3. UK GDPR & Data Protection Policy

At Paws Garden, we respect your privacy and are committed to protecting the personal information you provide when using our website, placing an order, contacting us, or interacting with our services.

This Privacy Policy explains what personal data we may collect, why we collect it, how we use it, how we protect it, and what rights you have under applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3.1 Information We Collect

When you use our website or place an order, we may collect information necessary to provide our services. This may include:

• Full name;

• Billing and delivery address;

• Email address;

• Telephone number, where provided;

• Order and transaction information;

• Information submitted through customer support;

• Website usage and technical information;

• Device, browser and IP address information;

• Marketing preferences and communication preferences.

Payment information is generally processed by our third-party payment providers. Paws Garden does not intentionally retain complete payment card details when such information is securely processed by the relevant payment provider.

You should only provide personal information that is accurate and necessary for the service you are requesting.

3.2 How We Use Your Information

We may use your personal information for legitimate business purposes, including:

• Processing and fulfilling orders;

• Arranging delivery of purchased products;

• Providing customer support;

• Responding to enquiries and requests;

• Processing refunds, returns and other transactions;

• Preventing fraud and protecting our website;

• Maintaining and improving our website;

• Managing customer accounts where applicable;

• Complying with legal and regulatory obligations;

• Sending marketing communications where we have a lawful basis to do so;

• Understanding website usage and improving the customer experience.

We will not use your personal information for purposes that are incompatible with the reasons for which it was originally collected without an appropriate lawful basis.

3.3 Lawful Basis for Processing

Under the UK GDPR, personal data must be processed on a lawful basis. Depending on the circumstances, Paws Garden may rely on one or more of the following lawful bases:

Contract: When processing is necessary to fulfil an order or provide a service requested by you.

Legal obligation: When we are required to process or retain information to comply with applicable laws or regulations.

Legitimate interests: When processing is necessary for legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

Consent: Where you have voluntarily provided consent, such as for certain marketing communications or optional cookies.

Where processing is based on consent, you may withdraw your consent at any time.

3.4 Sharing Personal Information

We may need to share certain information with trusted third parties that help us operate our business. These may include:

• Payment processors;

• Delivery and fulfilment providers;

• E-commerce and website service providers;

• Technology and hosting providers;

• Customer support services;

• Analytics and advertising providers;

• Professional advisers where necessary;

• Government authorities or law-enforcement bodies where legally required.

Third parties should only receive information that is reasonably necessary for the relevant service or purpose.

We do not sell your personal information to third parties as a commercial product.

3.5 International Data Transfers

Some service providers used by Paws Garden may process personal information outside the United Kingdom.

Where personal data is transferred internationally, we will seek to ensure that appropriate safeguards are in place in accordance with applicable data protection requirements. These safeguards may include adequacy regulations, approved contractual protections, or other lawful transfer mechanisms.

3.6 Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

However, no online service can guarantee absolute security. Customers should also take reasonable precautions when using online services, including protecting account credentials and avoiding sharing sensitive information through unsecured communication channels.

If we become aware of a personal data breach that is subject to notification requirements, we will take the appropriate steps required by applicable law.

3.7 Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, resolving disputes, maintaining appropriate business records and complying with legal obligations.

Different types of information may therefore be retained for different periods.

When personal information is no longer required, it may be securely deleted, anonymised or otherwise disposed of in accordance with applicable requirements.

3.8 Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have rights including:

• The right to request access to personal information we hold about you;

• The right to request correction of inaccurate or incomplete information;

• The right to request deletion of personal information in certain circumstances;

• The right to request restriction of processing in certain circumstances;

• The right to object to certain types of processing;

• The right to data portability where applicable;

• The right to withdraw consent where processing relies on consent.

You may exercise these rights by contacting Paws Garden using the contact details provided on our website.

We may need to verify your identity before completing certain requests in order to protect your personal information.

3.9 Marketing Communications

Where required, Paws Garden will only send certain marketing communications where we have an appropriate lawful basis to do so.

If you no longer wish to receive promotional emails, you may unsubscribe using the relevant unsubscribe option included in the communication or contact us directly.

Unsubscribing from marketing communications does not necessarily prevent us from sending essential transactional or service-related messages, such as order confirmations, delivery updates or information concerning an existing purchase.

3.10 Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate essential website functions, remember preferences, understand website usage and, where applicable, support advertising and marketing activities.

Some cookies may be necessary for the website to function properly, while others may be optional.

Where applicable, you may manage your cookie preferences through the cookie consent tools provided on our website.

3.11 Children's Privacy

Our website is intended for general consumers and is not specifically directed towards children.

We do not knowingly seek to collect unnecessary personal information from children. If you believe that a child has provided personal information to us in circumstances where this should not have occurred, please contact us so that we can assess and take appropriate action.

3.12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal requirements or data-processing practices.

When changes are made, the updated version will be published on this page with a revised effective date where appropriate.

Customers are encouraged to review this policy periodically to remain informed about how personal information is handled.

3.13 Contact

If you have questions about this Privacy Policy, wish to exercise a data protection right, or have concerns regarding the handling of your personal information, please contact Paws Garden through the official contact details provided on our website.

Where appropriate, you may also have the right to raise a concern with the UK's Information Commissioner's Office (ICO), which is responsible for overseeing data protection compliance in the United Kingdom.