Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from "Nalha's Dog Shop". We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal information we collect

When you visit our website, we automatically collect certain information about your device, including your web browser, IP address, time zone, and cookies installed on your device. As you browse the website, we also collect information about the individual web pages or products you view, the websites or search terms that referred you to our site, and how you interact with it. We refer to this automatically-collected information as "Device Information".

We collect Device Information using the following technologies:

- Cookies: data files placed on your device that often include an anonymous unique identifier. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.
- Log files: track actions occurring on the website and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- Web beacons, tags, and pixels: electronic files used to record information about how you browse our website.

Additionally, when you make or attempt to make a purchase, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this as "Order Information".

When we refer to "Personal Information" in this Privacy Policy, we mean both Device Information and Order Information.

How we use your personal information

We use Order Information to fulfil orders placed through our website, including processing payment, arranging shipping, and providing invoices and order confirmations. The legal basis for this processing is performance of a contract (Article 6(1)(b) UK GDPR).

We also use Order Information to:

- Communicate with you;
- Screen orders for potential risk or fraud (legitimate interest, Article 6(1)(f) UK GDPR); and
- Provide you with information or advertising relating to our products or services, where you have consented or where we have a legitimate interest to do so.

We use Device Information to help screen for potential risk and fraud, and more generally to improve and optimise our website (for example, by generating analytics about how customers browse and interact with the site, and to assess the success of our marketing and advertising campaigns). The legal basis for this processing is our legitimate interests (Article 6(1)(f) UK GDPR).

Third-party data processors

We share your Personal Information with the following third-party service providers to help operate our store:

- Shopify Inc.: powers our online store and processes order and payment data. Privacy policy: https://www.shopify.com/legal/privacy
- Google Analytics: helps us understand how customers use our website. Data is anonymised where possible. Privacy policy: https://www.google.com/intl/en/policies/privacy/ — Opt-out: https://tools.google.com/dlpage/gaoptout
- Meta (Facebook): we may use the Meta Pixel to measure and optimise advertising campaigns. Privacy policy: https://www.facebook.com/privacy/policy/
- Google Ads: we may use Google remarketing tags for advertising purposes. Privacy policy: https://policies.google.com/privacy

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a lawful request for information, or to protect our rights.

Behavioural advertising and personalised advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. Under the UK GDPR, we process your data for personalised advertising purposes on the basis of our legitimate interests (Article 6(1)(f) UK GDPR). You have the right to object to this processing at any time — see "Your rights" below.

For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of personalised advertising using the links below:

- Facebook/Meta: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can also opt out of some of these services via the Digital Advertising Alliance's opt-out portal: http://optout.aboutads.info/.

Cookies and consent

Our website uses cookies to improve your experience and for advertising purposes. You can configure your browser to refuse or delete cookies at any time. For guidance on managing cookies in the UK, visit the Information Commissioner's Office (ICO) at https://ico.org.uk/your-data-matters/online/cookies/. Please note that disabling cookies may affect the functionality of certain parts of our website.

Do not track

Please note that we do not alter our website's data collection and use practices when we see a Do Not Track signal from your browser.

International data transfers

Your personal information may be transferred to and processed in countries outside the United Kingdom, including Canada and the United States. These countries may not provide the same level of data protection as the UK. Where we transfer your data outside the UK, we ensure that appropriate safeguards are in place in accordance with the UK GDPR, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO) or reliance on an adequacy decision. For more information about these safeguards, please contact us using the details below.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal information:

- The right to access the personal information we hold about you;
- The right to rectification (correction) of inaccurate or incomplete data;
- The right to erasure ("right to be forgotten");
- The right to restrict processing of your personal data;
- The right to data portability;
- The right to object to processing, including for direct marketing and personalised advertising purposes;
- The right not to be subject to automated decision-making, including profiling.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk.

Data retention

When you place an order through our website, we retain your Order Information for as long as necessary to fulfil that order and comply with our legal obligations (including tax and accounting requirements), unless you ask us to delete it sooner. Device Information collected via cookies and analytics tools is retained for a maximum of 26 months. You may request deletion of your data at any time by contacting us.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The current version will always be available on this page.

Minors

This website is not intended for individuals under the age of 18.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to exercise any of your rights, please contact us by email at contact@nalhasdogshop.uk or by mail at:

Nalha's Dog Shop
6520 Rue de Mirande, Québec, G1H 6Z9, CA