Privacy Policy

Last updated: 26 September 2026

The Paw Room (“we”, “us”) sells pet products online to customers in the US and Europe. This page explains what personal data we collect, why, who we share it with, and your rights.

Who we are

The controller of your personal data is The Paw Room, Rua dos Moinhos 33, 2745-041 Lisbon, Portugal (NIF 297037919).
Contact: hello@getthepawroom.com

What we collect

  • Order details: name, email, phone, shipping and billing address, items ordered and payment status. Card details are entered directly with our payment provider, Stripe; we never see or store your full card number.
  • Account details, if you create one: email and a securely hashed password.
  • Messages you send us by email or through the contact form.
  • Newsletter: your email address, if you tick “Subscribe to our newsletter” at checkout or sign up elsewhere on the site.
  • Technical data: IP address, browser and device type, and pages viewed — in server logs, and in Google Analytics only if you allow analytics cookies.
  • Shopping activity: products viewed, added to the bag and bought, and which ad or link brought you here — only if you allow analytics or marketing cookies.

Why we use it, and on what legal basis

  • To take, pay for, ship and support your order — performance of a contract (GDPR art. 6(1)(b)).
  • To keep invoices and accounting records — legal obligation (art. 6(1)(c)).
  • To keep the site secure and prevent fraud — legitimate interests (art. 6(1)(f)).
  • To understand how the shop is used and improve it — which products people look for, where checkout gets stuck (Google Analytics) — your consent (art. 6(1)(a)).
  • To measure our ads and show you relevant offers (marketing cookies) — your consent (art. 6(1)(a)).
  • To send our newsletter with new products and offers — your consent (art. 6(1)(a)). Every email has an unsubscribe link.

Who we share it with

You can withdraw any consent at any time: use “Cookie preferences” in the footer, or the unsubscribe link in our emails. We only share what each service needs to do its job:

  • Shipping partner (based in the EU, US and China) — name, shipping address, phone, email and the items ordered, so they can pack and ship your parcel, together with their warehouses and carriers.
  • Stripe — processes your payment (cards, Apple Pay, Google Pay and other methods shown at checkout) and screens for fraud.
  • Hostinger — hosts our website and email, and sends our newsletter (Hostinger Reach) if you subscribed.
  • Google — Google Analytics (through Site Kit) if you allow analytics cookies, and Google’s advertising measurement if you allow marketing cookies.

Transfers outside the EU

Some of these providers process data outside the European Economic Area. Our shipping partner works from the EU, the US and China; when your order ships from outside the EU, your delivery details are sent there because this is necessary to deliver your order (GDPR art. 49(1)(b)). Stripe and Google may process data in the United States under the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Cookies

  • Necessary cookies keep the cart, checkout and login working, remember your cookie choice (paw_cookie_consent, 180 days), and let Stripe prevent payment fraud. These are always on.
  • Analytics cookies (Google Analytics, e.g. _ga) show us how the shop is used so we can improve it. Only set if you allow Analytics.
  • Marketing cookies measure our ads and help show you relevant offers (for example Google’s advertising features). Only set if you allow Marketing.

The cookie banner appears on your first visit. You can choose “Necessary only”, “Accept all”, or pick Analytics and Marketing separately under “Choose”. Until you choose, only necessary cookies are used. You can change your choice at any time with the “Cookie preferences” link in the footer.

How long we keep data

Order and invoice records are kept for as long as Portuguese tax and accounting law requires (currently up to 10 years). Support emails are kept while needed for the conversation. Account data is kept until you ask us to close the account, unless the law requires us to keep it longer. Newsletter subscriptions last until you unsubscribe. Google Analytics data is deleted automatically after at most 14 months.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. Email hello@getthepawroom.com and we will reply within one month. You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt), or the authority where you live.

Security

The site runs on HTTPS, payments are handled by Stripe, and access to order data is limited to what is needed to run the shop.

Children

This shop is for adults buying for their pets. We do not knowingly collect data from children.

Changes

We update this page when the shop, its tools or the law change. The date at the top shows the latest version.