Privacy Policy | ePaw

1. Who We Are

ePaw Pet Supplies ("ePaw", "we", "us", "our") is a UK-based online retailer of eco-friendly pet products. We are committed to protecting your privacy and handling your personal data responsibly.

Data Controller: ePaw Pet Supplies
Contact: hello@epawpet.com
Website: epawpet.com

2. What Data We Collect

We collect the following personal data when you use our website or place an order:

Identity Data: Name, title
Contact Data: Email address, phone number, delivery address, billing address
Transaction Data: Details of products purchased, payment information (processed securely by Stripe)
Technical Data: IP address, browser type, device information, pages visited
Marketing Data: Your preferences for receiving marketing communications

3. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your orders
To send order confirmations and shipping updates
To respond to your enquiries and provide customer support
To send marketing communications (only with your consent)
To improve our website and services
To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under UK GDPR, we process your data based on:

Contract: Processing necessary to fulfil your order
Legitimate Interest: To improve our services and prevent fraud
Consent: For marketing communications (you can withdraw at any time)
Legal Obligation: To comply with tax, accounting, and other legal requirements

5. Data Sharing

We share your data only with trusted third parties who help us run our business:

Payment Processors: Stripe (for secure payment processing)
Delivery Partners: Royal Mail, courier services (to deliver your orders)
Email Service: Resend (for transactional emails)
Analytics: Vercel Analytics (anonymised website usage data)

We never sell your personal data to third parties. All our service providers are GDPR compliant and bound by data processing agreements.

6. Data Retention

We keep your personal data only for as long as necessary:

Order data: 7 years (UK tax requirements)
Marketing data: Until you unsubscribe or request deletion
Website analytics: 26 months (anonymised)
Customer support enquiries: 3 years

7. Your Rights (GDPR)

Under UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we use your data
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interest
Withdraw Consent: Withdraw marketing consent at any time

To exercise any of these rights, email us at hello@epawpet.com. We will respond within 30 days.

8. Data Security

We take appropriate security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

SSL/TLS encryption for all data transmission
Secure payment processing via Stripe (PCI DSS compliant)
Regular security updates and monitoring
Limited access to personal data on a need-to-know basis

9. International Transfers

Your data may be transferred to and processed in countries outside the UK (e.g., USA for some service providers). Where this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK ICO.

10. Cookies

We use cookies to improve your experience on our website. For full details, please see our Cookie Policy.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact & Complaints

If you have any questions about this privacy policy or want to exercise your rights, contact us at:

Email: hello@epawpet.com

If you're not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113