Privacy policy

1. Who we are

CozyTail Pet Supplies LLC ("CozyTail", "we", "us", "our") is the data controller for personal data collected through this website. We are a pet supply retailer selling food, bedding, toys, walking equipment, aquarium products and grooming tools for dogs, cats, fish, birds and small pets.

This website is a demonstration storefront. The shopping cart, contact forms and order reference numbers run inside your own browser; no payment card details are requested, transmitted or stored.

2. Data we collect

We collect only the data needed to operate the shop and answer you. The categories are:

• Data you give us. Name, email address, phone number (optional), the subject and content of a message you send through a contact form or by email, and your newsletter email address if you subscribe.
• Order data. Delivery name and address, the items and quantities in an order, the order reference and the delivery method you choose. We do not store card numbers; payment is handled by a payment provider on its own systems.
• Technical data. IP address (truncated where possible), browser type and version, device type, operating system, referring page, pages viewed, date and time of visits, and cookie identifiers.
• Preference data. Your cookie consent choices and your saved cart contents if you allow functional cookies.

3. How we use your data

• To answer questions sent through the contact form, by email or by phone.
• To process orders, arrange delivery, send order updates and handle returns or refunds.
• To send the newsletter you subscribed to, and to stop sending it when you unsubscribe.
• To keep the website working: cart contents, form validation, consent choices and error reporting.
• To understand which product pages and guides are useful, in aggregated form.
• To measure the performance of advertising we run and to limit how often you see the same advert, only where you have accepted marketing cookies.
• To meet legal obligations such as tax and accounting record-keeping, and to establish or defend legal claims.

We do not sell your personal data, rent it to data brokers, or use it to build advertising profiles about identifiable individuals.

4. Legal basis for processing

Where the EU/UK General Data Protection Regulation or a similar law applies, we rely on these bases:

For visitors in California and other US states with privacy laws, we process the categories of personal information listed in section 2 for the business and commercial purposes listed in section 3. We do not "sell" or "share" personal information as those terms are defined by the CCPA/CPRA.

5. Cookies and similar technologies

A cookie is a small text file stored on your device. When you first visit this website we show a banner. Strictly necessary cookies are always used because the site cannot work without them. Optional cookies are only set after you accept them, either by choosing "Accept all" or by switching categories on in "Customise". You can change your choice at any time using the Cookie settings link in the footer.

Managing cookies yourself

Most browsers let you delete cookies or block them entirely in their settings (usually under Privacy or Security). Blocking strictly necessary cookies will stop the cart and forms from working correctly. Rejecting optional cookies in our banner has no effect on your ability to browse and use the shop.

Do Not Track

We honour the Global Privacy Control (GPC) and browser "Do Not Track" signals: if your browser sends one, we treat it as a rejection of optional cookies.

6. Sharing and service providers

We share personal data only with the following recipients, under written contracts:

• Delivery carriers — name, address and phone number, to deliver or collect an order.
• Payment processors — transaction amount and order reference. Card details are entered on the processor's own secure page and are never visible to us.
• Email and newsletter provider — email address and subscription status.
• Website hosting and support — server logs and, where needed for support, limited access to records.
• Accountants and advisers — records required for tax, accounting and legal advice.
• Authorities — only where we are legally required to disclose information.

We do not share your data with advertisers as identifiable personal information.

7. How long we keep data

When a retention period ends, data is deleted or irreversibly anonymised.

8. Data security

• All pages are served over HTTPS with TLS encryption.
• Access to customer records is limited to the small team that needs it, with unique accounts and two-factor authentication.
• We keep offsite backups and test restoration regularly.
• We do not ask for card details by email or phone, and we will never ask you for a password.

No method of transmission over the internet is completely secure. If a personal data breach occurs that is likely to result in a high risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will inform affected individuals without undue delay.

9. Your rights and choices

Depending on where you live, you may have some or all of the following rights, free of charge:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no legal reason to keep it.
• Restriction — ask us to pause processing while a request is reviewed.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Portability — receive your data in a structured, commonly used machine-readable format.
• Withdraw consent — change your cookie choices at any time via Cookie settings in the footer, or unsubscribe from the newsletter using the link in any email.
• Non-discrimination — we will not treat you less favourably for exercising a right.

To exercise a right, email cozytail.petshop@gmail.com with the subject line "Privacy request". We may ask you to confirm your identity before responding. We answer within 30 days and will tell you if an extension is needed. If you are not satisfied with our answer you may complain to your local data protection authority (in the EU/UK, your national supervisory authority; in the United States, the relevant state attorney general).

10. International transfers

Our shop, warehouse and support team are based in Springfield, Oregon, USA. Some service providers (hosting, email delivery) may process data in other countries. Where data leaves the country it was collected in, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, and we assess the level of protection in the destination country. You can request details of the safeguards we use by emailing us.

11. Children's privacy

This website is aimed at adults and we do not knowingly collect personal data from children under 16 (or the minimum digital consent age in your country). Our products are pet supplies; items such as small toys, scissors and aquarium equipment should be used by or under the supervision of an adult. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Third-party links and embedded content

Our pages may link to manufacturer websites, delivery carriers or payment pages operated by third parties. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their policies before providing any data. Where we embed third-party content, it is loaded only after you have accepted the relevant cookie category.

13. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The "Last updated" date at the top of this page shows when the current version was published. Material changes will be announced on the website and, where we hold your email address and the law requires it, by email. Continuing to use the site after a change takes effect means you accept the updated policy.

14. Contact and complaints

Questions about this policy or about your personal data can be sent to:

Reminder: CozyTail Pet Supplies sells products only. We do not provide veterinary services, diagnosis or medical advice, and nothing in this policy or on this website should be read as a health claim.