Privacy Policy

1. Introduction

This Privacy Policy explains how [LEGAL ENTITY NAME] ("we", "us", "our") collects, uses, stores and shares personal information when you visit [YOUR DOMAIN] (the "Site"), place an order, or contact us.

We are the data controller in respect of the personal information described in this policy, except where we state that a third party acts as an independent controller. We are committed to handling your information lawfully and transparently.

2. Information we collect

Information you provide to us

• Order details — your name, email address, shipping address, and billing details supplied when you place an order.
• Personalisation details — any engraving text or custom instructions you provide for a personalised item.
• Correspondence — the content of messages you send us, including support and return requests.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system and referring URL.
• Usage data — the pages you view, the time and duration of your visit, and which products you add to your cart.

Information from third parties

• Transaction data — an order reference, the amount and currency paid, the status of the transaction, and the email address associated with the payment.
• Delivery data — tracking status and delivery confirmation provided by our shipping carriers.

3. How we use information

We use personal information for the following purposes:

• To process your order, take payment, pack and ship your goods, and provide customer support.
• To produce personalised items to your specification.
• To send transactional messages, such as order confirmations, dispatch notices and tracking details.
• To handle returns, exchanges and warranty claims.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To maintain reliable operation of the Site, diagnose technical problems and understand aggregate usage.
• To comply with our legal, accounting and tax obligations.
• To establish, exercise or defend legal claims.

Where required by law, we rely on the following legal bases: performance of a contract (to fulfil the order you placed), legitimate interests (security, fraud prevention and service improvement), legal obligation (tax, accounting and customs records) and, where applicable, your consent (for example, if you opt in to marketing emails).

We do not sell your personal information, and we do not send marketing emails unless you have asked to receive them. Every marketing email includes an unsubscribe link.

4. Payment information

Payments are handled by our payment provider, [PAYMENT PROVIDER NAME], together with the payment methods it supports. When you check out, you provide your payment details directly to that provider, and they act as an independent controller of that information.

We receive only confirmation of whether a payment succeeded, an order reference, the amount paid and the email address used. We encourage you to review our provider's own privacy notice before completing a purchase.

5. Cookies and analytics

The Site uses a small number of strictly necessary cookies and similar technologies to keep the Site functioning, remember your cart and preferences, and support checkout. These are required for the Site to work and cannot be switched off through our interface.

Where we use privacy-respecting, aggregate analytics to understand how visitors use the Site, the data is reported to us in aggregate form and is not used to identify you personally. You can control or delete cookies through your browser settings; disabling them may affect how the Site and checkout behave.

6. When we share information

We share personal information only as follows:

• Payment and tax — with our payment provider and its processors, to take payment and handle tax and invoicing.
• Shipping and fulfilment — with postal and courier services, in order to deliver your order and provide tracking.
• Hosting and infrastructure — with our hosting and content delivery providers, who process data on our instructions.
• Email delivery — with our transactional email provider, to send order confirmations, dispatch notices and tracking details.
• Professional advisers — with accountants, auditors or lawyers where necessary and subject to confidentiality.
• Legal and safety — where we are required to do so by law, or where disclosure is necessary to protect our rights, our customers or the public.
• Business transfer — in connection with a merger, acquisition or sale of assets, in which case we will notify you of any change in ownership or use of your information.

All service providers are required to protect your information and to use it only for the purposes for which we engaged them.

7. International transfers

We are based in [COUNTRY / REGION], and our service providers and shipping carriers may store, process or transmit your information in other countries, including where your parcel is routed and where our systems are hosted. Where we transfer personal information out of a region that restricts such transfers, we rely on appropriate safeguards, such as standard contractual clauses approved by the relevant authority, or another lawful transfer mechanism.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this policy. In practice:

• Order, shipping and transaction records are retained for as long as needed to handle returns, warranty claims and tax or customs requirements, typically [RETENTION PERIOD, e.g. 7 years].
• Support and return correspondence is retained for up to [e.g. 24 months] after the matter is closed.
• Server and analytics logs are retained for a short, rolling period, typically up to [e.g. 12 months].

When information is no longer needed, we delete it or anonymise it.

9. Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Access — to request a copy of the information we hold about you.
• Rectification — to ask us to correct information that is inaccurate or incomplete.
• Erasure — to ask us to delete your information, where we have no overriding legal reason to keep it.
• Restriction — to ask us to limit how we use your information.
• Portability — to receive certain information in a structured, machine-readable format.
• Objection — to object to processing based on our legitimate interests.
• Withdraw consent — where processing is based on consent, to withdraw it at any time.
• Non-discrimination — not to be treated unfairly for exercising these rights.

To exercise any of these rights, contact us at support@qandqpet.com. We will respond within the timeframe required by applicable law. We may need to verify your identity and your order before acting. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. These include encryption in transit, access controls on our systems, and limiting the data we hold to what is necessary.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant authority as required by law.

11. Children's privacy

The Site and our products are intended for adults. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version is always published on this page, and the "last updated" date will be revised when it changes. Where a change is material, we will take reasonable steps to bring it to your attention.

13. Contact

• Email: support@qandqpet.com
• Responsible entity: [LEGAL ENTITY NAME]
• Address: [BUSINESS ADDRESS]