Privacy policy

Privacy Policy

Effective date: 19 October 2026

This Privacy Policy explains how PawFectHeaven ("PawFectHeaven", "we", "us" or "our") collects, uses, shares and protects personal information when you visit pawfectheaven.com, buy from us, subscribe to our products, receive our emails, or contact us (together, the "Services"). PawFectHeaven is a small business based in the United Kingdom that sells a liquid taurine supplement for cats online.

Please read this Privacy Policy carefully. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Sections 13 to 16 contain additional information for people in the United Kingdom and European Economic Area, the United States (including our California notice at collection), Canada and Australia. Please read the section that applies to you.

1. Who we are and how to reach us

PawFectHeaven is responsible for the personal information described in this Privacy Policy. Where the UK General Data Protection Regulation applies, PawFectHeaven is the "controller" of your personal information.

2. Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer identify you.

Information you give us

  • Contact data, such as your name, email address, shipping address, billing address and phone number (phone number is optional).
  • Order and transaction data, such as the products you buy, order numbers, order history, subscription details, returns, refunds and the post-purchase offers you accept or decline.
  • Payment data. When you pay, your card or other payment details are collected and processed directly by our payment processors, such as Shopify Payments and PayPal. We do not see or store your full card number. We receive limited information such as the payment method type, the last four digits of a card, and confirmation that the payment went through.
  • Account data. If you create or use a Shopify customer account on our store (for example, to manage your subscription), we process your login details and account settings.
  • Communications data, such as the content of emails and other messages you send us, including any information about your cat that you choose to share with our support team.
  • Marketing preferences, such as whether you have signed up for our emails, and your choices about cookies and advertising.
  • Recipient data. If you send an order to someone else, we collect the recipient's name, address and, if you provide it, phone number so the order can be delivered. Please only give us someone else's details if you have their permission.

Information we collect automatically

When you visit our website or open our emails, we, our service providers and our advertising partners may automatically collect:

  • Device data, such as your IP address, browser type, operating system, device type, language settings, cookie and advertising identifiers, and general location (such as country, region or city) based on your IP address. We do not collect precise geolocation.
  • Online activity data, such as pages and products you view, items you add to your cart, how long you spend on a page, the website or ad that brought you to us, and checkouts you start or complete. Our session recording tool also records how you scroll, click and move around our pages (see section 3).
  • Email engagement data, such as whether you open our emails, click links in them, or unsubscribe. We do this using small images (sometimes called pixels or web beacons) and tracked links in our emails.

Information from other sources

  • Service providers, such as payment processors (confirming payments and helping prevent fraud) and logistics and tracking partners (delivery status updates).
  • Advertising and analytics partners, such as information about whether you saw or clicked one of our ads.
  • Business transaction partners, if we are involved in a merger, acquisition, sale of assets or similar transaction.

3. Cookies, pixels and similar technologies

We use cookies, pixels, tags, scripts and similar technologies on our website. These fall into four groups:

  • Strictly necessary: needed to run the store, such as keeping items in your cart, processing checkout, keeping the site secure and remembering your cookie choices. These cannot be switched off.
  • Preferences: remember settings such as your country, currency and language.
  • Analytics: help us understand how visitors use our website so we can improve it. These include Shopify's analytics, the Google tag, and Microsoft Clarity. Clarity records session replays and heatmaps showing clicks, scrolling and mouse movement. Clarity is set up to mask sensitive form fields, such as payment details and passwords.
  • Marketing: help us measure our ads and show you relevant ads on other websites and apps. These include the Meta (Facebook and Instagram) pixel, the Google tag for Google Ads, and Klaviyo's website tracking (used to send you relevant emails, such as reminders about items left in your cart).

Server-side connections. We also use a tool called WeTracked to send information about website visits and purchases directly from our store to advertising platforms, such as Meta's Conversions API and Google Ads. This information can include details of the event (for example, a purchase and its value), your IP address, browser details, and contact details such as your email address or phone number, which are usually converted into a scrambled (hashed) format before they are sent. Advertising platforms use this to match events to their users so that we can measure and improve our ads.

