Privacy policy

Privacy Policy

Pastel Protein LLC | Effective Date: July 2026 | Last Updated: July 2026

Pastel Protein LLC ("Pastel Protein," "we," "us," or "our") is committed to transparency about how we collect, use, and protect your personal information. This Privacy Policy describes our data practices when you visit PastelProtein.com (the "Site"), create an account, make a purchase, or otherwise interact with us. By using the Site or purchasing our products, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Site.

This Privacy Policy is designed to comply with applicable federal and state privacy laws across all US states and territories, including but not limited to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Utah Consumer Privacy Act (UCPA), and the federal CAN-SPAM Act and Telephone Consumer Protection Act (TCPA) where applicable.

1. Information We Collect

We collect personal information in the following categories:

IDENTIFIERS AND CONTACT INFORMATION: When you place an order, create an account, subscribe to our email list, or contact us, we collect your name, email address, shipping address, billing address, and phone number.

PAYMENT INFORMATION: Payment card details are collected and processed directly by Shopify Payments using industry-standard encryption. We do not receive, store, or have access to your full payment card number or CVV at any time.

COMMERCIAL INFORMATION: We collect records of products you have purchased, browsed, or considered, along with your order history and purchase preferences.

INTERNET AND ELECTRONIC ACTIVITY: When you visit the Site, we and our service providers automatically collect technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, pages viewed, links clicked, time spent on pages, and the date and time of your visit.

GEOLOCATION DATA: We may collect approximate geographic location information derived from your IP address.

INFERENCES AND PREFERENCES: We may derive inferences about your preferences, interests, and likely purchasing behavior based on your interactions with the Site and our products.

COMMUNICATIONS: Any messages, emails, or other communications you send to us, including customer support inquiries and feedback.

INFORMATION FROM THIRD PARTIES: We may receive information about you from Meta (Facebook and Instagram), TikTok, and Google when you interact with our advertisements on those platforms, subject to your privacy settings on those platforms.

2. How We Use Your Information

We use the personal information we collect for the following business and commercial purposes:

ORDER FULFILLMENT AND CUSTOMER SERVICE: To process, fulfill, and ship your orders; to communicate with you about your purchases; to process returns or resolve disputes; and to respond to your customer service inquiries.

DIRECT MARKETING AND PROMOTIONAL COMMUNICATIONS: We use your name, email address, purchase history, and behavioral data to send you marketing and promotional communications. This includes promotional emails, special offer announcements, product launch notifications, brand newsletters, and personalized recommendations based on your purchase history and browsing behavior. By placing an order or creating an account, you consent to receiving these communications. You may opt out at any time as described in Section 6.

TARGETED ADVERTISING: We use data collected through cookies, pixels, and other tracking technologies to serve you personalized advertisements on third-party platforms including Meta (Facebook and Instagram), TikTok, and Google. This includes retargeting you with ads after you visit the Site and building lookalike audiences of potential customers who share characteristics with our existing customers. We may share hashed email addresses and other pseudonymous identifiers with these platforms for advertising matching purposes.

ANALYTICS AND SITE IMPROVEMENT: To analyze how visitors use the Site, which pages and products are most popular, where visitors come from, and how we can improve the Site's content, performance, and user experience.

FRAUD PREVENTION AND SECURITY: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other harmful or illegal activity.

LEGAL COMPLIANCE: To comply with applicable federal and state laws, respond to legal process, and enforce our Terms of Service and other agreements.

BUSINESS OPERATIONS: To operate, maintain, and improve our business, including accounting, auditing, and other internal business functions.

3. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixels, and similar tracking technologies on the Site. These technologies help us operate the Site, understand how it is used, and deliver relevant advertising.

ESSENTIAL COOKIES: Necessary for the Site to function. These include session cookies that maintain your shopping cart and enable checkout. Disabling these cookies will prevent you from using core Site features.

ANALYTICS COOKIES: We use Google Analytics to collect aggregated data about Site usage including page views, session duration, traffic sources, and user behavior. This data helps us improve the Site. Google's data practices are governed by Google's Privacy Policy at policies.google.com/privacy.

