The detailed legal content below is shown in French because these provisions (T&Cs, GDPR, withdrawal, warranty) must be legally validated before official translation for each European market. For questions, contact contact@pawpro.eu — reply in English in less than 2 hrs on business days.
1. Our commitment
PAWPRO processes your personal data on a single principle: strictly what is necessary, never more. No reselling to third-party advertisers, no advertising profiling, no social pixel by default. This policy details what we collect, why, and how you can stay in control.
Your data is used to deliver your order, reply to you, and improve our products. That's it.
2. Data controller
The controller of your personal data is:
PAWPRO GLOBAL LLC5830 E 2ND ST, STE 7000 #20634
CASPER, WY 82609
USA
For any question about your data or to exercise your rights, contact contact@pawpro.eu — a dedicated data protection contact handles every request.
3. Data collected
Depending on your interaction with the site, we may collect:
- Identification: first and last name, email, phone (order & customer care)
- Addresses: billing and delivery
- Order: products, quantities, amount, payment method (no full bank card data)
- Customer account: order history, saved addresses (if account created)
- Browsing: pages visited, time spent, traffic source, device type — via anonymised analytics cookies
- Communication: messages sent via the contact page or by email
Bank card data is handled exclusively by Shopify Payments (PCI DSS Level 1) and never transits through our servers.
4. Purposes & legal bases
Each processing operation is based on a specific legal basis (Article 6 of the GDPR for EU residents, or the equivalent provision under your jurisdiction):
- Performance of the contract: order processing, delivery, invoicing, customer care
- Legal obligation: invoice retention, accounting traceability
- Legitimate interest: fraud prevention, product improvement, anonymised audience measurement
- Consent: newsletter, non-essential cookies (via banner)
5. Retention period
- Active customer account: as long as the account exists, deletable at any time
- Inactive customer account: automatic deletion after 3 years without activity
- Orders & invoices: retention in line with applicable accounting obligations
- Customer care messages: 5 years after resolution
- Newsletter: until unsubscribe (1 click in the footer of every email)
- Analytics cookies: 13 months maximum
6. Recipients
Your data may be passed to processors strictly necessary for service delivery:
- Shopify: shop hosting, order management
- Shopify Payments / Stripe: payment processing
- Carrier partners: parcel delivery
- Shopify Email: transactional email and newsletter
No reselling, no sharing for third-party advertising. A complete list of our processors is available on request at contact@pawpro.eu.
7. International transfers
Some processors may involve a transfer of data outside the European Economic Area. These transfers are framed by the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms, ensuring a level of protection consistent with the GDPR.
8. Your rights
Depending on your jurisdiction of residence (GDPR for the EU, equivalent laws elsewhere), you have the following rights at any time:
- Access: obtain a copy of the data concerning you
- Rectification: correct inaccurate data
- Erasure (“right to be forgotten”): deletion within 30 days unless a legal obligation applies
- Restriction: temporarily suspend processing
- Portability: receive your data in a structured format (JSON, CSV)
- Objection: refuse processing based on legitimate interest
- Withdrawal of consent: at any time, no reason needed
To exercise these rights: contact@pawpro.eu with proof of identity. Reply within 30 days. In the event of disagreement, you may lodge a complaint with the data protection authority competent in your country of residence.
9. Security
We implement appropriate technical and organisational measures to protect your data: TLS encryption, restricted and logged access, regular audits, ongoing team training. In the event of a data breach presenting a risk, you will be notified within 72 hours in line with applicable GDPR obligations.
10. Cookies
The use of cookies is detailed in our cookies policy.
11. Minors
The site is not intended for minors under 16 without parental consent. If you believe a minor has shared data with us without consent, contact us immediately for deletion.
12. Amendments
This policy may be updated. The last modification date appears at the top of the page. Substantive changes will be notified by email to active customers.