Privacy Policy

1. Introduction
   This Privacy Policy explains how Petplayhaven collects, uses, stores, and handles personal information when you visit www.petplayhaven.com, contact us, place a secure order, or otherwise interact with our website.
   Petplayhaven is strictly committed to handling personal information in accordance with applicable data protection requirements, including the General Data Protection Regulation (GDPR), applicable German data protection legislation, and relevant privacy requirements applicable in the United States. We collect data solely to ensure a secure, transparent shopping experience for our originally presented product offerings.
   This Privacy Policy explains the categories of information collected, the purposes for which information is used, the relevant legal bases where applicable, information retention periods, our secure payment processing arrangements, and the rights available to individuals.
2. Data Controller
   For the purposes of applicable data protection legislation, Petplayhaven is the data controller responsible for the processing of personal information carried out through this website.
   Company: [XXX]
   Brand: Petplayhaven
   Registered Address: [XXX]
   Email: toys@petplayhaven.com
   Telephone: [XXX]
   The registered company information provided above is the legitimate entity associated with the operation of www.petplayhaven.com.
3. Information We May Collect
   Depending on how you interact with our website, we may collect the following categories of information:

Name and contact details;

Billing and delivery information;

Email address and telephone number;

Order details and purchase history;

Information provided when contacting our customer service team;

Payment-related transaction information (excluding sensitive card data);

Website usage information;

Cookie and similar technology information where applicable;

Information strictly necessary to comply with legal, security, and accounting requirements.

We seek to collect only the information that is strictly relevant to the purposes for which it is required.

4. How We Use Personal Information
   Personal information may be used for the following operational and security purposes:

Processing, authenticating, and fulfilling orders;

Arranging accurate and timely delivery;

Communicating with customers about orders, tracking updates, and enquiries;

Providing dedicated customer service and support;

Processing secure payments and mitigating transaction risks;

Managing authorized refunds and returns where applicable;

Conducting fraud detection and prevention to protect our customers and our business;

Maintaining accurate transaction and accounting records;

Responding to requests concerning personal information;

Complying with applicable legal and regulatory obligations;

Maintaining appropriate website functionality and security;

Managing cookie preferences where applicable;

Addressing suspected misuse, unauthorized access, or irregular activity where permitted by applicable law.

Personal information is never sold or used for purposes incompatible with the purposes for which it was originally collected.

5. Legal Bases for Processing
   Where the GDPR applies, the legal basis for processing personal information may include:

Contractual Necessity: Information may be processed where necessary to take steps requested before an order or to fulfill an order and its related contractual obligations.

Legal Obligations: Information may be retained or processed where required to comply with applicable accounting, tax, consumer, regulatory, or other statutory obligations.

Consent: Where processing requires explicit consent under applicable law, information will only be processed for that purpose after the required consent has been lawfully obtained. Consent may be withdrawn at any time where applicable.

Legitimate Interests: Where permitted by applicable law, information may be processed where necessary for legitimate business interests (such as fraud prevention and network security), provided that such interests are not overridden by the applicable rights and interests of the individual.

6. Secure Payment Processing by Stripe
   All payments made through our website are securely processed by our authorized payment gateway, Stripe.
   Stripe acts as the primary payment processing service provider for transactions made through www.petplayhaven.com. When you choose to make a payment, relevant transaction information is encrypted and transmitted directly to Stripe so that the payment can be safely processed.
   Petplayhaven maintains strict PCI-DSS compliance. We do not capture, process, or store complete payment card details (such as full credit card numbers or CVC codes) directly on our own servers. All such sensitive financial data is collected and processed entirely within Stripe’s highly secure infrastructure.
   Information processed by Stripe to authorize a transaction may include:

Name and Email address;

Billing and delivery information;

Payment method information;

Transaction amount and date;

Payment status and order-related fraud-check information.

Stripe processes personal information in accordance with its own rigorous privacy practices and applicable legal requirements. For further information on how Stripe collects, uses, shares, and protects personal information, please review Stripe’s official Privacy Policy.

