1) Data Controller

2) What data we process

• Identification & contact: name, email, phone
• Address details: shipping and billing address
• Order details: items, size/variant, price, date, shipping, payment, order status
• Communication: inquiries, emails, complaints, withdrawals, service communication
• Customisation / made-to-order: e.g. dog’s name, phone number on a collar, embroidery text, measurements (if provided)
• Technical data: cookies and website usage data (see “Cookies”)

If you provide personal data of a third party for customisation (e.g. the owner’s phone number), you confirm you are authorised to share such data.

3) Purposes and legal bases

3.1 Orders, payments, delivery

Purpose: conclusion and performance of the purchase contract, delivery, order communication.
Legal basis: performance of a contract.

3.2 Accounting and tax obligations

Purpose: issuing and keeping accounting/tax documents.
Legal basis: compliance with a legal obligation.
Retention: tax documents are kept for 10 years from the end of the relevant tax period.

3.3 Complaints, withdrawals, disputes

Purpose: handling complaints/returns, exercising and defending legal claims.
Legal basis: legal obligation and/or legitimate interest (protection of our rights).

3.4 Customer care

Purpose: answering questions, recommending size, locating orders, customer support.
Legal basis: legitimate interest or performance of a contract (depending on the request).

3.5 Newsletter and marketing emails

Purpose: sending news and offers.
Legal basis: consent (opt-in) or sending to customers under applicable law, always with an easy opt-out.

Unsubscribe link is included in every email.

4) Who we share data with

We share personal data only to the necessary extent with the following categories of recipients:

• carriers and pickup points (depending on shipping method and destination country)
• payment providers (payment gateway/card processing, bank – depending on payment method)
• e-shop platform and technical providers (hosting, maintenance, administration)
• accounting/tax services (if external)
• IT and security providers (system administration, backups, security)
• analytics/marketing tools only based on cookie consent

5) Transfers outside the EU/EEA

If we use tools based outside the EU/EEA (typically advertising/analytics systems), personal data may be transferred outside the EU/EEA. In such cases we comply with GDPR and use appropriate safeguards (e.g. standard contractual clauses) and/or request consent via the cookie banner.

6) Retention periods

• Orders and related communication: for the time needed to fulfil the order and subsequently for complaints and legal claims
• Tax documents: 10 years
• Inquiries without an order: as long as necessary to handle the request
• Newsletter: until you unsubscribe / withdraw consent
• Cookies: depending on cookie type and your consent settings

7) Your rights

You have the right to:

• access your personal data
• rectification
• erasure (when applicable)
• restriction of processing
• data portability (in cases defined by GDPR)
• object to processing based on legitimate interest (especially marketing)
• withdraw consent at any time (where consent is the legal basis)

You may lodge a complaint with the competent data protection authority.

8) Security

We protect personal data using technical and organisational measures: access management, passwords, encrypted transfers (HTTPS), backups, and limiting access to authorised persons only.

9) Cookies

• Necessary cookies are required for the e-shop to function (e.g. cart, security, login).
• Analytics and marketing cookies are used only if you give consent in the cookie banner. Refusal must be easy, and settings can be changed later.

Cookie settings can be changed via the “Cookie settings” link on the website (if enabled in the template).

10) Updates

We may update this policy from time to time. The current version is always available on this page.

Last update: 3 Jan 2026