Your cookie choices. Our cookie banner is provided by Shopify. Depending on where you live, non-essential cookies may only be used after you agree, or you may opt out of them. You can change your choices at any time using the cookie banner, or the "Cookie preferences" or "Your privacy choices" link on our website when it is shown. You can also block or delete cookies in your browser settings, although parts of the store may not work properly if you block strictly necessary cookies.

4. How we use your personal information

We use personal information for the following purposes, or as otherwise described when we collect it:

  • To provide the Services: to process and fulfill your orders, take payment, ship products and send tracking updates, manage Subscribe & Save subscriptions and recurring payments, offer bundles and post-purchase offers, manage your customer account, and handle returns and refunds.
  • To communicate with you: to send order confirmations, shipping notices, subscription reminders and other service messages, and to answer your questions and support requests.
  • Marketing: to send you marketing emails about our products and offers, and to personalize those emails based on your interests and activity (see section 5).
  • Advertising: to show you ads for our products on other websites and apps (such as Facebook, Instagram and Google), to build audiences of people who may be interested in our products, and to measure how well our ads work. This is sometimes called interest-based or targeted advertising.
  • Analytics and improvement: to understand how people use our website and emails, fix problems, and improve our store, products and offers.
  • Security and fraud prevention: to keep our store, customers and business safe, and to detect, prevent and investigate fraud, chargebacks and other harmful or illegal activity.
  • Legal and compliance: to keep tax and accounting records, comply with laws and lawful requests, enforce our terms and policies, and establish, exercise or defend legal claims.
  • Business transactions: in connection with an actual or proposed sale, merger, financing or transfer of all or part of our business.
  • Aggregated and de-identified data: we may create aggregated, de-identified or anonymized information (for example, total sales by country) and use it for our business purposes. We will not try to re-identify it.

We do not use your personal information to train artificial intelligence models. If we want to use your personal information for a new purpose that is not compatible with the purpose we collected it for, we will ask for your consent where the law requires it.

5. Email marketing

We use Klaviyo to send marketing emails. We send marketing emails where you have agreed to receive them or where the law otherwise allows it (for example, to existing customers about similar products). We may personalize these emails based on your interests and activity, for example by reminding you about items left in your cart.

You can unsubscribe at any time using the link at the bottom of any marketing email or by emailing Support@pawfectheaven.com. If you unsubscribe, we may still send you service messages about your orders, subscription or account.

6. How we share your personal information

We do not sell your personal information for money. We share personal information with the following categories of recipients:

Service providers

Companies that process personal information on our behalf to help us run our business, under contracts that limit how they can use it. They include:

  • Store hosting, checkout, payments and cookie banner: Shopify (including Shopify Payments) and PayPal.
  • Subscriptions and offers: Kaching (bundles and Subscribe & Save subscriptions) and Aftersell (post-purchase offers).
  • Order fulfillment and tracking: logistics partners that pack and ship orders, some located outside your country, and Parcel Panel (order tracking pages and shipping updates).
  • Email marketing: Klaviyo.
  • Customer support: Gmail (Google), which hosts our support inbox.
  • Analytics: Microsoft Clarity and Google.
  • Advertising tools: WeTracked, which sends website and purchase events to advertising platforms (see section 3).
  • Professional advisors, such as accountants, lawyers, banks and insurers, when they provide services to us.

Advertising partners

Advertising platforms such as Meta (Facebook and Instagram) and Google receive information through our pixels, tags and server-side connections, as described in section 3, to show and measure our ads. These companies may also use this information for their own purposes in line with their own privacy policies. Under some US state laws this may count as a "sale" or "sharing" of personal information, or "targeted advertising". See section 14 for how to opt out.

Other recipients

  • People you direct us to share with, for example the recipient of an order you send to someone else.
  • Authorities and others: law enforcement, courts, regulators, government authorities and other parties where we believe in good faith that this is required by law or necessary to protect our rights, your safety or the safety of others, or to prevent fraud.
  • Business transferees: a buyer, investor, successor or other party (and their advisors) in an actual or proposed merger, acquisition, financing, sale of assets or similar transaction, or in the event of insolvency.

7. Our relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the Services is transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you live.

To help protect, grow and improve our business, we use certain Shopify enhanced features that use information about your interactions with our store, with other merchants and with Shopify. For these features, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights over it. To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights over that information through the Shopify Privacy Portal.