7. Information Shared With Service Providers
   Personal information may be shared with trusted service providers only where strictly necessary to operate the website, process orders, arrange logistics/delivery, provide customer communications, process payments, maintain secure records, or fulfill legal obligations.
   Our service providers are bound by strict confidentiality agreements and are only provided with the minimum information relevant to the specific services they perform, where permitted by applicable law.
8. Data Retention
   Petplayhaven applies the strict principle that personal information should not be retained for longer than is absolutely necessary for the purpose for which it was collected, subject to applicable legal obligations.

Order and Transaction Records: Retained for the period required under applicable German and European tax, accounting, and commercial record-keeping laws.

Customer Service Communications: Retained for the period reasonably necessary to handle the enquiry and address any subsequent post-purchase matters, ensuring a clear record for dispute resolution.

Consent Records: Retained for a period appropriate to demonstrate that the relevant consent was verifiably obtained.

Legal Claims and Security Matters: Information may be retained as long as reasonably necessary to investigate fraud, defend legal claims, or comply with regulatory requirements.

9. Cookies and Similar Technologies
   Our website uses cookies and similar tracking technologies to ensure functionality and security.
   Strictly necessary cookies required for secure checkout and site operation operate automatically. Non-essential cookies that require consent will only be used after the visitor has explicitly selected “Accept” through our Cookie banner.
   Where Stripe uses cookies or similar technologies for risk evaluation and fraud prevention during payment, such processing is subject to Stripe’s applicable privacy practices. Further details are available in our Cookie Policy.
10. International Data Transfers
    Some service providers used in connection with our website operations or secure payment processing may process information in countries outside Germany or the European Economic Area (EEA).
    Where the GDPR applies and personal information is transferred outside the EEA, the transfer will be strictly carried out using a lawful data transfer mechanism (such as Standard Contractual Clauses) as required by applicable law. Stripe operates under robust privacy frameworks, including the EU-U.S. Data Privacy Framework.

11. Data Security
    Petplayhaven applies rigorous organizational, administrative, and technical security measures (including SSL encryption) to protect all personal information handled through the website.
    Access to personal information is strictly limited to authorized personnel only under circumstances in which it is required for relevant business, fulfillment, or legal purposes. While no method of digital transmission is entirely without risk, Petplayhaven continuously reviews its information-handling practices to maintain a highly secure environment for our customers.
12. Your Rights Under the GDPR
    Where the GDPR applies, you possess robust rights concerning your personal data, subject to applicable legal conditions, including:

Right to access your personal information;

Right to request correction of inaccurate information;

Right to request full erasure (Right to be Forgotten);

Right to request restriction of processing;

Right to object to certain processing;

Right to data portability where applicable;

Right to withdraw consent where processing is based on consent;

Right to lodge a formal complaint with a competent data protection supervisory authority.

We are committed to handling all privacy requests without undue delay and strictly within the applicable statutory periods.

13. United States Privacy Rights
    Privacy requirements in the United States vary according to the individual’s state of residence. Where applicable United States federal or state privacy legislation (such as CCPA/CPRA) provides specific rights concerning personal information, Petplayhaven will honor all applicable rights and choices required under that legislation, including rights relating to access, correction, deletion, and opt-outs.
14. Children’s Information
    This website is intended exclusively for general adult consumers and is not directed towards children. We do not knowingly request or collect personal information from children. If a parent or legal guardian believes that a child has provided personal information to us, they may contact us to have it immediately deleted.
15. Information You Provide to Us
    When you contact us by email, telephone, or other available communication methods, we process the information provided strictly for the purpose of resolving your enquiry. Please ensure that dates or times referenced in written correspondence are provided in English to ensure accurate processing by our support systems.
16. Changes to This Privacy Policy
    This Privacy Policy may be updated periodically to reflect changes in our technical security practices, processing activities, or new legal requirements. The latest version will always be published on this page with an updated effective date.
17. Contact Information
    For any privacy-related questions, data requests, or compliance enquiries, please contact our administrative team at:
    Company: [XXX]
    Brand: Petplayhaven
    Registered Address: [XXX]
    Email: toys@petplayhaven.com
    Telephone: [XXX]