Privacy Policy

1. Who We Are

PawCraft Ltd is the data controller for personal data collected through this website (paw-craft.shop). If you have any questions about this policy, please contact us at privacy@paw-craft.shop.

2. What Data We Collect

We collect the following personal data when you place an order or contact us:

• Full name and contact details (email address, phone number)
• Delivery address and postcode
• Order history and transaction reference numbers
• IP address and browser/device information (collected automatically)
• Communication records if you contact our support team
• Cookie identifiers and browsing behaviour on our site (see Section 5)

We do not collect or store your payment card details. All card payments are processed directly by Stripe, Inc. via their secure encrypted gateway. Please review Stripe's Privacy Policy for details on how they handle your payment data.

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders and send order confirmations
• Arrange shipping and communicate delivery updates
• Handle returns, refunds and customer support enquiries
• Comply with our legal obligations (tax records, fraud prevention)
• Improve our website and services using anonymised analytics data
• Measure the effectiveness of our Google Ads advertising campaigns (conversion tracking)
• Show relevant ads to past visitors via Google Ads remarketing / retargeting
• Send you marketing emails — only if you have given explicit consent

4. Legal Basis for Processing

• Contract performance – processing your order and delivering your goods
• Legal obligation – complying with tax and consumer protection laws
• Legitimate interests – fraud prevention, website security and analytics
• Consent – advertising cookies, remarketing, and marketing communications (you may withdraw consent at any time)

5. Cookies, Analytics & Advertising

We use cookies and similar tracking technologies to operate our website and to power our advertising. This includes:

• Essential cookies – required for the website and shopping basket to function
• Analytics cookies – Google Analytics 4 (anonymised IP) to understand site usage, pages visited and session behaviour
• Advertising & remarketing cookies – Google Ads conversion tracking to measure the performance of our ad campaigns, and Google Ads remarketing to show relevant ads to users who have previously visited our site
• Payment cookies – Stripe fraud-detection cookies

When you first visit our site, a cookie consent banner is displayed. Advertising and analytics cookies are only set if you click Accept. You may withdraw consent at any time via our Cookie Policy page or your browser settings.

You can opt out of Google personalised advertising at any time at adssettings.google.com or by using the Google Analytics Opt-out Browser Add-on.

6. Google Advertising Services

Google Ads services used on this site include:

• Conversion tracking – measures actions taken on our site after clicking a Google Ad (e.g. completing a purchase)
• Remarketing – allows us to show ads to users who have previously visited paw-craft.shop across the Google Display Network and Search
• Google Analytics 4 (GA4) – audience insights and traffic analysis; IP addresses are anonymised

You can opt out of interest-based advertising from Google at adssettings.google.com. You can also opt out via the Network Advertising Initiative at optout.networkadvertising.org.

7. Data Sharing

We share your personal data only with trusted third parties who help us operate our business:

• Stripe, Inc. – payment processing (PCI DSS compliant); Stripe Privacy Policy
• Shipping carriers – Royal Mail, DPD, Evri – to fulfil deliveries
• Google LLC – Analytics (GA4) and Google Ads (anonymised data where possible); Google Privacy Policy
• Drop-shipping suppliers – order fulfilment (name and delivery address only)

We do not sell, rent or trade your personal data to third parties for marketing purposes.

8. Data Retention

We retain your order and personal data for 7 years to comply with UK tax and accounting obligations. If you have not made a purchase, anonymised analytics data is retained for up to 26 months. Advertising cookie data is retained for the durations specified in our Cookie Policy.

9. International Transfers

Some of our third-party providers (including Google LLC and Stripe, Inc.) are based in the United States. Data transfers to the USA are carried out under appropriate safeguards, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

10. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict how we process your data
• Data portability – receive your data in a structured format
• Withdraw consent for marketing or advertising cookies at any time

To exercise any of these rights, email us at privacy@paw-craft.shop. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

11. Security

We use industry-standard security measures including SSL/TLS encryption, secure hosting and access controls. Payment processing is handled entirely by Stripe and is fully PCI DSS compliant. We never transmit or store your card details on our servers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact

For any privacy-related questions:
privacy@paw-craft.shop
PawCraft Ltd, England & Wales