PRIVACY POLICY

This Privacy Policy describes how pup. ("we", "us", or "our") collects, uses, shares, and protects your personal information when you visit our website, make a purchase, or interact with us. We are committed to ensuring that your privacy is protected and that we comply with all applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Please read this Privacy Policy carefully. By using our website or purchasing our products, you acknowledge that you have read and understood this Privacy Policy.

1. WHO WE ARE

1.1 For the purposes of data protection legislation, the data controller is:

pup.

Company Name: J&J BRANDS LTD

Company Registration Number: 16994264

Email: hello@wearepup.com

1.2 If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.

2. INFORMATION WE COLLECT

2.1 We collect different types of information depending on how you interact with us:

Information You Provide Directly

2.2 When you make a purchase, create an account, subscribe to our newsletter, contact us, or interact with us in other ways, you may provide us with:

• Identity Information: Name, title

• Contact Information: Email address, telephone number, postal address, delivery address

• Account Information: Username, password, account preferences

• Transaction Information: Details of products purchased, order history, payment information (processed securely by our payment providers)

• Communication Information: Records of correspondence with us, feedback, reviews, survey responses

• Marketing Preferences: Your preferences for receiving marketing communications

Information Collected Automatically

2.3 When you visit our website, we automatically collect certain information about your device and your visit:

• Technical Information: IP address, browser type and version, operating system, device type, screen resolution, time zone setting

• Usage Information: Pages visited, time spent on pages, links clicked, products viewed, search terms used, referring website

• Location Information: General geographic location based on IP address

Information from Third Parties

2.4 We may receive information about you from third parties, including:

• Payment Providers: Transaction confirmation and fraud prevention information

• Delivery Partners: Delivery status and confirmation

• Analytics Providers: Aggregated website usage data

• Marketing Partners: Information about your interactions with our advertisements

3. HOW WE USE YOUR INFORMATION

3.1 We use your personal information for the following purposes:

Contract Performance

• To process and fulfil your orders

• To manage your account

• To communicate with you about your orders and account

• To process returns, refunds, and exchanges

• To provide customer support

Legitimate Interests

• To improve our website, products, and services

• To analyse website usage and performance

• To personalise your experience on our website

• To detect and prevent fraud

• To protect the security of our website and systems

• To send you non-marketing service communications

Consent

• To send you marketing communications (where you have opted in)

• To use non-essential cookies for analytics and advertising purposes

• To process sensitive personal data (where applicable)

Legal Obligation

• To comply with our legal and regulatory obligations

• To respond to requests from law enforcement or regulatory authorities

• To establish, exercise, or defend legal claims

4. MARKETING COMMUNICATIONS

4.1 We may send you marketing communications about our products, offers, and news if you have:

• Requested information from us or purchased products from us, and you have not opted out of receiving marketing communications; or

• Provided your consent to receive marketing communications

4.2 You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email

• Updating your preferences in your account settings

• Contacting us at hello@wearepup.com

4.3 Please note that opting out of marketing communications will not affect essential service communications related to your orders or account.

5. COOKIES AND SIMILAR TECHNOLOGIES

5.1 Our website uses cookies and similar technologies to enhance your experience, analyse website usage, and assist with our marketing efforts.

What Are Cookies?

5.2 Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

Types of Cookies We Use

Essential Cookies: These are necessary for the website to function properly. They enable basic functions like page navigation, secure access to your account, and shopping cart functionality. You cannot opt out of these cookies.

Performance/Analytics Cookies: These help us understand how visitors interact with our website by collecting anonymous information about pages visited, time spent on the site, and any errors encountered.

Functionality Cookies: These allow us to remember choices you make (such as your username, language, or region) and provide enhanced, personalised features.

Marketing/Advertising Cookies: These are used to track visitors across websites to enable us to display relevant advertisements. They also help us measure the effectiveness of our advertising campaigns.

Managing Cookies

5.3 When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your cookie preferences at any time through our cookie settings.