8. International transfers

We are based in the United Kingdom, and our customers are located in other countries. Many of our service providers are based in the United States, and our logistics partners and other service providers may be located in other countries, some outside your country. This means your personal information will be transferred to, stored in and processed in countries other than the one you live in, including the United Kingdom and the United States. Privacy laws in those countries may not offer the same level of protection as the laws where you live.

Whenever we transfer personal information, we take steps designed to make sure it stays protected in line with this Privacy Policy and the law. More detail on the safeguards we use for transfers out of the United Kingdom is in section 13.

9. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this Privacy Policy, including to meet legal, tax, accounting and reporting requirements, to resolve disputes, and to prevent fraud. In particular:

  • Order, payment and tax records are kept for as long as UK tax and company law requires, which is generally at least six years after the end of the financial year the order falls in.
  • Subscription and account information is kept while your subscription or account is active, and afterwards for as long as needed for the records described above.
  • Marketing data is kept until you unsubscribe or ask us to delete it. After you unsubscribe, we keep a minimal record of your email address so that we can respect your choice and not email you marketing again.
  • Customer support messages are kept for as long as needed to resolve your request and deal with any follow-up questions or claims.
  • Cookie and analytics data is kept for the periods set by each cookie or tool.

To decide how long to keep other information, we consider its amount, nature and sensitivity, the risk of harm from unauthorized use or disclosure, why we hold it and whether we can achieve that purpose another way, and any legal requirements. When we no longer need personal information, we delete it or anonymize it. If that is not possible straight away (for example, because it is held in backups), we store it securely and isolate it from further use until it can be deleted.

10. How we protect your information

We use technical, organizational and physical safeguards designed to protect the personal information we collect, and we choose service providers that also protect it. However, no website, internet transmission or storage system is completely secure, and we cannot guarantee the security of your information. Please do not send sensitive information to us by email or other insecure channels. If you have a customer account, you are responsible for keeping your login details safe.

11. Your choices

  • Marketing emails: click "unsubscribe" in any marketing email, or email us.
  • Cookies and tracking: use our cookie banner, or the "Cookie preferences" or "Your privacy choices" link on our website when it is shown, or change your browser settings.
  • Ad preferences on other platforms: you can manage how Meta and Google use your information for ads at facebook.com/adpreferences and myadcenter.google.com. You can also use the opt-out tools of the Network Advertising Initiative and the Digital Advertising Alliance.
  • Email tracking: most email apps and browsers let you stop images from loading automatically, which blocks the pixels in our emails.
  • Global Privacy Control and Do Not Track: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser, as required by applicable law. If we can link the browser to your customer account, we will apply the opt-out to your account too. To learn more, visit globalprivacycontrol.org. We do not currently respond to other "Do Not Track" browser signals.
  • Choosing not to share information: you can choose not to give us certain information, but we need some information (such as your name, address and email) to process and deliver your order.

12. Your privacy rights and how to use them

Depending on where you live, you may have rights over your personal information, such as the right to access it, correct it, delete it, get a copy of it, or object to or opt out of certain uses. Sections 13 to 16 explain the rights that apply in the UK and EEA, the United States, Canada and Australia.

How to make a request. Email Support@pawfectheaven.com with the subject line "Privacy Request", and tell us which right you want to use.

Verifying your identity. To protect your information, we need to confirm your identity before acting on most requests. We usually do this by matching your request to the email address and order details we have on file, for example by asking you to confirm your request from that email address. We may ask for more information if needed, and we will only use it to verify your request.

Authorized agents. Where the law allows, you can ask someone else to make a request for you by email. We will ask the agent for proof that you have authorized them, and we may also ask you to confirm your identity with us directly.

Response times. We will respond within the time required by the law that applies to you (for example, within one month under UK data protection law, or within 45 days under most US state privacy laws). If the law allows us to extend that time, we will tell you.

No discrimination. We will not treat you differently, for example by charging you a different price or giving you a lower quality of service, because you exercise your privacy rights.

Your rights are not absolute. If we cannot fully meet your request, we will explain why, unless the law prevents us from doing so.

13. Additional information for people in the United Kingdom and European Economic Area

This section applies if UK data protection law (the UK GDPR and the Data Protection Act 2018) or the EU General Data Protection Regulation applies to our processing of your personal information. Because we are based in the United Kingdom, UK data protection law applies to our handling of personal information wherever our customers live.

