Data Transparency
Privacy Policy
Information We Collect
Data Controller
[BUSINESS_NAME] trading as AetherPaws Essentials, [BUSINESS_ADDRESS], Spain. Contact: francoeorzan@zohomail.eu
We collect information you provide directly to us when you create an account, place an order, or communicate with us.
Personal Data
Name, email, phone number, and shipping address for logistics.
Payment Data
Processed securely via Stripe. We do not store full credit card numbers.
How We Use Your Information
Your information is utilized to provide a seamless premium shopping experience.
- Order fulfillment with CJ Dropshipping partners.
- Dynamic customer support and order tracking.
- Personalization of pet essential recommendations.
Data Security
We employ industry-standard encryption and security protocols to protect your data. While no transmission is absolute, we use enterprise-grade isolation for all user records.
Your Rights (GDPR/EEA)
As an EEA/UK resident, you have the following rights under GDPR:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request we limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, email francoeorzan@zohomail.eu. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD — aepd.es) or the supervisory authority in your country of residence.
Legal Basis for Processing (GDPR Art. 6)
We process your personal data under the following legal bases:
Contract Performance — Art. 6(1)(b)
Order fulfillment, delivery coordination, customer account management, and payment processing.
Legitimate Interests — Art. 6(1)(f)
Fraud prevention, site security, analytics to improve our service. We balance these interests against your privacy rights.
Consent — Art. 6(1)(a)
Marketing emails and non-essential cookies. You can withdraw consent at any time by unsubscribing or updating your cookie preferences.
Legal Obligation — Art. 6(1)(c)
Retention of transaction records for tax and accounting purposes as required by Spanish and EU law.
Data Retention
We retain your personal data for the following periods:
Order & Transaction Data
7 years — required by Spanish tax law (Ley General Tributaria)
Account Data
Until you request account deletion
Marketing Consent
Until withdrawn — unsubscribe any time
Analytics Data
26 months (Google Analytics default)
International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place:
CJ Dropshipping — China
Your name, shipping address, and order details are transferred to CJ Dropshipping in China for order fulfillment. This transfer is governed by Standard Contractual Clauses (SCCs) pursuant to GDPR Article 46(2)(c).
Stripe — United States
Payment data is processed by Stripe, Inc. (USA). Stripe participates in the EU-U.S. Data Privacy Framework and maintains SCCs.
Vercel — United States
Our website is hosted on Vercel (USA). Vercel maintains SCCs for EU data transfers.
California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:
- Right to Know — what personal information we collect, use, disclose, and sell
- Right to Delete — request deletion of your personal information
- Right to Opt-Out — we do not sell your personal information
- Non-Discrimination — exercising these rights will not affect your service
To exercise your CCPA rights, contact us at francoeorzan@zohomail.eu. We will respond within 45 days.