5.4 You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

6. HOW WE SHARE YOUR INFORMATION

6.1 We may share your personal information with the following categories of recipients:

Service Providers

6.2 We use third-party service providers to help us operate our business and provide services to you. These include:

• Payment Processors: [Stripe, PayPal, Klarna] to process your payments securely

• Delivery Partners: [Royal Mail, DPD, etc.] to deliver your orders

• E-commerce Platform: [Shopify] to host and operate our online store

• Email Marketing: [Klaviyo, Mailchimp] to send marketing communications

• Analytics: [Google Analytics] to analyse website usage

• Customer Support: [Zendesk, Gorgias] to manage customer enquiries

• Advertising: [Meta, Google Ads, TikTok] to serve advertisements

6.3 These service providers are only permitted to process your personal information on our behalf and in accordance with our instructions. They are required to maintain appropriate security measures to protect your information.

Legal and Regulatory

6.4 We may disclose your personal information if required by law or in response to valid requests by public authorities (e.g., courts, law enforcement agencies).

Business Transfers

6.5 If we sell, merge, or transfer any part of our business, your personal information may be transferred to the new owner or successor organisation as part of the business assets.

With Your Consent

6.6 We may share your personal information with other parties where you have given your explicit consent.

6.7 We do not sell your personal information to third parties.

7. INTERNATIONAL DATA TRANSFERS

7.1 Some of our service providers are located outside the United Kingdom and the European Economic Area (EEA). When we transfer your personal information to these providers, we ensure that appropriate safeguards are in place to protect your information.

7.2 These safeguards may include:

• Transferring to countries that have been deemed to provide an adequate level of data protection by the UK Government or European Commission

• Using specific contracts approved by the UK Government or European Commission (Standard Contractual Clauses)

• Transferring to organisations that are certified under recognised data protection frameworks

7.3 You can request further information about the safeguards we use for international transfers by contacting us.

8. DATA SECURITY

8.1 We have implemented appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

8.2 These measures include:

• SSL/TLS encryption for data transmitted between your browser and our website

• Secure storage of personal information with encryption where appropriate

• Regular security assessments and testing

• Access controls limiting who can access your personal information

• Staff training on data protection and security practices

8.3 While we take all reasonable precautions to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your personal information.

8.4 If you have an account with us, you are responsible for keeping your password confidential and for any activity that occurs under your account.

9. DATA RETENTION

9.1 We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

9.2 To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal information

• The potential risk of harm from unauthorised use or disclosure

• The purposes for which we process the information

• Applicable legal requirements

9.3 Generally, we retain:

• Order and transaction information: 7 years (to comply with tax and accounting requirements)

• Account information: Until you close your account, plus a reasonable period for backup and archival purposes

• Marketing preferences: Until you withdraw consent or unsubscribe

• Analytics data: 26 months (in line with Google Analytics default settings)

10. YOUR RIGHTS

10.1 Under data protection legislation, you have certain rights regarding your personal information:

Right of Access: You have the right to request a copy of the personal information we hold about you.

Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.

Right to Erasure: You have the right to request that we delete your personal information in certain circumstances (also known as the "right to be forgotten").

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object: You have the right to object to the processing of your personal information in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you.

10.2 To exercise any of these rights, please contact us at hello@wearepup.com. We will respond to your request within one month.

10.3 We may need to verify your identity before processing your request. If your request is complex or you have made multiple requests, we may need to extend the response period by up to two months, in which case we will inform you.

10.4 There is no fee to exercise your rights, although we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive, or excessive.

11. CHILDREN'S PRIVACY

11.1 Our website and products are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16.

11.2 If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information.

11.3 If you believe we have collected information from a child under 16, please contact us immediately.

12. THIRD-PARTY LINKS

12.1 Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external websites.

12.2 We encourage you to read the privacy policies of any third-party websites you visit before providing them with your personal information.

13. CHANGES TO THIS PRIVACY POLICY

13.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

13.2 When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy. If we make material changes, we may also notify you by email or by posting a prominent notice on our website.

13.3 We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. COMPLAINTS

14.1 If you have any concerns about how we handle your personal information, please contact us first at hello@wearepup.com. We will do our best to resolve your concerns.

14.2 If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk

15. CONTACT US

15.1 If you have any questions about this Privacy Policy or our data practices, please contact us at:

hello@wearepup.com