Privacy policy

Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Wild Orchid Garden LLC, operating as RetroReal (“we,” “us,” “our”), collects, uses, and protects your personal information when you visit retroreal.co or place an order. We handle personal information in line with applicable US laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Where we serve customers in the European Union or United Kingdom, we also apply the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who We Are

Wild Orchid Garden LLC (operating as RetroReal)
5158 Hollywood Blvd
Los Angeles, CA 90027
United States
Email: support@retroreal.co
Phone: [your phone number]

2. What Information We Collect

Depending on how you use our website, we may collect:

  • Identity and contact information: name, email address, phone number, billing and shipping address
  • Order information: items purchased, order history, payment status. We do not store full card details; payments are processed by our payment providers.
  • Technical information: IP address, browser type, device information, pages visited, referring website
  • Communications: messages you send us by email or contact form
  • Marketing preferences: whether you have subscribed to our newsletter

3. How We Use Your Information

Purpose Legal basis (for EU/UK customers under GDPR)
Processing and delivering your order Art. 6(1)(b): performance of a contract
Customer service and handling returns Art. 6(1)(b): performance of a contract
Accounting, tax, and legal record-keeping Art. 6(1)(c): legal obligation
Fraud prevention and website security Art. 6(1)(f): legitimate interest
Sending our newsletter (only if you opt in) Art. 6(1)(a): consent
Website analytics and non-essential cookies Art. 6(1)(a): consent

4. Who We Share Your Information With

We share personal information only where necessary to run our store:

  • Shipping carriers (e.g., [USPS / UPS / FedEx]): to deliver your order
  • Payment providers (e.g., [PayPal / Stripe]): to process payments securely
  • E-commerce platform and hosting provider (e.g., [Shopify]): to operate the website
  • Email and newsletter service (e.g., [Klaviyo / Mailchimp]): only if you subscribe
  • Analytics providers (e.g., [Google Analytics]): only with your cookie consent where required
  • Authorities: where required by law

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law. [Delete or change this sentence if you run ad tracking such as the Meta Pixel or Google Ads remarketing; see note below.]

5. International Transfers

We are based in the United States, and your information is stored and processed in the US. If you are located in the EU or UK, your data is transferred to the US. Where this happens, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or a provider’s certification under the EU-US Data Privacy Framework (and UK Extension).

6. Cookies

Our website uses cookies. Essential cookies are required for the site to function (for example, keeping items in your cart). Non-essential cookies (analytics, marketing) are set only with your consent where the law requires it. You can give or withdraw consent at any time via the cookie banner or your browser settings.

7. How Long We Keep Your Information

  • Order and invoice records: 7 years, for US tax and accounting purposes
  • Customer account data: until you delete your account or request deletion
  • Newsletter data: until you unsubscribe
  • Technical log data: up to 30 days
  • Customer service correspondence: up to 3 years after the inquiry is closed

8. Your Privacy Rights

California residents. Under the CCPA/CPRA, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of your personal information
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of your personal information
  • Limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require this right)
  • Not be discriminated against for exercising any of these rights

You may use an authorized agent to submit a request on your behalf. We will verify your identity before responding and will reply within 45 days.

EU and UK customers. Under the GDPR and UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted (“right to be forgotten”)
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time (this does not affect processing carried out before withdrawal)
  • Lodge a complaint with the data protection authority in your country of residence, or, in the UK, with the Information Commissioner’s Office (ICO)

We will respond to GDPR requests within one month.

Customers in other US states. Residents of other states with consumer privacy laws may have similar rights, and we will honor requests as required by applicable law.

To exercise any of these rights, email support@retroreal.co.

9. Security

We use SSL/TLS encryption across our website and work only with PCI-DSS compliant payment providers. Access to personal information is restricted to staff who need it to perform their role.

10. Children

Our website is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.