PRIVACY POLICY

Painted Tree Boutiques

Last Updated: March 12, 2026

Effective Date: March 12, 2026

Thank you for being part of the Painted Tree Boutiques community. Painted Tree Boutiques, LLC (“Company,” “we,” “us,” or “our”), located at 15400 Chenal Pkwy, Suite 200, Little Rock, AR 72211, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have.

This Privacy Policy applies when you:

Visit our website at https://paintedtree.com or any affiliated website that links to this Policy
Register for or use any of our Services, including vendor/shop owner registration
Communicate with us via email, phone, web forms, or live chat
Opt in to receive SMS/text message communications from us
Engage with us through social media platforms
Participate in any promotional campaigns, events, contests, or sweepstakes we operate

Please read this Privacy Policy carefully. If you do not agree with its terms, please discontinue use of our Services.

1. Information We Collect

2. How We Use Your Information

3. SMS / Text Messaging — Marketing Communications Disclosure

4. Email Marketing

5. Sharing Your Information

6. Third-Party Service Providers

7. Cookies and Tracking Technologies

8. How Long We Keep Your Information

9. How We Protect Your Information

10. Your Privacy Rights

11. Do-Not-Track Signals

12. Children’s Privacy

13. California Residents — Additional Rights

14. Nevada Residents

15. European / UK / Swiss Residents

16. Vendor / Shop Owner Data

17. Testing Users and Beta Program Participants

18. Third-Party Websites and Links

19. Updates to This Policy

20. How to Contact Us

21. How to Review, Update, or Delete Your Data

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with us. This includes:

Contact Information: first and last name, email address, mailing address, billing address, phone number (including mobile number)
Account Credentials: username, password, security questions
Payment Information: credit/debit card numbers, billing address, and other payment data. All payment processing is handled by our third-party processors (Stripe, Tipalti); we do not store full card numbers on our servers
Profile Information: profile photos, preferences, shop/vendor details
Communications: messages, feedback, support requests, survey responses, testimonials
SMS Opt-In Data: mobile phone number, opt-in timestamp, opt-in source, and consent records for text message programs
Marketing Preferences: your preferences for receiving promotional communications

1.2 Information Collected Automatically

When you visit our Website or use our Services, we automatically collect:

Log Data: IP address, browser type, operating system, referring URLs, pages viewed, time/date of visit, and other diagnostic information
Device Data: device identifiers, hardware model, mobile carrier, and system configuration
Location Data: approximate location derived from your IP address. Precise location is only collected if you grant explicit permission
Cookie and Tracking Data: see Section 7 for full details
Usage Analytics: clickstream data, features used, session duration, and error logs

1.3 Information from Third Parties

We may obtain information about you from outside sources, including:

Public databases and data providers for marketing enrichment
Social media platforms (e.g., Facebook, Instagram) if you connect an account or interact with our pages
Joint marketing partners and affiliate programs
Advertising networks for retargeting purposes

We combine this information with data we collect directly to improve our Services and marketing.

2. HOW WE USE YOUR INFORMATION

We use collected data for the following purposes:

2.1 Service Delivery

Process registrations, orders, payments, returns, and exchanges
Maintain and operate vendor/shop owner accounts
Provide customer support and respond to inquiries
Enable user-to-user communications with consent

2.2 Communications

Send transactional and account-related notices (receipts, password resets, policy changes)
Send marketing and promotional emails — with your consent and subject to opt-out rights (see Section 4)
Send SMS/text marketing messages — only to users who have expressly opted in (see Section 3)

2.3 Marketing and Advertising

Deliver targeted advertising and personalized content
Administer contests, sweepstakes, and promotional campaigns
Measure the effectiveness of marketing campaigns

2.4 Business Operations

Conduct data analysis and identify usage trends
Improve our Website, products, and Services
Prevent fraud, monitor security, and enforce our Terms of Use
Comply with legal obligations and respond to legal requests
Facilitate business transfers, mergers, or acquisitions

3. SMS / TEXT MESSAGING — MARKETING COMMUNICATIONS DISCLOSURE

IMPORTANT: By opting in to our SMS program, you consent to receive recurring automated marketing text messages from Painted Tree Boutiques. Consent is NOT required as a condition of purchase.

3.1 Program Description

Painted Tree Boutiques operates an SMS/text messaging program through which we send promotional and marketing messages, special offers, new product announcements, event invitations, store updates, and service-related alerts to customers who have opted in.

3.2 How to Opt In

You may opt in to our SMS program by:

Texting a designated keyword (e.g., JOIN or DEALS) to our shortcode or long code number
Submitting your mobile number through an opt-in form on our Website and checking the SMS consent checkbox
Providing your mobile number verbally or in writing at one of our store locations with express consent
Completing a web sign-up form or checkout flow that includes a clearly labeled SMS opt-in checkbox

By opting in, you expressly consent to receive recurring automated marketing text messages from Painted Tree Boutiques at the mobile number you provide. Message frequency varies and may include multiple messages per week. Standard message and data rates may apply.

