Privacy Policy

This Privacy Policy explains what personal information Paw’s NestWood collects when you visit our site or place an order, how we use it, and the choices you have. We designed our checkout and account system to collect as little as we need to fulfil your order and keep your account working properly.

1. Information we collect

Information you give us

• Contact details — name and email address, whether you check out as a guest or create an account.
• Shipping & billing address — collected at checkout so your order can be delivered and your payment verified.
• Phone number — collected at checkout where required by our US shipping carriers for delivery coordination.
• Order details — the products, quantities and variants you purchase.
• Pet profile (optional) — measurements you choose to save using our size visualiser, to help recommend the right product size.
• Account credentials — if you create an account, handled securely by our authentication provider (see Section 3).

Information collected automatically

• Device and usage information such as browser type, pages viewed, and referring URLs, collected via standard server logs and essential cookies.

We do not collect or store your full payment card number. Card details are entered directly into Stripe’s secure checkout and never pass through our servers.

2. How we use your information

• To process and fulfil your order, including shipping and delivery;
• To communicate with you about your order — order confirmations, notifications about a problem with your order or a refund, and support requests;
• To detect and prevent fraud, abuse, and payment disputes;
• To operate and improve the site, including diagnosing technical issues;
• To send marketing communications, only if you’ve opted in, and you can unsubscribe at any time; and
• To comply with legal obligations, such as tax record-keeping.

3. Who we share it with

We don’t sell your personal information. We share it only with the service providers that make Paw’s NestWood work, each of whom is only given the information they need to do their job:

• Stripe — processes payments. Stripe receives your billing details and payment information directly; see Stripe’s privacy policy.
• Supabase — hosts our database and handles account authentication, storing your account and order records securely.
• Fulfilment partners — receive the name, shipping address, phone number and order contents needed to pack and ship your order.
• US shipping carriers — receive your shipping address and contact details to deliver your order and provide tracking.
• Email delivery provider — sends transactional emails such as order confirmations and refund notifications. We do not use analytics, advertising, or behavioural-tracking providers.

We may also disclose information where required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

4. Where your data is processed

Paw’s NestWood is a US-based store selling exclusively to US customers. The service providers listed above may process and store data in the United States and, in some cases, other countries where they operate infrastructure; where that happens, we rely on the safeguards those providers offer (such as standard contractual clauses) to keep your information protected.

5. Cookies

We use essential cookies only — to keep your cart working, keep you signed in, and hold the access token for your order status page. We do not use analytics, advertising, or tracking cookies. You can control or disable cookies in your browser settings, though some parts of the site — like checkout — may not work properly without them.

6. Data retention

We retain order and account information for as long as needed to fulfil the purposes described in this policy, including tax, accounting, and dispute-resolution obligations, after which it is deleted or anonymised.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing.

• EEA / UK residents (GDPR): you have the rights listed above, plus the right to lodge a complaint with your local data protection authority.
• California residents (CCPA/CPRA): you have the right to know what personal information we collect, request its deletion, and opt out of its “sale” or “sharing” — we do not sell personal information.

How to make a request. Email hello@pawsnestwood.com from the address on your account or order, with “Data request” and the type of request in the subject. To protect your account we will first verify your identity — normally by confirming details of a recent order and sending a confirmation link to the email address on file. We respond within the timeframe required by applicable law (for example, 30 days under GDPR, 45 days under CCPA/CPRA).

Export — we provide a machine-readable copy of the personal data associated with your email: your account profile, your orders and their items, and any refunds.

Deletion — we delete or anonymise your account profile, saved addresses, pet measurements, and marketing preferences. We retain the transactional record of any order you placed (amounts, dates, tax and payment references, with contact details removed) for as long as tax, accounting, and dispute-resolution law requires — typically several years — after which it too is deleted.

8. Children’s privacy

The Service isn’t directed at children, and we don’t knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we’ll delete it.

9. Security

We use industry-standard safeguards — including encryption in transit, access controls, and Stripe’s PCI-DSS-compliant infrastructure for payments — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data using the best tools available to us.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above.

11. Contact

Questions about this policy or your data? Email hello@pawsnestwood.com.

This page is a standard template provided for convenience and general informational purposes — it isn’t legal advice. Review it with qualified counsel before relying on it, particularly around CCPA/CPRA compliance and any state-specific privacy requirements that apply to your customers.