Privacy Policy

01 Data Controller & Contact Details

This Privacy Policy explains how Promote Pet collects, processes, stores, and protects your personal data when you visit our website (promotepet.com), purchase our natural pet grooming products, or communicate with our customer care team across the United Kingdom.

Under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the joint data controllers responsible for your personal information are:

02 Scope & Core Data Principles

Promote Pet is dedicated to maintaining the trust of our customers. We formulate silicone-free, professional-grade botanical grooming treatments exclusively for dogs and cats. We apply strict data protection principles across all operations:

• Lawfulness, Fairness & Transparency: Personal data is processed lawfully and transparently with clear documentation.
• Purpose Limitation: Collected strictly for specified e-commerce, customer support, and regulatory compliance purposes.
• Data Minimisation: We limit collection strictly to what is necessary for fulfilling orders and improving your experience.
• Accuracy: We maintain up-to-date records and allow customers to rectify inaccurate information instantly.
• Storage Limitation: Personal records are retained only for as long as required by UK law and business necessity.
• Integrity & Confidentiality: Data is secured using industry-standard SSL encryption and strict access controls.

03 Personal Data We Collect

We may collect, store, and transfer different categories of personal information depending on your interaction with our store:

• Identity Data: Full name, title, username, or account credentials.
• Contact Data: Billing address, delivery address, email address, and telephone number.
• Financial & Transaction Data: Payment card details (processed securely via WooPayments, powered by Stripe), order history, order receipts, and delivery notes.
• Technical & Device Data: IP address, browser type and version, time zone setting, location data, operating system, and hardware identifiers.
• Usage & Behavioral Data: Information on how you navigate our website, products viewed, items added to cart, and page interaction times.
• Marketing & Preferences Data: Your preferences for receiving newsletter communications, promotional offers, and customer satisfaction surveys.

04 Legal Bases for Processing (UK GDPR Art. 6)

We process your personal data only when permitted by UK legislation. The table below outlines our processing purposes and legal bases:

05 Collection Methods

We collect data through several touchpoints:

• Direct Interactions: When you complete checkout, subscribe to our newsletter, submit a contact form, or send a WhatsApp query.
• Automated Technologies: When browsing our site, technical cookies automatically record device telemetry and usage behavior.
• Third-Party Sources: Payment gateway confirmation, delivery status feeds from Royal Mail, or analytics signals from verified partners.

06 Cookies, Analytics & Tracking Technologies

Promote Pet uses cookies and web beacons to ensure essential store performance, remember your shopping basket, analyze site traffic, and optimize marketing campaigns in compliance with the Privacy and Electronic Communications Regulations (PECR).

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for store navigation, security, basket memory, and secure checkout. Cannot be disabled.
• Performance & Analytics Cookies: Measure website traffic, popular product views, and load speeds (e.g., Google Analytics 4 with IP anonymization).
• Functionality Cookies: Remember your currency settings and account preferences.
• Marketing & Targeting Pixels: Used by platforms like Meta, TikTok, and Brevo to deliver relevant pet care advertisements based on your browsing habits.

07 Third-Party Data Disclosures

We do not sell, rent, or trade your personal information. To fulfill orders and run our store effectively, we share data with vetted third-party service providers bound by strict confidentiality contracts:

• Logistics & Couriers: Royal Mail, DPD, and UK courier services for shipping and order tracking.
• Payment Processors: WooPayments (Stripe), including Apple Pay and Google Pay, for end-to-end encrypted transaction processing.
• Marketing & Communication Platforms: Brevo (Sendinblue) for dispatching transactional emails and consent-based newsletters.
• IT & Infrastructure: Cloud hosting, database management, and security audit software.
• Legal & Regulatory Authorities: HM Revenue & Customs (HMRC), law enforcement agencies, or UK courts if legally required.

08 International Data Transfers

Your personal information is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). If a service provider transfers data outside the UK, we ensure equivalent protection through approved safeguards, including:

• UK Adequacy Regulations for recipient countries.
• UK International Data Transfer Agreements (IDTA) or UK Addendums to EU Standard Contractual Clauses (SCCs).

09 Data Security & Retention

We implement robust technical and organizational security measures—including 256-bit SSL encryption, restricted administrative permissions, and vulnerability scanning—to prevent unauthorized access or disclosure of your data.

Retention Schedule: Order, transactional, and invoicing data is retained for 6 years following the end of the tax year to satisfy UK statutory accounting laws. Marketing subscription records are retained until you unsubscribe or request data deletion.

10 Your UK GDPR Legal Rights

Under UK data protection law, you possess enforceable statutory rights:

• Right of Access (Subject Access Request – SAR): Request a copy of the personal data we hold about you free of charge.
• Right to Rectification: Correct inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where no legal override exists.
• Right to Restrict Processing: Pause active processing of your data under specific conditions.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Revoke marketing consent at any time using unsubscribe links or contacting customer support.

11 Complaints & Information Commissioner’s Office (ICO)

If you have any concerns regarding how we handle your personal data, we encourage you to contact us first so we can resolve the matter promptly. However, you retain the statutory right to lodge a complaint with the UK supervisory authority:

12 Children’s Privacy

Our website and pet care products are aimed exclusively at adult pet owners aged 18 and over. We do not knowingly collect or solicit personal information from children under 16. If we discover a child’s information has been collected, it will be deleted immediately.

13 Updates to This Privacy Policy

We may update this policy periodically to reflect changes in legal requirements or operational practices. Any modifications will be published on this page with an updated “Last Modified” timestamp. We encourage customers to review this document regularly.