Privacy policy

This policy explains what personal data Paw Guardian collects when you visit or order from pawguardian.store, why we collect it, who we share it with and what control you have. We have tried to write it in plain language.

Last updated: September 2026

1. Who is responsible for your data

Paw Guardian is the data controller for personal data collected through pawguardian.store. For any privacy question or request, email support@pawguardian.store with “PRIVACY” in the subject line.

2. What we collect

Information you give us

• Name, delivery address and billing address
• Email address and, if you provide one, a phone number for delivery updates
• Order history and any correspondence with our support team
• Reviews, photographs or testimonials you choose to submit

Information collected automatically

• Device and browser type, operating system, screen size and language
• IP address and approximate location derived from it
• Pages viewed, products clicked, time on site and referring website
• Cookie identifiers used for cart, session and analytics purposes

What we never see. Full card numbers, CVV codes and bank credentials are captured directly by our payment providers in their own secure environment. They never reach our servers, and we could not disclose them if we wanted to.

3. Why we use it

• To fulfil your order — processing payment, printing labels, arranging delivery, handling returns. Legal basis: performance of a contract.
• To communicate with you — order confirmations, dispatch and tracking notices, and replies to your enquiries. Legal basis: contract and legitimate interest.
• To send marketing — field updates, new collections and offers, only where you have opted in. Legal basis: consent, withdrawable at any time.
• To improve the store — understanding which pages, products and adverts work. Legal basis: consent for non-essential cookies, otherwise legitimate interest.
• To prevent fraud and meet legal duties — verifying transactions and keeping tax and accounting records. Legal basis: legal obligation and legitimate interest.

4. Cookies and tracking

We use three kinds of cookies. Essential cookies keep your cart and session working and cannot be turned off without breaking the store. Analytics cookies tell us, in aggregate, how the site is used. Advertising cookies let us measure whether our adverts reach people who are interested and avoid showing them to people who are not.

You may decline analytics and advertising cookies in the banner shown on your first visit, and change your mind later through your browser settings. Declining them does not affect your ability to order.

5. Who we share data with

We share only what a service needs in order to do its job, and only with processors bound by contract to protect it:

• E-commerce platform and hosting — Shopify, which operates our store infrastructure
• Payment providers — to authorise and settle transactions and process refunds
• Shipping carriers and fulfilment partners — to deliver your parcel
• Email and reviews services — to send transactional email and collect verified reviews
• Analytics and advertising platforms — where you have consented
• Professional advisers and authorities — where we are legally required to disclose

We do not sell your personal data. We have never done so and have no plans to. We do not share your data with our feeding partners.

6. International transfers

Some of our service providers operate outside your country, including in the United States. Where data is transferred internationally, it is protected by recognised safeguards such as standard contractual clauses or an adequacy decision.

7. How long we keep it

• Order and transaction records: for as long as tax and accounting law requires, typically six to seven years.
• Support correspondence: up to three years after the enquiry is closed.
• Marketing contacts: until you unsubscribe, plus a suppression record so we do not accidentally email you again.
• Analytics data: in aggregated or pseudonymised form, up to 26 months.

8. Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, receive a portable copy, object to or restrict our processing, withdraw consent, and opt out of targeted advertising or any “sale” or “sharing” of personal information as those terms are defined in US state privacy laws.

Email support@pawguardian.store to exercise any of these. We respond within 30 days and never charge a fee or treat you differently for asking. We may ask you to confirm your identity first, to make sure we are not handing your data to someone else.

9. Marketing preferences

Every marketing email carries a one-click unsubscribe link that works immediately. Unsubscribing stops marketing only — you will still receive transactional email about orders you have placed.

10. Security

Our store runs over encrypted HTTPS connections, payments are handled by PCI-DSS compliant providers, and administrative access is limited to the people who need it and protected by two-factor authentication. No system is perfectly secure, but if a breach ever affected your data we would notify you and the relevant regulator as the law requires, promptly and without downplaying it.

11. Children

Our store is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Automated decisions

We do not make decisions about you by purely automated means, other than routine fraud screening by our payment providers. If an order is declined by that screening you can email us and a person will review it.

13. Changes to this policy

We update this policy when our practices or the law change, and revise the date at the top. Material changes affecting your rights will be announced by email to subscribers.

14. Contact and complaints

Paw Guardian · pawguardian.store
Email: support@pawguardian.store
Support hours: Monday to Friday, 9:00–18:00

If you are unhappy with our response, you have the right to complain to your national data-protection authority. We would rather you told us first, and gave us the chance to put it right.