Privacy Policy

1. Who we are

PetlyShop (petlyshop.net) is an online pet accessories and home décor store operated in compliance with the EU General Data Protection Regulation (GDPR). The data controller can be contacted at the email address below.

2. Data we collect

• Registration data: name, email address and password (stored encrypted).
• Order data: delivery address, phone number and purchase history.
• Payment data: processed exclusively by Stripe — we never store card details.
• Browsing data: IP address, browser type, pages visited and session duration, collected via cookies.
• Reviews: text, rating and optional photos you voluntarily submit.

3. How we use your data

• To process and fulfil your orders.
• To manage your account and authentication.
• To send order confirmations and shipping updates.
• To improve the website experience.
• To comply with legal and tax obligations.

4. Legal basis for processing

Processing is based on:

• Contract performance — required to process orders.
• Consent — for marketing and personalisation cookies.
• Legitimate interests — for security and fraud prevention.
• Legal obligation — for invoicing and tax records.

5. Sharing data with third parties

We share data only with:

• CJ Dropshipping — name and delivery address to fulfil orders.
• Stripe — payment processing (subject to their own privacy policy).
• Google — analytics, where consent is given (GDPR).
• Supabase / Railway — data hosting on servers located in the European Union.

We do not sell or share your personal data with third parties for commercial purposes.

6. Cookies

We use essential cookies (required for the store to function) and third-party cookies (Google Analytics). You can manage your preferences through the consent banner shown on your first visit or at any time in your browser settings.

7. Data retention

• Account data: until profile deletion or 3 years of inactivity.
• Order data: 7 years (EU tax obligation).
• Session cookies: deleted when the browser is closed.
• Persistent cookies: up to 13 months.

8. Your rights (GDPR)

You have the right to:

• Access — know what data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — delete your account and associated data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing for marketing purposes.
• Withdrawal of consent — at any time, without affecting prior processing.

To exercise these rights, contact us at: dyegosilva1924@gmail.com. We respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS connections, encrypted passwords (bcrypt) and restricted database access.

10. Changes to this policy

We may update this policy periodically. Material changes will be communicated by email or via a notice on the website. The date of the last update is shown at the top of this page.

11. Contact

For privacy or data protection enquiries:

Email: dyegosilva1924@gmail.com | Site: petlyshop.net

You also have the right to lodge a complaint with the supervisory authority in your country.