Privacy Policy & cookies
Privacy Policy – Pawmilyy™
Last updated: 28/04/2026
This Privacy Policy explains how Pawmilyy™ collects, uses, and protects your personal data when you use our website or place an order.
By using our website, you acknowledge the practices described in this Privacy Policy.
1. Data controller
The data controller is:
[Legal company name]
Legal form: [e.g. SAS / Sole Trader / Limited Company]
Registered office: [Full address]
Company registration number / SIRET: [Number]
Contact email: contact@pawnmilyy.com
2. The personal data we collect
We only collect the data needed to run our store, process orders, provide support, and improve the customer experience.
2.1 Data you provide directly
When you:
- place an order;
- create an account;
- subscribe to our newsletter;
- contact us by email, contact form, or social media;
we may collect:
- first name and surname;
- billing and delivery address;
- email address;
- telephone number, where provided;
- order details, including items purchased, order date, amount paid, and order number;
- messages exchanged with customer support.
2.2 Payment data
Payments are processed by secure third-party payment providers such as Shopify Payments, Stripe, PayPal, or other payment partners used on our checkout.
We do not store your full card details on our own systems. Payment information is processed directly by the payment provider.
2.3 Technical and browsing data
When you browse our website, we may collect technical information such as:
- IP address;
- browser type;
- device type;
- pages viewed;
- time spent on the website;
- data collected through cookies and similar technologies.
This information helps us operate the website, understand performance, and improve the user experience.
3. Why we use your data
We use your personal data to:
Manage your order
- process and prepare your order;
- take payment;
- arrange delivery;
- provide order tracking;
- manage returns, refunds, and customer service.
Manage our customer relationship
- reply to enquiries;
- provide after-sales support;
- communicate with you about your order.
Send marketing communications
Where you have given consent, or where permitted by law, we may send:
- newsletters;
- promotional offers;
- product updates;
- information about Pawmilyy™.
You can unsubscribe at any time.
Improve our website and services
- analyse traffic and usage;
- improve performance and customer experience;
- understand how visitors interact with our website.
Comply with legal obligations and protect our business
- accounting and record-keeping;
- fraud prevention;
- handling disputes and enforcing our legal rights.
4. Lawful bases for processing
Under the UK GDPR, personal data must be processed on at least one lawful basis. Common lawful bases include contract, legal obligation, legitimate interests, and consent.
We rely on the following lawful bases:
Contract
Where processing is necessary to fulfil your order or take steps at your request before entering into a contract.
Legal obligation
Where we must keep records for legal, tax, accounting, or regulatory purposes.
Legitimate interests
Where we have a legitimate business interest, such as improving our website, preventing fraud, defending legal claims, or managing our operations, provided your rights do not override those interests.
Consent
Where required, for example for certain marketing communications and non-essential cookies. You may withdraw your consent at any time.
5. Who we share your data with
We may share your personal data only with trusted service providers where necessary, such as:
- Shopify, which hosts and powers our online store;
- payment providers such as Shopify Payments, Stripe, PayPal, or similar providers used on our site;
- delivery and logistics partners;
- email marketing and customer communication tools;
- professional advisers such as accountants, lawyers, or fraud prevention providers where necessary.
We do not sell your personal data to third parties.
6. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, or tax obligations. Retention periods should be defined and justifiable.
As a general rule:
- order and transaction data: kept for as long as required by applicable accounting and tax laws;
- customer account data: kept while the account remains active or until deletion is requested, subject to legal obligations;
- marketing data: kept until you unsubscribe or withdraw consent;
- cookie and analytics data: kept according to the cookie type and your preferences.
7. Data security
We use reasonable technical and organisational measures to protect your personal data, including:
- secure website connections (HTTPS);
- limited internal access to authorised persons only;
- use of reputable service providers;
- secure payment providers.
No system can guarantee absolute security, but we work to keep your data protected.
8. Your rights
Under the UK GDPR, individuals have rights including the right to be informed, access their data, rectify inaccurate data, erase data in certain circumstances, restrict processing, object, and receive data portability where applicable.
You may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data in certain circumstances;
- request restriction of processing;
- object to certain types of processing, especially direct marketing;
- request portability of data where applicable;
- withdraw consent where we rely on consent.
To exercise any of these rights, contact us at:
We may ask for proof of identity where reasonably necessary to protect your data.
9. Cookies and similar technologies
We use cookies and similar technologies to:
- ensure the website and basket function properly;
- remember your preferences;
- measure traffic and usage;
- improve performance;
- where enabled, support marketing and advertising activities.
Under UK rules, you must be told about cookies and, for non-essential cookies, consent is generally required before they are set. Essential cookies used to provide a service requested by the user, such as basket functionality, do not require the same consent.
You can:
- accept or reject non-essential cookies through our cookie banner;
- change your preferences later through our cookie settings tool, where available;
- block certain cookies through your browser settings.
If you publish a separate Cookie Policy, you can link to it here.
10. Third-party links
Our website may contain links to third-party websites, including social media platforms, payment pages, or external services.
We are not responsible for the privacy practices or content of third-party websites. Please read their privacy policies separately.
11. Children’s data
Pawmilyy™ is not intentionally directed at children.
If we discover that we have collected personal data from a child without appropriate authorisation where required, we will take appropriate steps to delete it.
12. International transfers
Some of our service providers may process data outside your country. Where personal data is transferred internationally, appropriate safeguards should be used where required by law.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect legal, technical, or operational changes.
The version published on our website is the version that applies at the time of your visit.
14. Complaints
If you are unhappy with how we handle your personal data, please contact us first at:
If you are based in the UK, you can complain to the Information Commissioner’s Office (ICO), which is the UK data protection authority.
If your business is established in France or your processing falls under French supervision, you may also complain to the CNIL, the French data protection authority.
15. Contact
For any questions about this Privacy Policy or your personal data, please contact:
Pawmilyy™ – Customer Support
Email: contact@pawnmilyy.com