Privacy Policy
Last reviewed 10 September 2026
Draft for legal review. This text is a working draft for Paw & co and has not been checked by a lawyer. Anything marked like this is a client fact that is still missing. It must not be relied on, and the shop must not take an order until counsel has signed it off.
Who holds your data
Paw & co is the data controller. The registered entity is BHNV LTD, registered at Georgiou Griva Digeni 43, Floor 2, Limassol, 3106, Cyprus under company number HE 484147.
Questions about your data go to contact email. Our data protection officer, where one is appointed, is DPO name or “not appointed”.
What we collect, and why
To send you an order we collect your name, delivery address, email address and phone number. The phone number goes to the courier, who may need it to deliver.
Your basket is kept in a cookie on your own device. It holds the identifiers of the items you chose and how many of each — nothing about you, and no payment details.
What we do not collect
We do not run analytics, advertising or tracking of any kind on this site, and there are no third-party tags on these pages.
We never see or store card details. Payment is handled by our payment vendor, and card data goes to them directly.
Who else sees it
Your delivery details are passed to the supplier who ships your order, supplier legal name, and to their courier. Your name, email, phone and billing address are passed to our payment vendor to process the payment, and your email address to our email provider, which sends your sign-in links and receipts.
Nobody else receives your data, and we do not sell it.
How long we keep it
Order records are kept for retention period, which is the period Cyprus tax law requires.
Your basket cookie expires thirty days after you last touch it, or immediately if you clear it yourself.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. We answer within one month.
If you are not satisfied you can complain to the Office of the Commissioner for Personal Data Protection (Cyprus), the supervisory authority for Cyprus.