices, discounts, shipping selections and order notes.
- Accounts: account identifiers, sign-in credentials and saved contact/address information. Do not share your password with us in a message.
- Support: correspondence, order references, and photographs or other information you choose to provide when reporting an issue.
- Product concerns: if you report a reaction or safety issue, information you choose to share about the product, batch, use and concern. This can include health information; please avoid sending unrelated medical details. We use such information to respond to the issue, investigate safety and meet applicable reporting obligations, rather than for advertising.
- Reviews: if a review feature is available, the review, chosen display name and associated information you submit. Content identified as public may be visible to others.
Information from site use and other sources
The storefront and hosting systems may record IP address, browser/device information, request time, referring page, technical errors, and session or security identifiers. Cart activity is associated with your session. Payment, shipping or fraud-prevention providers may supply transaction status, payment references, delivery updates or fraud indicators needed to process an order or investigate an issue.
Additional collection and measurement tools: [confirmed tools, information categories and sources].
3. Why we use information
- Receive, verify, process and fulfill orders; calculate applicable charges; handle delivery, cancellations, refunds and disputes.
- Create and maintain accounts, preserve cart contents and send necessary order, account and security messages.
- Respond to support requests and investigate product or delivery problems.
- Protect accounts and the storefront, detect unauthorized transactions and enforce lawful purchase restrictions.
- Maintain records needed for accounting, tax, legal obligations and the establishment or defense of claims.
- Understand and improve store operation, to the extent the measurement tools and legal permissions described in this policy actually support that use.
If we offer optional marketing messages, we will explain the choice and obtain consent where required. You may unsubscribe from marketing using the message’s instructions or by contacting us. Necessary order or security messages may still be sent. We do not make access to a legally required remedy conditional on accepting marketing.
4. Payments and transaction records
Payment providers: [provider names and privacy-notice links]. When you use an available payment method, information necessary for that transaction is processed by the provider and may be returned to us as a payment reference, status, refund record or limited payment-method information.
Payment information retained by the store: [confirmed fields, such as transaction reference and payment status]. Please do not send full payment-card numbers, security codes or banking credentials through ordinary email or order notes.
5. Who may receive information
Information is disclosed as reasonably necessary for the purposes described here, including to:
- Authorized personnel: staff or contractors who handle orders, support, store administration or security.
- Operational providers: hosting and infrastructure providers, transactional email services, payment providers, shipping/fulfillment partners and technical support providers, to the extent actually used.
- Professional advisers and authorities: accountants, legal advisers, regulators, courts or law-enforcement bodies where disclosure is reasonably necessary or legally required.
- A successor business: in connection with a genuine merger, acquisition or transfer of relevant business assets, subject to applicable legal safeguards and notice requirements.
- Recipients you direct: where you request a disclosure or give a valid authorization.
Providers may act on our instructions or, for some activities such as regulated payment services, under their own legal obligations and privacy notices. Our service providers include: [confirmed provider names, purposes and relevant privacy notices].
Sale, sharing and targeted advertising: [Confirmed statement of sale, sharing and targeted-advertising practices, with an opt-out link if applicable].
6. Cookies and similar technologies
Cookies are small pieces of information stored by a browser. Similar technologies, including local and session storage, can keep the cart and sign-in experience working. WooCommerce commonly uses woocommerce_cart_hash and woocommerce_items_in_cart to track cart changes, and a cookie beginning wp_woocommerce_session_ to associate a visitor with stored cart information. Cart-change cookies are typically session cookies; the WooCommerce session cookie commonly lasts up to two days, subject to the store’s configuration.
WordPress uses authentication and preference cookies when you sign in. Duration depends on settings and whether you choose “Remember me.” Security, hosting, payment or embedded services may use additional technologies. Additional cookies or measurement tools: [confirmed inventory, purposes, providers and durations].
You can manage cookies through your browser. Blocking essential storage can prevent a cart, checkout or sign-in from working correctly. Where optional analytics or advertising cookies are used and consent is required, they must remain inactive until valid consent is given, and you must be able to change that choice. Cookie choices: [available controls and link, if applicable].
Browser privacy signals: [Confirmed response to Do Not Track and applicable opt-out preference signals, including Global Privacy Control].
7. How long information is kept
Retention depends on the purpose of the information, applicable accounting/tax duties, outstanding transactions, security needs, legal claims and any legally required preservation. Information should not be retained merely because storage is available.
- Account information: while the account is maintained and for any justified period needed after closure.
- Orders, payments and refunds: for the applicable business and legal recordkeeping periods.
- Support and product-concern records: for the period reasonably needed to resolve the request, document the decision and address related claims or obligations.
- Session and technical records: according to their operational purpose and configured expiry or log-retention schedule.
Our category-specific retention periods are [confirmed schedule, including support, email logs and backups]. Deletion from active systems may not immediately remove a record from a protected backup; retained copies must remain protected and be removed through the applicable retention cycle, subject to lawful preservation duties.
8. Security and your account
We use reasonable safeguards appropriate to the information and the risks involved. No website, transmission method or storage system can be guaranteed completely secure. Use a strong, unique password and contact us promptly about suspected unauthorized access.
This security limitation does not waive our legal duties. If an incident requires notification, we will provide it as required by applicable law.
9. Your choices and privacy requests
You can review and update available account and address fields in My Account. Contact [email protected] to ask about access, correction, deletion, account closure or other privacy matters. Account closure does not automatically require erasing records that must lawfully be retained.
Depending on your location and the law applicable to the business and request, you may have rights to know or access information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to certain processing, withdraw consent, opt out of certain advertising/sales/sharing or automated decisions, or appeal a denied request. We will explain relevant limitations and respond within the applicable legal period.
We may verify your identity or an authorized agent’s authority using information proportionate to the request and will not require unnecessary sensitive information. We will not unlawfully discriminate against you for exercising a protected right. You may contact the relevant privacy regulator or supervisory authority without first obtaining our permission.
Additional regional rights and request/appeal channels: [applicable regional notice and contact details].
10. International handling of information
Processing locations: [confirmed countries and applicable transfer safeguards]. Information may be handled outside your home jurisdiction where the identified services require it. Where applicable law restricts a transfer, we must use an appropriate legal mechanism and safeguards and explain how you can obtain relevant information about them. We do not rely on a general statement that using this website means you consent to every international transfer.
11. Children and age eligibility
The storefront offers personal-care products to purchasers with legal capacity to contract and is not directed to children under 13. A product being suitable for a younger user does not mean we invite children to create accounts or submit personal information. Purchasers must meet the eligibility requirements in our Terms and Conditions. We do not knowingly seek personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take the steps required by applicable law. Additional protections may apply to older minors in some jurisdictions.
12. External links and public content
Links to outside websites are provided for convenience. Their operators’ privacy practices govern information you provide directly to them. This does not remove our responsibility for disclosures we make ourselves. If third-party content is embedded into a page, it may receive technical information when loaded; any such integration and required choices must be disclosed in the applicable sections above.
Do not post sensitive personal information in public reviews. If a submission includes information about someone else, provide it only when you have an appropriate lawful basis to do so.
13. Updates to this notice
We may revise this notice to reflect changes in the store or legal requirements. We will update its effective date and provide additional notice, and obtain consent where required, for material changes. A revised notice does not automatically authorize a new, incompatible use of information collected under an earlier promise.
14. Contact and requests
Premier Petra
Legal operator/controller: [full legal business name]
Privacy requests: [email protected]
Mailing address: [address]
Tell us the request you want to make and the contact details associated with your account or order. Do not include a password, full payment-card number or government identification unless we have explained why a secure, proportionate verification step is necessary.