ADVERTISING AND RETARGETING PIXELS: We use the Meta Pixel and TikTok Pixel to: (a) measure the effectiveness of our advertising on those platforms; (b) retarget Site visitors with advertisements on Meta and TikTok; and (c) create custom and lookalike audiences for advertising purposes. These pixels transmit data about your actions on the Site to Meta and TikTok respectively. Their use of this data is governed by Meta's Data Policy and TikTok's Privacy Policy.

DO NOT TRACK: We do not currently modify our data collection or use practices in response to browser-level Do Not Track signals. Some third-party services we use may respond differently to such signals.

COOKIE CONTROLS: You may manage cookie preferences through your browser settings. You may opt out of interest-based advertising at www.aboutads.info (Digital Advertising Alliance), www.networkadvertising.org (Network Advertising Initiative), or through the privacy settings on Meta, TikTok, and Google directly. Note that opting out of advertising cookies does not mean you will stop seeing ads -- it means the ads you see may be less relevant to your interests.

4. How We Share Your Information

We do not sell your personal information to any third party for monetary compensation. We may share your personal information with the following categories of recipients:

FULFILLMENT AND LOGISTICS PARTNER: We share your name, shipping address, order details, and contact information with our third-party fulfillment partner who physically processes, packs, and ships your orders and handles return logistics. This partner is required to handle your information confidentially and use it only to fulfill your order.

PAYMENT PROCESSOR: Payment transactions are processed by Shopify Payments. Payment card data is transmitted directly to Shopify's secure systems and is not stored by us.

EMAIL MARKETING PROVIDER: We share your name and email address with our email marketing service provider to facilitate the delivery of transactional and marketing emails on our behalf.

ADVERTISING AND ANALYTICS PLATFORMS: We share certain technical and behavioral data including device identifiers, browsing activity, and hashed email addresses with Meta, TikTok, and Google for advertising measurement, audience building, and retargeting purposes as described in Section 3. This sharing may constitute "sharing" of personal information under California law even though no monetary compensation is exchanged.

E-COMMERCE PLATFORM: Our Site is hosted on Shopify, which has access to data necessary to operate the platform, process payments, and provide hosting and security services.

LEGAL AND REGULATORY DISCLOSURE: We may disclose your personal information to law enforcement, courts, regulators, government agencies, or other third parties when required by applicable law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Pastel Protein, our customers, or the public.

BUSINESS TRANSFERS: If Pastel Protein is involved in a merger, acquisition, asset sale, financing, reorganization, or bankruptcy proceeding, your personal information may be transferred to the successor entity. We will provide notice of any such transfer and any choices you may have regarding your information as required by applicable law.

WITH YOUR CONSENT: We may share your information with additional third parties when you have provided explicit consent for such sharing.

5. Multi-State Privacy Rights

Depending on the state where you reside, you may have specific rights regarding your personal information. We honor the following rights for all US residents to the extent required by applicable law in your state:

RIGHT TO KNOW AND ACCESS: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.

RIGHT TO DELETION: You have the right to request that we delete the personal information we have collected from you, subject to certain legal exceptions such as our need to retain information for tax, legal, or security purposes.

RIGHT TO CORRECTION: You have the right to request that we correct inaccurate personal information we hold about you.

RIGHT TO OPT OUT OF TARGETED ADVERTISING AND DATA SHARING: You have the right to opt out of the use of your personal information for targeted advertising and cross-context behavioral advertising. To opt out, contact us at Support@PastelProtein.com with the subject line "Opt Out of Targeted Advertising" or use the opt-out mechanisms provided directly by Meta, TikTok, and Google.

RIGHT TO NON-DISCRIMINATION: We will not discriminate against you in any way for exercising your privacy rights, including by denying you products or services, charging different prices, or providing a different level of service.

RIGHT TO APPEAL: If we deny your privacy rights request, you have the right to appeal our decision by contacting Support@PastelProtein.com with the subject line "Privacy Rights Appeal."

CALIFORNIA-SPECIFIC RIGHTS: In addition to the above, California residents have the right to limit the use of sensitive personal information and the right to know whether we disclose personal information to third parties. Our advertising pixel practices may constitute "sharing" under California law as described in Section 4. California residents may also request a list of third parties to whom we have disclosed personal information for direct marketing purposes.

