Privacy Policy

Last updated: 25 March 2026

1. Who we are

This Privacy Policy applies to the United Kingdom version of the FluffyPuppy store and related customer interactions.

This website is operated by SafeEcom Global LLP, trading as FluffyPuppy.

For the purposes of UK data protection law, we act as the controller of the personal information collected through this website for our ecommerce, customer service, marketing, security, and business operations. UK privacy information should identify the organisation and relevant contact details clearly.

2. Scope

This Policy explains how we collect, use, disclose, store, and otherwise process personal information when you:

  • visit our UK storefront or browse our website from the United Kingdom
  • place an order with us
  • contact us about an order, return, refund, delivery issue, or other customer service matter
  • subscribe to marketing from us
  • interact with our website cookies, pixels, analytics tools, or similar technologies

This version is written for our UK market and is intended to provide clear and accessible privacy information in line with UK transparency requirements. The ICO says privacy information should be given at the time personal information is collected and should cover purposes, retention, and sharing.

3. Personal information we collect

Depending on how you interact with us, we may collect the following categories of personal information:

Order and contact information

  • name
  • billing address
  • shipping address
  • email address
  • phone number
  • order contents
  • delivery preferences
  • invoice and transaction details

Payment information

  • payment method details needed to process your order
  • card details and similar payment credentials are generally processed directly by our payment providers and are not stored by us in full

Support and communications

  • emails, contact form submissions, and customer service messages
  • return, refund, claim, or delivery-related information
  • photos or other files you choose to send to us, for example where an item arrives damaged

Device and usage information

  • IP address
  • browser type and version
  • device information
  • time zone or approximate location
  • pages viewed
  • referring website or source
  • interactions with our site
  • cookie identifiers and similar online data

Marketing and preference information

  • subscription status
  • consent records
  • communication preferences
  • campaign engagement data such as opens, clicks, and opt-outs

We do not intentionally collect special category data for ordinary ecommerce activity, and we ask that you do not include it in order notes or support messages unless it is genuinely necessary and specifically requested. The ICO expects privacy notices to explain the types of personal information collected and, where relevant, any rights that depend on the lawful basis used.

4. How we collect personal information

We may collect personal information:

  • directly from you when you place an order, contact us, or sign up for email or SMS
  • automatically through cookies, pixels, server logs, analytics tools, and similar technologies when you use our website
  • from service providers that support our ecommerce operations, such as payment, fraud-prevention, fulfilment, shipping, analytics, and communications providers
  • in limited cases, from advertising or analytics partners where those tools are enabled and lawfully used

5. How we use personal information

We may use personal information to:

  • process and fulfil orders
  • take payment and send order confirmations, invoices, and shipping updates
  • arrange delivery, returns, refunds, replacements, or customer support
  • detect, prevent, and investigate fraud, abuse, chargebacks, and security issues
  • operate, maintain, troubleshoot, and improve our website and store services
  • understand how customers use our website and improve performance, content, and customer experience
  • send marketing communications where lawful
  • measure advertising performance and personalise promotions where lawful
  • comply with legal, tax, accounting, and regulatory obligations
  • protect our business, customers, staff, website, and legal rights

6. Lawful bases for processing

Where UK data protection law applies, we rely on one or more of the following lawful bases:

Contract
to process your order, take payment, arrange delivery, provide updates, and handle related customer service

Legitimate interests
to keep our website secure, prevent fraud, protect our business, improve services, and respond to enquiries, provided those interests are not overridden by your rights and interests

Consent
for non-essential cookies and similar technologies, and for electronic direct marketing where consent is required

Legal obligation
to meet tax, accounting, consumer-law, and other legal or regulatory requirements

The ICO says organisations must identify and include their lawful basis in the privacy notice, and generally should not swap lawful bases later without good reason.

7. Cookies, pixels, and similar technologies

We use cookies, pixels, tags, and similar technologies to support the operation of our website and understand how it is used.

These technologies may be used to:

  • keep the site and checkout working properly
  • remember preferences
  • measure traffic and site performance
  • understand product and page engagement
  • improve customer experience
  • support advertising measurement or remarketing

In the UK, PECR applies to cookies and similar technologies and sits alongside the UK GDPR. Non-essential cookies and similar technologies generally require consent. You can manage your choices through our cookie banner, cookie settings, or browser settings where available. Some cookies may be strictly necessary for the service you request and do not rely on the same consent approach.

