Privacy Policy

Last updated: April 2025

1. Introduction

At Pawreo's Pantry, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or make a purchase.

We comply with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR). By using our website or purchasing from us, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of personal data:

Personal Information: When you place an order or contact us, we may collect your name, email address, phone number, and shipping/billing address.
Payment Information: We use secure payment gateways to process payments. We do not store your credit card information directly.
Order Data: Information related to the products you purchase, including order history, delivery information, and payment status.

3. How We Use Your Information

We use your personal data for the following purposes:

Order Processing: To process and fulfill your orders, including shipping and customer service.
Communication: To send you order updates, promotional offers (if you’ve opted in), and other information relevant to your purchase.
Marketing: With your consent, we may send you newsletters, offers, and other marketing communications. You can opt out at any time.
Customer Service: To respond to inquiries, requests, and provide support.
Improving Our Services: To enhance and personalise your shopping experience.

4. Legal Basis for Processing Your Data

Under the UK GDPR, we process your personal data based on the following legal grounds:

Contractual Necessity: To fulfill orders and provide the services you request.
Consent: For marketing communications (newsletters, offers, etc.), which you can withdraw at any time.
Legitimate Interests: To improve our website, detect fraud, and ensure the security of our services.

5. Sharing Your Information

We do not sell or share your personal data with third parties except in the following cases:

Service Providers: We may share your data with trusted third-party service providers who help us run our website, process payments, or deliver products (e.g., delivery companies, payment processors). These providers are required to safeguard your data in accordance with GDPR.
Legal Requirements: We may disclose your data if required by law, such as in response to a court order, regulatory request, or legal process.

6. How We Protect Your Information

We take appropriate technical and organizational measures to ensure that your personal data is protected from unauthorized access, loss, or alteration. This includes using secure encryption methods and implementing strict data access controls.

However, no method of internet transmission is 100% secure, and while we strive to protect your data, we cannot guarantee its absolute security.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data under certain circumstances.
Right to Restrict Processing: You can request that we limit the processing of your personal data.
Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your data for certain purposes (e.g., direct marketing).

If you wish to exercise any of these rights, please contact us at the details provided below.

8. Retention of Your Data

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for legal or accounting purposes. Once your data is no longer needed, we will delete it securely.

9. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before sharing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or a notice on our website. The updated policy will be posted with a revised "Last Updated" date at the top.