Privacy & Security Policy

1. Information We Collect

1.1 Personal Information

When you place an order or create an account, we collect:

• Full name
• Email address
• Shipping address
• Billing address
• Phone number (optional)
• Custom engraving text (your dog's name)

1.2 Payment Information

Payment card information is collected and processed securely by our payment processor (PayTR). We do not store complete credit card numbers on our servers. Only the last 4 digits and card type are retained for order reference purposes.

1.3 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website
• Geographic location (country/region)

2. How We Use Your Information

2.1 Order Processing

• Process and fulfill your orders
• Laser engrave custom text on products
• Arrange shipping and delivery
• Send order confirmations and shipping notifications
• Handle returns and refunds

2.2 Customer Service

• Respond to inquiries and support requests
• Resolve disputes and troubleshoot issues
• Provide product information and recommendations

2.3 Marketing Communications (With Consent)

• Send promotional emails about new products and special offers
• Share blog content and pet care tips
• Announce sales and discounts

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any email or contacting us directly.

2.4 Website Improvement

• Analyze website traffic and user behavior
• Improve website functionality and user experience
• Develop new features and products
• Prevent fraud and enhance security

3. Data Security

3.1 Encryption

All data transmitted between your browser and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology. This is the same level of encryption used by banks and financial institutions. You can verify our SSL certificate by looking for the padlock icon in your browser's address bar.

3.2 Payment Security

Payment processing is handled by PCI-DSS compliant payment processor (PayTR). Your payment card information is tokenized and encrypted. We never have access to your complete card details.

3.3 Data Storage

Your personal information is stored on secure servers with the following protections:

• Firewall protection
• Regular security audits
• Access controls and authentication
• Encrypted databases
• Regular backups

3.4 Employee Access

Only authorized OlivoPaw employees who need access to process orders and provide customer service can view your personal information. All employees are bound by confidentiality agreements.

4. Data Sharing and Third Parties

4.1 Service Providers

We share your information with trusted third-party service providers who help us operate our business:

• Payment Processor: PayTR (for payment processing)
• Shipping Carriers: International courier services (for delivery)
• Email Service: For sending order confirmations and notifications
• Analytics: Google Analytics (anonymized data only)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. You will be notified of any such change.

4.4 What We Don't Do

We will never:

• Sell your personal information to third parties
• Rent or lease your email address
• Share your data with advertisers without consent
• Use your information for purposes other than stated in this policy

5. Cookies and Tracking

5.1 What Are Cookies

Cookies are small text files stored on your device that help us remember your preferences and improve your browsing experience.

5.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (shopping cart, checkout)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your settings and preferences

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

6. Your Rights (GDPR & CCPA)

6.1 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this in a portable format within 30 days.

6.2 Right to Rectification

You can request corrections to any inaccurate or incomplete personal information.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information, subject to legal retention requirements (e.g., tax records, order history for warranty purposes).

6.4 Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy or our legitimate grounds for processing it.

6.5 Right to Data Portability

You can request your data in a machine-readable format to transfer to another service.

6.6 Right to Object

You can object to processing of your data for marketing purposes or based on legitimate interests.

6.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

We will respond to your request within 30 days. You may need to verify your identity before we process your request.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill orders and provide customer service
• Comply with legal obligations (tax records: 7 years)
• Resolve disputes and enforce agreements
• Maintain warranty and return records

After this period, we will securely delete or anonymize your data.

8. International Data Transfers

OlivoPaw is based in Turkey. If you are located in the European Union, United Kingdom, or other regions with data protection laws, your information may be transferred to and processed in Turkey. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Children's Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child, we will delete it promptly.

10. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR, and provide information about the breach and steps we are taking to address it.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or by posting a notice on our website. The "Last Updated" date at the top of this page indicates when the policy was last revised.

12. Contact Information

For questions about this privacy policy or our data practices:

13. Supervisory Authority

If you are located in the EU/EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.