This Privacy Policy outlines how Haustier-Schlaraffenland UG (haftungsbeschränkt) collects, uses, stores, and protects personal information obtained from users visiting and making purchases on www.cuddlepawly.com. We operate in strict accordance with applicable data protection legislation, including the European Union General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and applicable federal and state privacy statutes in the United States (including the California Consumer Privacy Act / CCPA, where applicable).

1. Data Controller

The legal entity responsible for the processing of personal data collected through www.cuddlepawly.com is:

• Legal Entity (Data Controller): Haustier-Schlaraffenland UG (haftungsbeschränkt)
• Brand Name: Cuddlepawly
• Registered Address: Fingers Kamp 13, 58730 Fröndenberg, Germany
• Telephone: +49 2373 77391
• Customer Support Email: grocery@cuddlepawly.com
• Official Website: www.cuddlepawly.com

2. Information We Collect

When you interact with our website or complete a purchase for our pet apparel, enclosures, or playpens, we may collect the following categories of personal data:

• Identity & Contact Data: Full name, billing address, shipping address, email address, and telephone number.
• Order & Transaction Data: Details regarding products purchased, order history, transaction totals, and delivery details.
• Technical & Usage Data: IP address, browser type, operating system, and website usage metrics collected automatically via standard cookies or log files.

3. Purpose and Legal Basis for Data Processing

We process your personal information for the following specific operational and legal purposes:

• Contract Performance: To process orders, manage deliveries, communicate order updates, and provide customer support services.
• Legal Compliance: To maintain accurate financial records, fulfil tax obligations, and comply with commercial statutory record-keeping mandates under German and European law.
• Legitimate Interests: To prevent fraud, ensure network and system operational integrity, and optimize user experience on our website.

4. Payment Processing with Stripe

All financial payment transactions conducted on www.cuddlepawly.com are processed securely by our third-party payment service provider:

• Payment Processor: Stripe, Inc. / Stripe Payments Europe, Ltd. (“Stripe”)

When you make a payment on our store, your payment card details are transmitted directly to Stripe via encrypted protocols. Haustier-Schlaraffenland UG (haftungsbeschränkt) does not store, capture, or access full payment card numbers or card verification codes on our servers.

Stripe processes payment details in its capacity as an independent or joint controller under strict security protocols compliant with Payment Card Industry Data Security Standards (PCI-DSS). Stripe’s processing of personal data is governed by the Stripe Privacy Policy.

5. Data Retention Period

We do not hold personal data for longer than necessary to fulfil the purposes for which it was collected, or as required under legal obligations:

• Commercial & Tax Records: Pursuant to German commercial and tax laws (Handelsgesetzbuch / HGB and Abgabenordnung / AO), transaction records, order invoices, and relevant correspondence containing personal data are retained for up to 10 years following the end of the fiscal year in which the transaction occurred.
• Customer Support Enquiries: General enquiries and correspondence not resulting in a statutory transaction record are retained for up to 3 years from the date of final resolution.
• United States Users: Records collected from US customers are retained for the duration required to complete order fulfilment and in accordance with relevant state statutory limitation periods governing legal claims and accounting duties.

Upon expiration of applicable statutory retention periods, personal data is permanently deleted or anonymised in a secure manner.

6. Sharing and Transfer of Personal Data

We do not sell, rent, or trade your personal information. Personal data is disclosed to third parties solely where strictly necessary for operational management:

• Logistics & Delivery Partners: To enable parcel delivery to locations across Europe and the United States.
• IT & Hosting Services: Technical infrastructure providers operating under strict data processing agreements.
• Payment Processing: Stripe, for secure payment verification and transaction completion.
• Legal Authorities: Regulatory agencies, tax authorities, or law enforcement entities when required under binding statutory regulations.

International Transfers: Where personal data is transferred outside the European Economic Area (EEA), such as to service infrastructure operating within the United States, appropriate safeguards are implemented in compliance with Chapter V of the GDPR (e.g., Standard Contractual Clauses or adequacy frameworks).

7. Consumer Rights

Depending on your geographic location, you possess specific legal rights regarding your personal data:

A. European Union / EEA Residents (GDPR Rights)

• Right of Access: Request confirmation and copies of your personal data held by us.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure: Request deletion of personal data where statutory retention obligations no longer apply.
• Right to Restrict Processing: Request restrictions on processing under specific conditions.
• Right to Data Portability: Request structured transfer of your personal data.
• Right to Object: Object to processing based on legitimate interests.
• Supervisory Authority: Right to lodge a complaint with a relevant Data Protection Authority (such as the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen in Germany).

B. United States Residents

• Right to Know & Access: Request details regarding categories and specific pieces of personal information collected.
• Right to Deletion: Request deletion of personal information, subject to statutory business exceptions.
• Non-Discrimination: We do not discriminate against users exercising privacy rights under state laws.

To exercise any of these rights, please contact us at grocery@cuddlepawly.com.

8. Data Safeguards

Haustier-Schlaraffenland UG (haftungsbeschränkt) implements standard administrative and technical controls to reduce the risk of unauthorized access, loss, or alteration of personal data. While robust measures are maintained, internet transmissions cannot be characterized as completely immune to external interception, and communications are undertaken at your own risk.

9. Updates to This Policy

We reserve the right to revise this Privacy Policy periodically to reflect legal or operational adjustments. Any updates will be published directly on www.cuddlepawly.com with a revised effective date.