Privacy Policy

1. Information We Collect

1.1 Personal Information

When you place an order with Paw Prints Sanctuary, we collect:

1.2 Automatically Collected Information

• Website Usage: Pages visited, time spent, click patterns
• Device Information: Browser type, operating system, screen resolution
• Location Data: General location (city/state) for tax purposes
• Cookies: For website functionality and user preferences

1.3 Information We DON'T Collect

• Social security numbers or government ID numbers
• Sensitive personal information unrelated to our service
• Information about other pets or family members unless provided voluntarily
• Financial information beyond what's needed for payment processing

2. How We Use Your Information

2.1 Primary Uses

• Order Fulfillment: Creating and delivering your custom pet portraits
• Customer Service: Responding to questions and providing support
• Payment Processing: Securely processing transactions
• Donation Tracking: Ensuring transparent allocation of rescue donations

2.2 Communication

• Order confirmations and updates
• Delivery notifications
• Customer service responses
• Optional marketing emails (with your permission)

2.3 Business Operations

• Improving our website and services
• Analyzing customer preferences to enhance our offerings
• Preventing fraud and ensuring security
• Complying with legal requirements

3. Information Sharing

3.1 Service Providers

We share limited information with:

• Payment Processors (Stripe): For secure payment handling
• Email Service (SendGrid): For order confirmations and communication
• Cloud Storage (AWS): For secure file storage and delivery
• Analytics (Google Analytics): For website improvement (anonymized data)

3.2 Rescue Organizations

• Donation amounts (aggregated, not individual)
• No personal customer information shared
• Donation reports available for transparency

3.3 Legal Requirements

We may share information if required by law, such as:

• Court orders or legal subpoenas
• Law enforcement requests with proper legal basis
• Protecting our rights or the safety of others

4. Data Security

4.1 Payment Security

• All payments processed through Stripe (PCI DSS Level 1 certified)
• We never store full credit card numbers
• Payment data encrypted during transmission and storage
• Two-factor authentication for administrative access

4.2 File Security

• Pet photos encrypted during upload and storage
• Finished artwork files protected with access controls
• Regular backups with encryption
• Secure delivery links that expire after download

5. Your Rights and Choices

5.1 Account Control

• Access: Request a copy of your personal information
• Correction: Update or correct your information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format

5.2 Communication Preferences

• Opt out of marketing emails at any time
• Choose preferred communication methods
• Unsubscribe links in every email
• Customer service emails cannot be opted out (order-related)

5.3 Cookie Management

• Control cookies through your browser settings
• Essential cookies required for website functionality
• Analytics cookies can be disabled
• Marketing cookies optional

6. Data Retention

7. Children's Privacy

Our services are intended for adults (18+). We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

If you are between 13-17, you may use our services with parental consent. Parents can contact us to review, update, or delete their child's information.

8. International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules
• Certification programs

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

10. European Union Rights (GDPR)

EU residents have rights under the General Data Protection Regulation:

• Lawful Basis: Legitimate interest and contract performance
• Data Subject Rights: Access, rectification, erasure, portability
• Data Protection Officer: Available for privacy concerns
• Supervisory Authority: Right to lodge complaints

11. Updates to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. When we make significant changes:

• We'll notify you via email before changes take effect
• We'll post the updated policy on our website
• We'll update the "Last modified" date
• We'll highlight material changes clearly

12. Contact Us

13. Donation Transparency