Controller

PawFectHeaven is the controller of your personal information. You can contact us using the details in section 1.

Our legal bases for using your information

We rely on the following legal bases:

  • Contract: where we need to use your information to perform a contract with you or take steps at your request before entering one.
  • Legitimate interests: where we use your information for our legitimate interests, and your interests and rights do not override them.
  • Legal obligation: where we need to use your information to comply with the law.
  • Consent: where you have given us your consent. You can withdraw consent at any time. This will not affect processing that happened before you withdrew it.

Here is how those legal bases apply to each purpose:

  • Processing, delivering and supporting your orders and subscriptions (contact, order, payment, account and recipient data): contract.
  • Service messages and customer support (contact, order and communications data): contract, and our legitimate interest in answering questions and looking after our customers.
  • Marketing emails (contact data, marketing preferences, order data, online activity and email engagement data): consent where the law requires it. Where we email existing customers about similar products, we rely on our legitimate interest in promoting our business, and you can unsubscribe at any time.
  • Strictly necessary cookies (device and online activity data): our legitimate interest in running a secure, working online store.
  • Analytics cookies and session recordings (device and online activity data): consent.
  • Interest-based advertising and ad measurement, including server-side connections (device data, online activity data, and hashed contact and order data): consent.
  • Improving our store, products and offers using aggregated information (order, device and online activity data): our legitimate interest in understanding our customers and improving our business.
  • Security and fraud prevention (contact, order, payment, device and online activity data): our legitimate interest in protecting our business and customers, and legal obligation where it applies.
  • Tax, accounting and legal compliance (contact, order and payment data): legal obligation.
  • Legal claims and enforcing our terms (any relevant data): our legitimate interest in protecting our rights.
  • Business transactions (any relevant data): our legitimate interest in selling, restructuring or financing our business. We would try to limit the information shared as far as possible.
  • New purposes: the original legal basis if the new purpose is compatible with the one we collected the information for, or otherwise consent.

Sensitive information

We do not ask for special category information about you (such as information about your health, racial or ethnic origin, religion or beliefs). Please do not send us this kind of information. Information about your cat is not usually personal information about you, but we treat it with the same care.

Automated decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. Our payment processors may run automated fraud checks when you pay.

Your rights

You have the right to:

  • Access: ask for information about how we use your personal information and for a copy of it.
  • Correct: ask us to correct inaccurate or incomplete information.
  • Delete: ask us to delete your information where there is no good reason for us to keep using it.
  • Restrict: ask us to limit how we use your information, for example while we check its accuracy.
  • Object: object to our use of your information where we rely on legitimate interests. You can always object to direct marketing.
  • Portability: ask for a copy of information you gave us in a structured, machine-readable format, or ask us to send it to someone else.
  • Withdraw consent: where we rely on your consent, withdraw it at any time.

To use these rights, email Support@pawfectheaven.com (see section 12). There is normally no fee.

Complaints

If you have a concern about how we handle your personal information, please contact us first and we will try to resolve it. You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO):

  • Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
  • Phone: 0303 123 1113 (from outside the UK: +44 303 123 1113)
  • Website: ico.org.uk/make-a-complaint

If you live in the European Economic Area, you can also complain to the data protection authority in your country. A list is available from the European Data Protection Board.

Transfers outside the United Kingdom

When we transfer personal information outside the United Kingdom (for example, to service providers in the United States or to logistics partners in other countries), we make sure it is protected by one of the following:

  • the recipient is in a country that the UK has decided provides an adequate level of protection, or is covered by a UK adequacy arrangement such as the UK Extension to the EU-US Data Privacy Framework; or
  • we use appropriate safeguards, such as the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, approved for use in the UK; or
  • in limited cases, an exception allowed by law, for example where the transfer is necessary to perform our contract with you (such as shipping your order).

You can contact us for more information about the safeguards we use, or to ask for a copy of them.

14. Additional information for people in the United States

This section applies to residents of US states with comprehensive privacy laws that apply to us, including California, Virginia, Colorado, Connecticut and other states with similar laws (together, the "State Privacy Laws"). In this section, "personal information" includes "personal data" and similar terms under those laws, and "sensitive personal information" includes "sensitive data" and similar terms. Not every right applies in every state, and some rights depend on whether a State Privacy Law applies to us.

