Privacy policy

Privacy Policy

Last updated: November 2, 2026

This Privacy Policy explains how Pawhaus collects, uses, shares and protects your personal information when you visit our website, buy from us or contact us. Please read it carefully.

1. Who is responsible for your data

Data controller: Gomez y Tudela S.L.
Trade name: Pawhaus
Tax ID (CIF): B72250053
Registered address: Calle Serafín Álvarez Campana 7, 11500 El Puerto de Santa María, Cádiz (Spain)
Registry details: Commercial Registry of Cádiz, volume 2104, folio 62, sheet CA-45753
Email: soporte.tiendaonline@outlook.es

Because we are a company established in Spain, we process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). We also respect the privacy rights granted by the laws of the U.S. states where our customers live.

2. What personal information we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number, billing and shipping address.
  • Order information: products purchased, order number, amount paid, returns and order history.
  • Payment information: payment is processed by our payment providers. We do not store your full card number.
  • Communications: the messages you send us by email or through our contact form.
  • Device and usage information: IP address, browser, device type, pages visited, and how you interact with our website, collected through cookies and similar technologies.
  • Marketing preferences: whether you have subscribed to our emails.

We collect this information directly from you, automatically when you use our website, and from our service providers (for example, payment and shipping confirmations).

3. Why we use your information and our legal basis

  • To process and deliver your order, handle returns and refunds, and send you order and shipping updates. Legal basis: performance of the contract with you.
  • To answer your questions and provide customer service. Legal basis: performance of the contract or our legitimate interest in helping you.
  • To comply with legal obligations, such as tax and accounting requirements. Legal basis: legal obligation.
  • To prevent fraud and keep our store secure. Legal basis: our legitimate interest.
  • To send you marketing emails about our products and offers. Legal basis: your consent. You can unsubscribe at any time using the link in every email.
  • To measure and improve our website and advertising, using analytics and advertising cookies. Legal basis: your consent, where required.

We do not use your data to make decisions with legal or similarly significant effects based solely on automated processing.

4. Who we share your information with

We only share your information when necessary for the purposes above:

  • Shopify, the platform that hosts our store and processes our orders.
  • Payment providers, to process your payment securely.
  • Our suppliers and fulfillment partners, who prepare and ship your order. They receive your name, shipping address and order details for this purpose only.
  • Shipping carriers, to deliver your order and provide tracking.
  • Email service providers, to send order updates and, if you have subscribed, marketing emails.
  • Analytics and advertising partners, such as social media platforms, when you have consented to the corresponding cookies.
  • Public authorities, when required by law.

We do not sell your personal information for money. Some uses of advertising cookies may be considered "selling" or "sharing" under certain U.S. state laws; you can opt out as explained in section 8.

5. International transfers

Some of our service providers are located outside the European Economic Area, including in the United States and China. When we transfer personal data outside the EEA, we rely on recognized safeguards, such as the European Commission's Standard Contractual Clauses or adequacy decisions, to protect your information.

6. How long we keep your information

  • Order and billing data: for as long as needed to fulfill your order and handle any returns or warranty claims, and then for up to 6 years to comply with Spanish commercial and tax law.
  • Customer service messages: for as long as needed to resolve your request and any related claim.
  • Marketing data: until you unsubscribe or withdraw your consent.
  • Cookies: for the period indicated in our cookie banner.

7. Cookies

We use cookies and similar technologies that are necessary for our store to work (for example, to keep items in your cart and complete checkout). With your consent, we also use analytics and advertising cookies. You can accept, reject or change your preferences at any time through the cookie banner and your browser settings.

8. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete your information;
  • receive a copy of your information in a portable format;
  • object to or restrict certain processing;
  • withdraw your consent at any time, without affecting processing carried out before;
  • opt out of the "sale" or "sharing" of your personal information and of targeted advertising.

To opt out of the sale or sharing of your personal information, visit our Your Privacy Choices page. If your browser sends a Global Privacy Control (GPC) signal, we will treat it as a valid opt-out request for that browser.

To exercise any other right, email us at soporte.tiendaonline@outlook.es. We may need to verify your identity before responding. You may use an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your rights.

If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection or consumer authority where you live. If you live in the United States and your request is denied, you can appeal by replying to our response.

9. Children

Our store is intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We take reasonable technical and organizational measures to protect your personal information, including encrypted connections on all pages of our website. However, no method of transmission over the internet is completely secure.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version will always be published on this page with its last update date.

12. Contact

For any question about this Privacy Policy or your personal data, contact us at soporte.tiendaonline@outlook.es or write to Gomez y Tudela S.L., Calle Serafín Álvarez Campana 7, 11500 El Puerto de Santa María, Cádiz (Spain).