8. Marketing communications

If you subscribe to receive marketing from us, we may send you promotional emails or SMS about products, offers, restocks, and related store updates.

You can withdraw your consent or opt out at any time:

  • for email, by using the unsubscribe link in the message
  • for SMS, by following the opt-out instructions in the message
  • by contacting us at support@fluffypuppypetstore.com

PECR applies to electronic direct marketing such as emails and texts, and where PECR requires consent, that consent uses the UK GDPR standard. The ICO also makes clear that people have an absolute right to object to direct marketing, and that right should be brought to their attention clearly.

9. Sharing personal information

We do not sell or rent your personal information.

We may share personal information with trusted third parties that help us operate our business, including:

  • ecommerce platform and hosting providers
  • payment processors and checkout providers
  • fraud-prevention and security providers
  • warehousing, fulfilment, shipping, and delivery partners
  • customer service, email, SMS, and communications providers
  • analytics and advertising providers, where lawfully used
  • professional advisers and service providers supporting our operations
  • legal, regulatory, government, or law-enforcement authorities where required or permitted by law

We aim to limit sharing to what is reasonably necessary for the relevant service or lawful purpose. UK transparency guidance expects privacy notices to describe recipients or categories of recipients clearly.

10. International transfers

Because we operate an international ecommerce business, some personal information may be processed or accessed outside the United Kingdom.

This may happen when we use service providers, cloud systems, payment providers, support tools, analytics tools, advertising partners, or fulfilment partners located in or operating from other countries.

Where a restricted transfer takes place, we use an appropriate safeguard under UK data protection law where required, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any necessary risk assessment and supplementary measures. The ICO’s current international transfer guidance explains these safeguard options and the need to assess transfers appropriately.

11. Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy and for related legal, tax, accounting, fraud-prevention, and business needs.

Typical retention periods may include:

  • order and transaction records: up to 6 years, or longer where required by law
  • customer service correspondence: up to 2 years after the last interaction
  • marketing preferences and consent records: until you unsubscribe or withdraw consent, and for a reasonable period afterwards to maintain suppression records
  • analytics and security logs: for the period set by the relevant tool or system configuration

When personal information is no longer reasonably required, we aim to delete it, anonymise it, or securely destroy it. The ICO says privacy information should include retention periods or the criteria used to determine them.

12. Security

We use reasonable technical and organisational measures designed for an online retail business to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

These measures may include:

  • encrypted website connections
  • access controls
  • provider access management
  • fraud monitoring
  • internal limitation of access on a need-to-know basis

No method of transmission over the internet or electronic storage is completely secure. If you believe your information has been used without authorisation, please contact us promptly.

13. Your rights in the United Kingdom

Subject to applicable law, you may have the right to:

  • be informed about how your personal information is used
  • access the personal information we hold about you
  • request correction of inaccurate or incomplete information
  • request erasure in certain circumstances
  • request restriction of processing in certain circumstances
  • receive your personal information in a portable format where applicable
  • object to processing based on legitimate interests
  • object at any time to processing for direct marketing
  • withdraw consent at any time where processing is based on consent

To exercise your rights, contact us at support@fluffypuppypetstore.com. We may need to verify your identity before responding. The ICO’s right-to-be-informed guidance says privacy notices should explain the rights that apply, including withdrawal of consent and objection to direct marketing.

14. Complaints

If you have a concern about how your personal information is handled, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection matters. The ICO’s public guidance explains that individuals can complain to an organisation first and then raise the matter with the ICO if they remain dissatisfied.

15. Children

Our store is not directed to children, and we do not knowingly collect personal information from children as part of ordinary ecommerce activity.

If you believe a child has provided personal information to us without appropriate involvement from a parent or guardian, please contact us.

16. Automated decision-making

We may use automated tools for analytics, fraud screening, advertising measurement, and store operations.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects on customers in the ordinary course of operating our store unless we are lawfully permitted to do so and provide the required safeguards. UK privacy notices should explain this where relevant.

17. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, service providers, or legal requirements.

When we update it, we will post the revised version on this page and change the “Last updated” date.

18. Contact

SafeEcom Global LLP t/a FluffyPuppy
167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom
+44 7831 040926
support@fluffypuppypetstore.com