Notice at collection

Sections 2 to 6 of this Privacy Policy describe the categories of personal information we collect, the sources we collect it from, the purposes we use it for, and who we disclose it to. Section 9 explains how long we keep it. The summary below covers our practices now and during the 12 months before the effective date of this Privacy Policy, using the categories set out in the California Consumer Privacy Act (CCPA):

  • Identifiers (such as name, email address, postal address, phone number, IP address, cookie and advertising identifiers). Purposes: providing the Services, communicating with you, marketing, advertising, analytics, security and legal compliance. Disclosed for business purposes to: service providers, professional advisors and authorities. Sold or shared with: advertising partners (Meta and Google), through cookies, pixels and server-side connections.
  • Customer records (such as name, address, phone number, and limited payment details). Purposes: providing the Services, communicating with you, security and legal compliance. Disclosed for business purposes to: service providers (including payment processors and logistics partners), professional advisors and authorities. Not sold or shared.
  • Commercial information (such as products bought, order history, subscription details and offers accepted). Purposes: providing the Services, marketing, advertising, analytics and legal compliance. Disclosed for business purposes to: service providers and professional advisors. Sold or shared with: advertising partners (for example, purchase events used to measure ads).
  • Internet or other electronic network activity (such as pages viewed, cart activity, session recordings, and email engagement). Purposes: providing the Services, marketing, advertising, analytics and security. Disclosed for business purposes to: service providers, including analytics providers. Sold or shared with: advertising partners.
  • General location (country, region or city based on IP address or address). Purposes: providing the Services, showing local prices, analytics, advertising and security. Disclosed for business purposes to: service providers. Sold or shared with: advertising partners.
  • Inferences (such as interests drawn from your browsing and purchases, used to build advertising audiences). Purposes: marketing and advertising. Disclosed for business purposes to: service providers. Sold or shared with: advertising partners.
  • Sensitive personal information (customer account login details). Purposes: providing the Services and security only. Disclosed for business purposes to: service providers. Not sold or shared.

Information you choose to include in messages to us may contain other categories of personal information not listed above.

Your rights

Depending on your state, you may have the right to:

  • Know and access: ask what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties we disclose it to, and receive a copy of the specific personal information we hold.
  • Correct: ask us to correct inaccurate personal information.
  • Delete: ask us to delete personal information we have collected from you.
  • Portability: receive your personal information in a portable format.
  • Opt out of sale, sharing and targeted advertising: ask us to stop selling or sharing your personal information, or using it for targeted advertising.
  • Limit or opt out of sensitive personal information use: see below.
  • Opt out of profiling: we do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.
  • Appeal: appeal our decision on your request.

Sale, sharing and targeted advertising

We do not sell personal information for money. However, like many online stores, we use advertising cookies, pixels and server-side connections with Meta and Google to show you ads and measure them (see section 3). Under the State Privacy Laws, this may be treated as "selling" or "sharing" personal information, or "targeted advertising". You can opt out by:

  • turning off marketing cookies in our cookie banner, or using the "Cookie preferences" or "Your privacy choices" link on our website when it is shown;
  • emailing Support@pawfectheaven.com with the subject line "Do Not Sell or Share"; or
  • enabling the Global Privacy Control signal in your browser, which we honor as a valid opt-out request (see section 11).

Cookie-based opt-outs apply to the browser and device you use, so you may need to repeat them on each browser or device.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

Sensitive personal information

We do not intentionally collect sensitive personal information about people, other than customer account login details, which we use only to provide the Services and keep them secure. We do not use sensitive personal information to infer characteristics about you, and we do not sell or share it. California residents can still ask us to limit its use to what is necessary to provide the Services by emailing Support@pawfectheaven.com. Residents of Virginia, Colorado, Connecticut and other states with comprehensive privacy laws may have the right to consent to, or opt out of, the processing of sensitive data. We do not process sensitive data for purposes that require your consent under those laws.

Making a request and appeals

To exercise your rights, email Support@pawfectheaven.com. Section 12 explains how we verify requests, how authorized agents can make requests, and how quickly we respond. We may need to confirm that you live in a state whose law gives you the right you are exercising.

