Privacy Policy

This privacy policy outlines the data processing practices of Pawtraits & More. All data collected will be managed in compliance with the Data Protection Act 2018.

If you have any questions about how we handle your personal data or would like to make a request regarding your information, please reach out to our Data Protection Officer (DPO) at hello@pawtraitsandmore.com.

Purpose of Processing Your Personal Data  
We process your personal data to manage pre-contractual and contractual relationships with our customers, suppliers, and potential employees. The legal basis for this processing is the performance of a contract.

Recipients/Categories of Recipients  
In fulfilling our business obligations, we may use sub-contractors such as PayPal, MailChimp, Instagram, and Facebook. We ensure all third-party services we work with respect your privacy and comply with data protection laws.

Transfers to Third Countries
Pawtraits & More does not transfer your data to any other countries. However, services like PayPal may handle your data in different regions, which will be detailed in their own Privacy Policy.

Retention Periods
We retain your personal data for 5 years after your last purchase, mainly for legal, tax, and accounting purposes. For marketing data, we keep it as long as we can market to you. If you opt out of marketing, we will only retain your contact details to ensure we no longer send marketing communications.

Data Subject’s Rights
You have several rights concerning your personal data. We will need to confirm your identity before processing any requests. To exercise any of the rights listed below, please contact the DPO at the provided details.

- Right to Be Informed: You have the right to know how your personal data is collected and used, as explained in this privacy policy. 
- Right of Access: You can request a copy of the personal data we hold about you. We will respond within 28 days. 
- Right to Rectification: If any data we hold is inaccurate or incomplete, you can request corrections. We will respond within 28 days. 
- Right to Erasure: You can ask us to delete your personal data when there’s no longer a valid reason to keep it. 
- Right to Restrict Processing: You can request that we limit how your data is processed in certain situations. 
- Right to Data Portability: You have the right to move or transfer your personal data between IT environments. 
- Right to Object: You can object to the processing of your data for reasons such as legitimate interests, direct marketing, or research purposes. 
- Rights Related to Automated Decision-Making: You have the right to challenge decisions made through automated processing, including profiling. 
- Processing Based on Consent: You can withdraw your consent for us to process your data at any time.

Statutory/Contractual Requirement to Provide Personal Data
The personal data you provide is necessary for us to carry out our contractual obligations or fulfill legal requirements.

Cookies
Cookies are small files sent by web servers to browsers, allowing the server to track user activity. We use cookies to identify visitors, monitor browsing habits, and enhance your experience on our site. You can disable cookies in your browser settings, but this may limit your website functionality. For more information, visit [All About Cookies](http://www.allaboutcookies.org/).

Third-Party Websites
Our website may include links to external websites that are not covered by this Privacy Policy. Please review the privacy policies of those sites if you visit them, as their practices may differ from ours.

Changes to the Privacy Policy
This policy is regularly reviewed and updated as needed. If significant changes are made, we will notify you accordingly.