3.3 Marketing Disclosure

MARKETING DISCLOSURE: Messages sent through our SMS program may include promotional offers, discounts, sales announcements, new product launches, event information, and other marketing content. These messages are commercial in nature and are sent for marketing purposes. By opting in to our SMS program, you acknowledge that you are consenting to receive marketing communications via text message.

You are not required to consent to receive marketing text messages as a condition of purchasing any goods or services from Painted Tree Boutiques. Your decision to opt in or opt out will not affect your ability to shop with us.

3.4 How to Opt Out

You may opt out of our SMS marketing program at any time by:

Replying STOP to any text message you receive from us
Replying QUIT, CANCEL, UNSUBSCRIBE, or END (all are accepted)
Contacting us at [email protected] and requesting removal
Calling us at (844) 762-3342

After you send STOP, we will send you a one-time confirmation message confirming your opt-out. You will then receive no further marketing SMS messages from us. You may opt back in at any time by texting START or by re-enrolling through our Website.

3.5 Help

For help with our SMS program, reply HELP to any message or contact us at [email protected] or (844) 762-3342.

3.6 Data Handling for SMS

We collect and store your mobile phone number, opt-in method and timestamp, and message delivery records solely for the purpose of operating our SMS program and maintaining opt-in/opt-out records.

We will NOT share, sell, rent, lease, or transfer your mobile phone number or SMS opt-in consent information to any third party for their own marketing or promotional purposes. Your mobile number is shared only with our SMS platform providers who facilitate message delivery, and solely for that operational purpose.

No mobile information will be shared with third parties or affiliates for marketing/promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

3.7 Supported Carriers

Our SMS program is available on all major U.S. carriers, including but not limited to AT&T, Verizon, T-Mobile, Sprint, Boost Mobile, and U.S. Cellular. Carrier availability may vary.

3.8 MMS

Where supported, we may send multimedia messages (MMS) including images, GIFs, or video. Standard message and data rates apply.

4. EMAIL MARKETING

With your consent, we may send you promotional emails about our products, Services, events, and offers. You can opt out of marketing emails at any time by:

Clicking the “Unsubscribe” link in any marketing email
Emailing us at [email protected] with the subject line “Unsubscribe”

Even after opting out of marketing emails, you may still receive transactional or service-related emails such as order confirmations, password resets, or account notices, as these are necessary for the administration of your account.

5. SHARING YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

Consent: We share information when you have given us specific consent to do so.

Service Providers: We share information with vendors and contractors who perform services on our behalf (see Section 6).

Legal Requirements: We may disclose information when required by law, court order, subpoena, or governmental request, or when necessary to protect our legal rights.

Safety: We may disclose information to investigate, prevent, or take action regarding potential fraud, threats to safety, or illegal activities.

Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. You will be notified via a prominent notice on our Website of any change in ownership or uses of your information.

Aggregated / Anonymized Data: We may share anonymized, aggregated data that cannot reasonably identify you.

6. THIRD-PARTY SERVICE PROVIDERS

We work with the following categories of third-party service providers who may have access to your personal data solely to perform services on our behalf:

Payment Processors (e.g., Stripe, Tipalti)
SMS and Mobile Messaging Platforms
Email Marketing Services
Cloud Hosting and Infrastructure Providers
Data Analytics and Reporting Services
Advertising and Retargeting Platforms
Customer Support Platforms
Fraud Detection and Security Services
Social Media Platforms (e.g., Facebook, Pinterest, Instagram, TikTok)
Mapping and Location Services (e.g., Google Maps API)
Performance Monitoring Tools

Each provider is bound by contractual obligations to maintain the confidentiality and security of your data and to use it only for the purposes we specify.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and similar tracking technologies to collect and store information about your interactions with our Website.

7.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for core functionality such as login sessions and shopping carts
Performance / Analytics Cookies: Help us understand how visitors use our Website (e.g., Google Analytics)
Functionality Cookies: Remember your preferences and settings
Targeting / Advertising Cookies: Used to deliver relevant ads and track campaign performance (e.g., Facebook Pixel, StackAdapt)

7.2 Your Cookie Choices

Most web browsers accept cookies by default. You can configure your browser to refuse cookies or alert you when cookies are set. Note that disabling certain cookies may affect the functionality of our Website. To opt out of interest-based advertising, visit: https://www.aboutads.info/choices/ or https://optout.networkadvertising.org/

8. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Specifically:

Account data: retained for the duration of your account and up to 7 years after account closure for legal and business purposes
Purchase and transaction records: retained for a minimum of 7 years for accounting, tax, and legal compliance
SMS opt-in and opt-out records: retained for a minimum of 5 years to demonstrate regulatory compliance
Marketing preference records: retained until you withdraw consent, plus an additional period for compliance documentation
Log and usage data: typically retained for 12–24 months

When data is no longer needed, we delete or anonymize it. Where deletion is technically impractical (e.g., backup archives), we isolate the data from active processing until deletion is feasible.