If we decline your request, you can appeal by replying to our decision or emailing Support@pawfectheaven.com with the subject line "Privacy Appeal". We will respond to your appeal within the time required by law and explain our decision. If you are not satisfied with the outcome of your appeal, you can contact the Attorney General of your state.

Other information about our practices

  • Retention: we keep each category of personal information for as long as needed for the purposes it was collected for, including meeting legal obligations, as described in section 9.
  • De-identified information: we do not attempt to re-identify de-identified information, except to test whether our de-identification processes meet legal requirements.

California "Shine the Light"

California residents may ask businesses they have an established business relationship with for information about the personal information disclosed to third parties for those third parties' own direct marketing purposes during the previous calendar year. To make this request, email Support@pawfectheaven.com with "Shine the Light Request" in the subject line, and include your name, mailing address and confirmation that you are a California resident.

Nevada

Nevada residents have the right to opt out of the sale of certain personal information for money. We do not currently make such sales, but you can submit an opt-out request for any future sales by emailing Support@pawfectheaven.com.

15. Additional information for people in Canada

If you live in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

  • Consent. We collect, use and disclose your personal information with your consent, which may be express or implied depending on the information and the circumstances, or as otherwise permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, we may not be able to provide some Services.
  • Access and correction. You can ask to access the personal information we hold about you and ask us to correct it if it is inaccurate or incomplete.
  • Transfers outside your province or Canada. As explained in section 8, your personal information will be stored and processed outside your province and outside Canada, including in the United Kingdom and the United States, and may be accessible to courts, law enforcement and national security authorities in those countries.
  • Quebec residents also have the right to be informed of the personal information we hold about you and how it is used, to request that it be communicated to you or to another organization in a structured, commonly used technological format, to ask us to stop disseminating your personal information or to de-index any hyperlink attached to your name where the law allows, and to be informed of any decision made exclusively by automated processing (we do not make such decisions).
  • Person in charge of the protection of personal information. The person responsible for the protection of personal information at PawFectHeaven can be contacted at Support@pawfectheaven.com.
  • Complaints. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada. Quebec residents can also contact the Commission d'accès à l'information du Québec.

We send commercial emails only where we have your consent or the law otherwise allows it, and every email includes a way to unsubscribe.

16. Additional information for people in Australia

If you live in Australia, we handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent they apply to us.

  • What we collect and why. Sections 2 to 6 explain the kinds of personal information we collect and hold, how we collect and hold it, and the purposes for which we collect, hold, use and disclose it. If you do not give us the information we need (such as your name, address and email), we may not be able to process your order.
  • Anonymity. You can browse our website and contact us with general questions without identifying yourself, but we need to identify you to process orders and handle requests about your account or orders.
  • Overseas disclosure. We are based in the United Kingdom, so your personal information will be disclosed to recipients outside Australia, including in the United Kingdom, the United States and the other countries where our service providers and logistics partners are located.
  • Access and correction. You can ask to access the personal information we hold about you and ask us to correct it. We will respond within a reasonable period, usually within 30 days. If we refuse, we will tell you why and how to complain.
  • Marketing. We send marketing emails only with your consent (which may be inferred where the law allows), and every email includes a way to unsubscribe.
  • Complaints. If you think we have breached the APPs, please email Support@pawfectheaven.com. We will look into your complaint and respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) on 1300 363 992.

17. Children

Our Services are not directed to, or intended for use by, anyone under 18 years of age, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that a child has given us personal information, please contact us at Support@pawfectheaven.com and we will delete it as required by law.

18. Other websites and services

Our website may contain links to websites and services run by other companies, such as social media platforms, payment providers and delivery tracking pages. We do not control those websites and services and are not responsible for their privacy practices. Please read their privacy policies before giving them your information. Information you post on public platforms, such as comments on our social media pages, may be visible to others.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for legal, operational or regulatory reasons. When we do, we will post the updated version on this page and change the effective date at the top. If we make significant changes, we will give you notice as required by applicable law, for example by email or a notice on our website.

20. Contact us

If you have any questions about this Privacy Policy or our privacy practices, or want to exercise any of your rights, please contact us: