Privacy policy

Privacy Policy — Paws and Whiskers

Last updated: August 29, 2026

At Paws and Whiskers ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

Information We Collect

Personal information you provide

  • Contact information — name, email address, phone number, shipping and billing addresses
  • Payment information — credit card and billing details, processed securely through our payment processors
  • Account information — username, password, order history, preferences
  • Photos and personalization content — images you upload for custom products (such as pet photos), along with the style, size, and customization choices you make
  • Communication data — messages you send us, customer service interactions, reviews and feedback

Information collected automatically

  • Device information — IP address, browser type, operating system, device identifiers
  • Usage data — pages visited, time spent on site, click-through rates, search queries
  • Cookies and tracking — we use cookies and similar technologies to enhance your experience (see Cookies Policy below)

How We Use Your Information

We use your personal information to:

  • Process and fulfill your orders and payments
  • Produce personalized products from the photos and details you provide
  • Communicate with you about your purchases and account
  • Provide customer support and respond to inquiries
  • Send marketing communications, with your consent where required
  • Measure and improve the performance of our advertising
  • Improve our website, products, and services
  • Prevent fraud and enhance security
  • Comply with legal obligations

How We Share Your Information

We may share your information with:

  • Fulfillment partners — our print-on-demand provider (Gelato) receives only what is needed to produce and ship your order, including the photo you upload, your customization choices, and your shipping address
  • Service providers — shipping carriers, payment processors, email service providers, and website hosting
  • Advertising and analytics partners — Meta Platforms, Inc. (Facebook and Instagram), as described under Advertising and Your Choices below
  • Legal requirements — when required by law, court order, or to protect our rights
  • Business transfers — in the case of a merger, acquisition, or sale of business assets

Advertising and Your Choices

We advertise on Facebook and Instagram. To show relevant ads and understand whether they work, we share certain information with Meta Platforms, Inc. This includes activity on our website — such as pages viewed, items added to cart, and purchases — collected through the Meta Pixel, and, for orders, contact details such as your email address, phone number, name, and address.

This information is sent through Meta's Conversions API and is cryptographically hashed before it leaves our systems, so Meta receives scrambled values rather than readable personal details, which it uses to match activity to existing accounts.

We do not sell your personal information for money, and we never sell or license the photos you upload. However, under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other U.S. states, sharing information with advertising partners for targeted or "cross-context behavioral" advertising may be considered a "sale" or "sharing" of personal information, even when no money changes hands. We want to be clear that the advertising activity described above may fall within those definitions.

You can opt out at any time. Use the "Your privacy choices" link in the footer of our website, or adjust your preferences through our cookie consent banner. When you opt out, we stop sharing your information with advertising partners for these purposes. You can also disconnect activity already associated with your Facebook account through Meta's Off-Facebook Activity settings.

How We Handle Your Uploaded Photos

Photos you upload for personalized products are used solely to create your order. We share them only with our fulfillment partner to produce your item.

We never share your uploaded photos with advertising partners, and we do not use them for advertising or sell them to anyone.

We retain uploaded images only as long as needed to fulfill your order, provide support, and handle any reprints or disputes, after which they are deleted in the normal course of business.

International Data Transfers

As we serve customers globally, your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

Your Privacy Rights

For U.S. residents, including California (CCPA/CPRA)

  • Know what personal information we collect, and how it is used and disclosed
  • Access your personal information
  • Correct inaccurate personal information
  • Delete your personal information, with certain exceptions
  • Opt out of the sale or sharing of your personal information for targeted advertising — see Advertising and Your Choices above
  • Limit the use of sensitive personal information
  • Non-discrimination for exercising your rights

For EU and UK residents (GDPR)

  • Access your personal data
  • Rectify inaccurate personal data
  • Erase your personal data (the "right to be forgotten")
  • Restrict processing of your personal data
  • Data portability
  • Object to processing
  • Withdraw consent at any time

For all users

  • Unsubscribe from marketing emails
  • Opt out of advertising data sharing through the link in our website footer
  • Update your account information
  • Request deletion of your account or uploaded photos
  • Contact us about any privacy concern

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes or enforce agreements.

Transaction records are typically retained for up to seven years to meet accounting and legal obligations. Uploaded photos are retained only as long as needed to fulfill and support your order.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Cookies Policy

We use cookies and similar technologies for:

  • Essential cookies — required for the website to function
  • Analytics cookies — to understand how visitors use our site
  • Marketing cookies — the Meta Pixel, to provide relevant advertisements and measure ad performance
  • Preference cookies — to remember your settings and preferences

Meta Pixel. We use the Meta Pixel and Meta's Conversions API for marketing and advertising measurement, as described under Advertising and Your Choices above. Where required by law, such as in the EU and UK, we obtain consent before activating marketing trackers through our cookie consent banner.

You can manage cookie preferences through your browser settings or our cookie consent banner.

Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices.

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the date at the top. Continued use of our services constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, requests, or concerns, please reach out through our Contact page. For EU and UK residents: if you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Jurisdiction-Specific Information

California residents. This Privacy Policy serves as our CCPA/CPRA disclosure. California residents may opt out of the sharing of personal information for cross-context behavioral advertising using the link in our website footer, and may request information about our disclosure of personal information to third parties for direct marketing purposes.

Nevada residents. Nevada law allows residents to opt out of the sale of certain personal information for monetary consideration. We do not sell personal information for money as defined under Nevada law. Nevada residents may still opt out of advertising data sharing using the link in our website footer.

Canadian residents. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

This Privacy Policy is designed to comply with major privacy regulations including GDPR, CCPA/CPRA, PIPEDA, and other applicable laws.