HOW TO SUBMIT A REQUEST: To exercise any of the above rights, please email us at Support@PastelProtein.com with your full name, the state in which you reside, and the specific right you wish to exercise. We will respond within 45 days of receipt, with the option to extend by an additional 45 days for complex requests. We may need to verify your identity before processing your request.

6. Marketing Communications and Opt-Out

CONSENT TO MARKETING: By placing an order, creating an account, or subscribing to our email list, you consent to receive marketing and promotional communications from us by email. These communications may include product announcements, promotional offers, discount codes, brand news, and personalized product recommendations. We send these communications because they are part of our relationship with you as a customer and are in our legitimate business interest.

OPT-OUT FROM EMAIL MARKETING: You may withdraw your consent and opt out of marketing emails at any time by: (a) clicking the "Unsubscribe" link in any marketing email we send; or (b) emailing us at Support@PastelProtein.com with "Unsubscribe" in the subject line. We will process your opt-out request within 10 business days. After opting out, you will continue to receive transactional and operational emails related to any active orders, account activity, or legal obligations -- these cannot be opted out of.

OPT-OUT FROM TARGETED ADVERTISING: To opt out of interest-based advertising served by our advertising partners, use the following: Meta: facebook.com/settings/ads -- TikTok: tiktok.com/setting -- Google: adssettings.google.com -- Digital Advertising Alliance: optout.aboutads.info -- Network Advertising Initiative: optout.networkadvertising.org

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including: to provide and improve our products and services; to comply with legal, regulatory, and tax obligations; to resolve disputes; and to enforce our agreements. Specifically:

• Order and transaction records: minimum of 7 years for tax and accounting compliance

• Customer account information: for the duration of your account and for a reasonable period thereafter

• Marketing communications data: until you opt out, after which we retain your email on a suppression list to honor your opt-out

• Security and fraud prevention logs: up to 2 years

When personal information is no longer needed for any of the above purposes, we will delete or anonymize it in a manner designed to make it unrecoverable. You may request deletion of your personal information as described in Section 5, subject to our legal retention obligations.

8. Data Security

We implement and maintain reasonable and appropriate administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, use, alteration, and destruction. These measures include SSL/TLS encryption for data transmitted to and from the Site, access controls limiting who within our organization can access personal information, and use of reputable third-party payment and data processing services with industry-standard security certifications.

Payment card data is processed exclusively through Shopify Payments' PCI-DSS compliant infrastructure. We do not receive, store, or process raw payment card numbers or CVV codes on our own systems at any time.

Despite our security measures, no system or transmission of data over the Internet can be guaranteed to be completely secure. If you believe your information has been compromised, please contact us immediately at Support@PastelProtein.com. In the event of a data breach that triggers notification obligations under applicable federal or state law, we will notify affected individuals and relevant regulatory authorities as required.

9. Children's Privacy

The Site is not directed to, and we do not knowingly collect personal information from, children under the age of 13. Our products are intended for adults 18 years of age and older. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete such information from our systems. If you believe we may have collected information from a child under 13, please contact us immediately at Support@PastelProtein.com.

10. Third-Party Links and Services

The Site may contain links to or integrations with third-party websites, social media platforms, and services. These third parties operate independently and have their own privacy policies. We are not responsible for the privacy practices, content, or security of third-party sites. Clicking a third-party link will take you away from our Site and you will be subject to the privacy policy of that third party. We encourage you to read the privacy policies of every third-party site you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, business operations, applicable law, or new regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes affecting your rights, we will provide additional notice such as a prominent banner on the Site or an email notification sent to the address on file for your account. Your continued use of the Site after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the Site and may request deletion of your personal information as described in Section 5.

12. Contact Us

For questions, concerns, privacy rights requests, or other inquiries regarding this Privacy Policy or our data practices, please contact us at:

Pastel Protein LLC

Support@PastelProtein.com

www.PastelProtein.com

We will respond to all privacy-related inquiries within 45 days. For California residents submitting CCPA/CPRA requests, please include "California Privacy Request" in the subject line. For residents of other states exercising state-specific privacy rights, please include your state of residence and the specific right you are exercising.