Privacy & measurement

Effective date: 9 September 2026.

We use your checkout details to record your payment and fulfil your order. Stripe processes payments; we do not receive your full card number.

Optional store analytics

If you agree, we use a random browser identifier to connect visits, product views, bag actions and checkout activity. Campaign tags tell us which links brought visitors here. We store the first and most recent non-direct source, then link that information to a confirmed order. We do not record keystrokes or payment form contents.

Optional Meta/Instagram measurement

With your marketing permission, we share selected visits, product actions and confirmed purchases with Meta. This can include campaign click identifiers, browser information, a random identifier and a hashed checkout email to help Meta match an event. Hashing does not make that data anonymous. Meta’s browser pixel may also receive your IP address and set its own cookies. We honour the Global Privacy Control signal by disabling marketing measurement.

Your answers

After payment, you can optionally tell us where you heard about the store and what influenced your choice. Those answers stay with your order and are separate from measured advertising attribution.

Order emails and support

We use Cloudflare to host the store, store order records and send order confirmations, dispatch updates and support replies. These service emails use your email address and relevant order details. We record delivery, bounce and complaint status to troubleshoot delivery and stop messages to addresses that bounce or report spam. These emails contain no open-tracking pixels or tracked redirect links. Detailed delivery events and separate email-log recipient addresses are removed after 90 days; order email status and minimal suppression records are kept separately to prevent duplicates and unwanted messages.

Storage and choices

Optional measurement identifiers expire 90 days after your last visit. Detailed activity is retained for up to 90 days after it is recorded. Order-attribution snapshots are removed after 365 days. Payment and delivery records are kept separately for running the store and meeting applicable record-keeping obligations. Only authorised store administrators can view buyer details and journeys.

You can reject optional measurement and still shop. Use “Privacy preferences” in the footer to change your choices. Revoking permission stops new optional collection and suppresses queued Meta events. It cannot recall information already delivered to Meta.

For access, correction, deletion or an appeal about a privacy request, email privacy@driftandpaw.com. We may need to verify your identity before releasing or changing personal information. Some payment records may need to be retained to meet legal obligations. We will explain any limits that apply. We do not discriminate against you for exercising applicable privacy rights. See Meta’s privacy policy and Stripe’s privacy policy for their processing.

See Cloudflare’s privacy policy for its processing. Services may process data in the United States and other countries.

Browser signals and policy changes

We use the privacy preferences described above and honour Global Privacy Control for marketing measurement. We do not separately change our practices in response to legacy “Do Not Track” browser signals. When permitted, Meta may collect information about your activity across websites over time.

We will update the effective date when this policy changes. Material changes will be highlighted on the website and, where appropriate, notified by email. If a change needs new permission, we will ask before applying it.