9. HOW WE PROTECT YOUR INFORMATION

We implement industry-standard technical and organizational security measures, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls limiting employee access to personal data on a need-to-know basis
Regular security assessments and vulnerability scanning
Payment Card Industry (PCI-DSS) compliant payment processing
Vendor security reviews for third-party service providers

Despite these measures, no system is completely secure. We cannot guarantee that unauthorized parties will never gain access to your information. If you become aware of any security issue, please contact us immediately at [email protected].

10. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Know / Access: Request a copy of the personal information we hold about you
Right to Correct: Request correction of inaccurate or incomplete information
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Opt Out: Opt out of the sale of personal information (we do not sell personal data), targeted advertising, or profiling
Right to Portability: Receive your data in a portable, machine-readable format
Right to Withdraw Consent: Withdraw consent for any processing based on consent, at any time
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, please contact us using the information in Section 20. We will respond to verifiable requests within the timeframe required by applicable law (typically 30–45 days).

11. DO-NOT-TRACK SIGNALS

Some browsers include a Do-Not-Track (“DNT”) feature that signals to websites that you do not want to be tracked. Because no uniform technical standard for DNT has been established, we do not currently respond to DNT signals. If a legal standard is adopted in the future, we will update this policy accordingly.

12. CHILDREN’S PRIVACY

Our Website and Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete it. If you believe we may have collected information from a child under 13, please contact us at [email protected].

13. CALIFORNIA RESIDENTS — ADDITIONAL RIGHTS

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you additional rights.

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories: identifiers (name, email, IP address, phone), commercial information (purchase history), internet/electronic activity (browsing data), geolocation data, and inferences drawn from the above.

13.2 Your CCPA/CPRA Rights

Right to Know (categories and specific pieces)
Right to Delete
Right to Correct
Right to Opt Out of Sale or Sharing (we do not sell personal information)
Right to Limit Use of Sensitive Personal Information
Right to Non-Discrimination

13.3 Shine the Light

California Civil Code Section 1798.83 allows California residents to request, once per year, information about personal information we disclosed to third parties for direct marketing. To make this request, contact us at [email protected].

13.4 Minors Under 18

California residents under 18 with a registered account may request removal of publicly posted content by contacting us with their account email and a statement of California residency.

14. NEVADA RESIDENTS

Nevada residents may opt out of the “sale” of personal information as defined by Nevada Revised Statutes Chapter 603A. We do not currently sell personal information. To submit an opt-out request anyway, please contact us at [email protected].

15. EUROPEAN / UK / SWISS RESIDENTS

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent laws. Our legal bases for processing include: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests.

To lodge a complaint with a supervisory authority:

EEA: https://ec.europa.eu/justice/data-protection/bodies/authorities/
Switzerland: https://www.edoeb.admin.ch/edoeb/en/home.html

16. VENDOR / SHOP OWNER DATA

If you register as a vendor or shop owner through our platform (vendors.paintedtree.com), we collect additional business information including business name, tax identification information, banking details for payments, product listings, inventory data, and sales history. This information is used solely to operate the vendor platform, process payments, and provide analytics to you. Vendor financial data is processed through our payment partners and is subject to their privacy policies.

17. TESTING USERS AND BETA PROGRAM PARTICIPANTS

From time to time, we may invite users to participate in beta testing, user research, or pilot programs for new features. If you participate:

We may collect additional usage data, feedback, and session recordings to evaluate new functionality
Testing data is used solely for product development and improvement purposes
We will inform you at the time of enrollment what additional data we collect and how it is used
Participation is voluntary and you may withdraw at any time without affecting your standard account
Testing data may be retained for up to 3 years for product development analysis
Your identity will not be disclosed in any published research or case studies without your express written consent

18. THIRD-PARTY WEBSITES AND LINKS

Our Website may contain links to third-party websites, social media platforms, and external services. This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies before providing any personal information.

19. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the “Last Updated” date at the top of this Policy
Post the updated Policy on our Website
Where required by law, notify you via email or prominent notice on our Website

We encourage you to review this Policy periodically. Your continued use of our Services after any update constitutes acceptance of the revised Policy.

20. HOW TO CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Painted Tree Boutiques, LLC

1 Allied Dr, Suite 1300

Little Rock, AR 72211

United States

Email: [email protected]

Phone: (844) 762-3342

Website: https://paintedtree.com/contact

21. HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

To exercise your rights to access, correct, or delete your personal information, you may:

Submit a request at: https://paintedtree.com/contact
Email us at: [email protected] with subject line “Privacy Request”
Call us at: (844) 762-3342

We will verify your identity before processing your request and will respond within 30 days (or as required by applicable law). We may request additional information to confirm your identity and locate your records.

This policy is effective as of March 12, 2026.

TABLE OF CONTENTS