PetPal

Privacy Policy (GDPR Compliant)

Last updated: May 2025

1. Who We Are

PetPal ("we", "us", "our") operates mypetspal.lovable.app. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Romanian data protection law.

2. Data We Collect

When you place an order or contact us, we collect:

  • Name and surname
  • Email address
  • Shipping address
  • Phone number (if provided)
  • Payment information (processed securely — we never store card details)
  • IP address and browser data (via cookies)

3. How We Use Your Data

We use your data to:

  • Process and fulfill your orders
  • Send order confirmation and tracking updates
  • Respond to your inquiries
  • Comply with legal obligations
  • Improve our website experience

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Sharing

We share your data only with:

  • Our fulfillment supplier (to ship your order) — your name and address only
  • Stripe / PayPal — to process payments securely
  • Shopify — our e-commerce platform (data processed under their GDPR-compliant infrastructure)

5. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand how visitors use our site. You can manage cookie preferences in your browser settings.

6. Your Rights (GDPR)

As an EU resident, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to processing
  • Data portability

To exercise any of these rights, contact us at: era.reps21@gmail.com

7. Data Retention

We retain your order data for 5 years as required by Romanian fiscal law. After this period, your data is permanently deleted.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

9. Contact

Data Controller: PetPal
Email: era.reps21@gmail.com

For GDPR complaints, you may also contact the Romanian data protection authority (ANSPDCP) at anspdcp.ro.