Privacy policy

Privacy Policy

Last updated: [2026 — 03-01]

Heirloom Paw ("we," "our," "us") respects your privacy. This page explains, in plain English, what data we collect, why we collect it, and what we will and will not do with it.

If you ever have a question we haven't answered here, email us at [privacy@heirloompaw.com] and a real human will reply.

1. What we collect

When you visit or order from heirloompaw.com, we may collect:

  • Information you give us directly: name, email address, shipping address, phone number (optional), payment details (processed by Shopify Payments / Stripe / PayPal — we never see your full card number), and the photo(s) of your pet you upload for your portrait.
  • Information collected automatically: IP address, browser type, device type, pages visited, items viewed, and how you arrived on our site (referral source). This is gathered through standard cookies and pixels (Google Analytics, Meta/Facebook Pixel, TikTok Pixel).
  • Email engagement data: when emails from us are opened, clicked, or unsubscribed (via Klaviyo).

2. Why we collect it

We use your information only to:

  1. Make and ship your custom heirloom.
  2. Email you proofs, order updates, and (if you opt in) marketing.
  3. Provide customer support when you write to us.
  4. Improve our website and product (anonymized analytics).
  5. Detect and prevent fraud.

That's it. We do not collect data we don't need.

3. About your pet's photos

The photos you upload are used only to create your portrait. We may also, with your written permission only, use a photo of the finished product on our website or social media as marketing — never a photo of your pet alone, never your name, never identifying details.

You can ask us to delete your uploaded photos at any time, after your order ships, by emailing us. We retain photos for 90 days post-delivery (in case you request a remake under our 45-day guarantee + a buffer), then delete them.

4. Who we share data with

We share information only with the third parties needed to run our business:

  • Shopify — our e-commerce platform
  • Stripe / PayPal / Shop Pay — payment processors
  • Klaviyo — email service provider
  • Google, Meta, TikTok — advertising and analytics platforms (cookies/pixels)
  • Shipping carriers (USPS, DHL, FedEx, etc.) — to deliver your order
  • Judge.me — to collect product reviews you choose to submit

We do not sell your personal information to third parties. We do not share it with data brokers. We do not rent it. Ever.

5. Cookies

When you visit our site, small text files ("cookies") may be stored on your device. We use:

  • Strictly necessary cookies — to make the site and your cart work
  • Analytics cookies — to count visitors and understand how the site is used
  • Marketing cookies — to show you relevant ads on Meta, Google, TikTok

You can disable non-essential cookies through the cookie banner that appears on your first visit, or through your browser settings.

6. Your rights

Depending on where you live, you have rights over your data:

  • EU / UK (GDPR): right to access, correct, delete, restrict processing, data portability, and to lodge a complaint with your supervisory authority.
  • California (CCPA / CPRA): right to know, delete, correct, and opt out of "sale or sharing" of your personal info. We do not sell or share for cross-context behavioral advertising in the CCPA sense — but you can still request data access or deletion at any time.
  • Everywhere else: you can email us anytime to access, correct, or delete your data. We'll do it within 30 days.

To exercise any right, email [privacy@heirloompaw.com].

7. Data security

Payments are handled by PCI-compliant processors (Shopify Payments / Stripe / PayPal). All traffic to our site is encrypted with HTTPS (SSL). We restrict employee access to customer data on a need-to-know basis. We will never email you asking for your password or full credit card number — if anyone does, it isn't us.

8. Children

Our products are intended for adults (18+). We do not knowingly collect data from children under 16. If you believe a child has submitted information to us, please email us and we will delete it.

9. Changes to this policy

If we make material changes, we will post the new version here with an updated date, and (for active customers) email you a summary.

10. Contact

📧 privacy@heirloompaw.com 🏠 [Insert business address — required for GDPR/CCPA compliance]

— The Heirloom Paw team