Privacy policy

Last updated: 20 September 2026

PetNestCo ("we", "us", "our") operates the petnestco.com online store. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. We ship worldwide, and this policy applies to every customer wherever you live.

We operate from within the European Union and act as the data controller for the personal data described here. The policy is written to meet the EU General Data Protection Regulation (GDPR), and we apply the same standard of care to customers outside the EU. Where your own country gives you additional or different rights, those rights apply to you as well: the UK GDPR, the California Consumer Privacy Act as amended by the CPRA, the Australian Privacy Act 1988, New Zealand's Privacy Act 2020, and Canada's PIPEDA all cover customers in their respective countries.

What data we collect

  • Contact details: name, email address, shipping and billing address, phone number.
  • Order information: products purchased, order value, payment confirmation details (we do not store full card numbers, this is handled by our payment processor and Shopify).
  • Account information, if you create one: username, password (stored encrypted), order history, saved addresses.
  • Communication: messages you send us through the contact form or email.
  • Technical data: IP address, browser type, device type, and cookies (see Cookies below).

Why we collect it

We only process your data where we have a reason to. Under the GDPR and UK GDPR these reasons are called legal bases (Article 6); elsewhere they describe the same purposes.

  • To fulfil a contract with you: processing your order, arranging shipping, handling returns.
  • With your consent: sending marketing emails, using non essential cookies.
  • For our legitimate interests: preventing fraud, improving our store, responding to support requests.
  • To comply with a legal obligation: keeping records required for tax and accounting purposes.

Cookies

We use cookies and similar technologies to run the store and to understand how it is used.

  • Essential cookies keep your cart and your session working. The store cannot function without them, so they are always on.
  • Analytics cookies tell us which pages are visited and where visitors have trouble, so we can improve the store.
  • Marketing cookies measure whether our advertising works, and may be set by advertising platforms we use.

Analytics and marketing cookies are only set with your consent. You can change or withdraw that consent at any time through the cookie settings on the store, and you can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the store from working.

How long we keep it

We keep order and account data for as long as needed to fulfil the purposes above, and afterward for as long as applicable tax and accounting rules require us to retain records of a sale. Marketing data is kept until you unsubscribe or ask us to delete it.

Who we share it with

  • Shopify, our ecommerce platform provider, which processes data on our behalf to run the store.
  • Payment processors (such as Shopify Payments and PayPal) to process your payment.
  • Shipping carriers, to deliver your order.
  • Advertising and analytics platforms (Meta and Google), which receive data about your visit through cookies and similar technologies when you consent to marketing or analytics cookies, so that we can measure whether our advertising works.
  • Authorities, if required by law.

We do not sell your personal data for money, and we never have. We do use advertising and analytics platforms, which means that when you consent to marketing or analytics cookies, data about your visit is shared with Meta and Google so we can measure whether our advertising works.

Some US state privacy laws define that kind of sharing broadly, and under those definitions it may count as a "sale", "sharing", or "targeted advertising" even though no money changes hands. If you are in a US state with such a law, you can opt out of it on our Your Privacy Choices page, and we honour the Global Privacy Control signal if your browser sends one. Wherever you live, you can withdraw consent for marketing and analytics cookies at any time through the cookie settings on the store, which stops this sharing.

Sending data between countries

Because we ship worldwide and use service providers such as Shopify, your personal data may be processed in a country other than the one you live in, including outside the European Economic Area. Where data leaves the EEA or the UK, we rely on the safeguards permitted by the GDPR and UK GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision covering the destination country. If you would like details of the safeguards that apply to your data, email us and we will provide them.

Your rights

These rights apply to you wherever you live. Depending on your country they arise under the GDPR, the UK GDPR, the CCPA and CPRA, the Australian Privacy Act, New Zealand's Privacy Act, or PIPEDA, but we honour them for every customer.

  • Access the personal data we hold about you, and know what we collect and why.
  • Correct inaccurate data.
  • Request deletion of your data, subject to legal retention requirements.
  • Request a copy of your data in a portable format.
  • Object to or restrict certain processing, including marketing.
  • Withdraw consent at any time where processing is based on consent.
  • Not be treated differently for exercising any of these rights. We will not refuse you service, change your prices, or give you a lower level of service because you asked.

To exercise any of these rights, email support@petnestco.com. We answer within 30 days, and we will tell you if we need longer. We may need to confirm your identity first, so that we do not hand your data to someone else. An authorised agent may make a request on your behalf where your local law allows it.

Children

Our store is intended for adults, and we do not knowingly collect personal data from children under 16. If you believe a child has given us their data, email us and we will delete it.

Complaints

If you are unhappy with how we have handled your data, contact us first and we will try to put it right. You also have the right to complain to the data protection authority in your own country: the supervisory authority in your EU member state, the Information Commissioner's Office in the UK, the Office of the Australian Information Commissioner in Australia, the Office of the Privacy Commissioner in New Zealand or Canada. If you need the details of the authority that supervises us, email us and we will provide them.

Changes to this policy

We update this policy when our practices change or the law requires it. The date at the top shows when it was last changed. If a change materially affects your rights, we will tell you by email or through a notice on the store.

Contact

PetNestCo
Email: support@petnestco.com