Your privacy, guarded like family.

PawShed (we, us, our) is the data controller for the personal information you share on this store — meaning we decide why and how it is processed, and we are answerable for it. You can reach us about anything in this policy at support@pawshed.com. This policy applies to every visitor and customer, whether you browse once or order every month.

When you order, we collect your name, shipping address, email, phone (if you give it) and what you bought. When you browse, cookies collect anonymous technical data like device type, approximate region and pages visited. What we never collect: your full payment card number (payments are processed by Shopify Payments, Stripe or PayPal on their own secure systems), government ID documents, or any sensitive-category data about you or your pet.

We use your details to take, pack and deliver your order (which includes passing your address to our fulfillment supplier and courier), to answer your support messages, to prevent fraud, to meet tax and legal duties, and — only with your consent — to send offers and updates. Anonymous analytics help us make the store faster and better stocked. Under UK/EU law our legal bases are: performing our contract with you, our legitimate interests (running a safe store), your consent (marketing), and legal obligations.

Cookies are small files that keep the store working: essential ones power your cart and checkout, functional ones remember preferences, analytics ones show us anonymous usage patterns, and marketing ones measure whether an ad led to a visit. You can refuse or clear non-essential cookies in your browser settings at any time; blocking essential ones may stop checkout from working. Where a consent banner is shown, your choice is respected and remembered.

We share the minimum necessary with: Shopify (our store platform and hosting), payment processors (to charge you), our fulfillment supplier and shipping carriers (your name and address, to deliver), analytics and advertising tools (in pseudonymised form), and authorities when the law genuinely requires it. We do not sell personal information, and we do not share it for cross-context behavioural advertising as defined under California law (CCPA/CPRA).

Order records are kept as long as tax and accounting laws require (typically up to six or seven years), support conversations up to two years, and marketing data until you unsubscribe. Because we are a global store, your data may be processed in countries other than yours — including where our platform and suppliers operate — always under appropriate safeguards such as standard contractual clauses. When data is no longer needed, it is deleted or irreversibly anonymised.

Wherever you live, you can ask us to show you the personal data we hold, correct it, delete it, restrict how we use it, or hand you a portable copy. UK and EU residents also have the right to object to processing and to complain to the ICO or your local supervisory authority; California residents have CCPA/CPRA rights including the right to know, delete and opt out of sale (we do not sell data). Email support@pawshed.com with the subject 'My data' — we respond within 30 days and may first verify it is really you.

We protect data with SSL/TLS encryption, PCI-DSS compliant payment processing and strict need-to-know internal access — though no internet system is ever 100% bulletproof, and we will tell you and the authorities if a breach ever affects you. This store is not directed at children under 16 and we never knowingly collect their data. If this policy changes, the new version is posted here with a fresh date; for anything material, we will email subscribers first.