Privacy Policy

Privacy Policy

Last updated: 29 September 2026

1. Controller

Headway Commerce LLC
30 N Gould St, Ste N
Sheridan, WY 82801, USA
Email: info@pet-friend.co

We process personal data only to the extent necessary for the operation of this website, the processing of your order and our communication with you, or where you have given your consent.

2. Legal Bases

  • Art. 6(1)(a) GDPR – your consent, for example for analytics, advertising and newsletters
  • Art. 6(1)(b) GDPR – processing of your order
  • Art. 6(1)(c) GDPR – legal obligations, such as retention periods
  • Art. 6(1)(f) GDPR – legitimate interests, such as security and trouble-free operation

3. When You Visit This Website

When you access the site, technical data transmitted by your browser is processed automatically: browser type and version, operating system, referrer URL, date and time of the request and the IP address. This is necessary to deliver the site, ensure its stability and security and detect misuse (Art. 6(1)(f) GDPR). This data is not combined with other data sources.

4. Cookies and Consent

Technically necessary cookies – for example for the cart, session and checkout security – are required for the operation of the store (Art. 6(1)(f) GDPR).

All other cookies, in particular for analytics and advertising, are used only with your consent (Art. 6(1)(a) GDPR). You can withdraw or adjust your consent at any time via the cookie settings of this website and additionally delete cookies in your browser.

5. Order Processing

When you place an order, we process the details you provide during the ordering process: name, delivery and billing address, email address, telephone number where applicable, and details of the payment method and items ordered. This processing is necessary for the performance of the contract (Art. 6(1)(b) GDPR); without it we cannot process your order. Where retention periods under commercial and tax law apply, we store the data concerned for their duration (Art. 6(1)(c) GDPR).

6. Recipients of Your Data

We pass on your data only to the extent necessary. Depending on the process, the recipients are the following categories of service providers, which act for us as processors or under their own responsibility:

  • Store and hosting providers for the operation, provision and security of this website
  • Payment service providers for processing the payment method you have chosen. We do not receive full payment details such as card numbers ourselves; they are entered directly with the provider. For fraud prevention and for purchases on invoice or in instalments, providers may carry out an identity or credit check (Art. 6(1)(b) and (f) GDPR).
  • Shipping and fulfilment providers for packaging, delivery and tracking. Where shipping takes place from another country, the details required for customs clearance are transmitted to the competent authorities (Art. 6(1)(c) GDPR).
  • Email service providers for order and service notifications and the newsletter
  • Analytics and advertising providers, exclusively on the basis of your consent

Your data is not passed on for other purposes, and in particular is not sold.

7. Analytics and Advertising

With your consent, we use services that allow us to analyze the use of our store and measure the effectiveness of our advertising. In doing so, pseudonymous usage data as well as details of orders and the origin of the visit may be processed and transmitted to the respective providers, partly in encrypted form, in order to show you relevant advertising on external platforms.

The legal basis is exclusively your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the cookie settings.

8. Emails and Newsletter

We send you order, shipping and service notifications to process your order (Art. 6(1)(b) GDPR).

You receive newsletters and marketing emails only with your express consent (Art. 6(1)(a) GDPR) or, as an existing customer, where permitted by applicable law. You can unsubscribe at any time via the unsubscribe link in every email or by sending a message to info@pet-friend.co. If you send us an enquiry, we process your message exclusively to respond to it.

9. Customer Account

You can order from us without creating a customer account. If you create one, we store the data held there until you delete it. You can request deletion at any time at info@pet-friend.co; statutory retention obligations remain unaffected.

10. Transfers to Other Countries

Some of the service providers we use process data outside Canada, in particular in the USA and the European Union. Where the country or recipient concerned is recognized as providing an adequate level of data protection, we rely on that. Otherwise, transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) or your express consent (Art. 49(1)(a) GDPR).

Please note that other countries may not provide a level of data protection comparable to that of Canadian or European law, and access by government authorities cannot be ruled out entirely.

11. Retention Period

We store personal data only for as long as necessary for the respective purpose. For data from order processing, retention periods under applicable commercial and tax law of generally six or ten years apply; after that, the data is deleted. Data processed on the basis of consent is deleted once consent is withdrawn, unless another legal basis applies.

12. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

You can object at any time to the processing of your data for direct marketing purposes; we will then no longer process it for this purpose.

To exercise your rights, an informal message to info@pet-friend.co is sufficient.

Independently of this, you have the right to lodge a complaint with a data protection authority – in Canada, the Office of the Privacy Commissioner of Canada (OPC) – in particular in the country of your place of residence, your workplace or the place of the alleged infringement (Art. 77 GDPR).

13. Data Security

This website uses TLS encryption, recognizable by the “https://” in your browser's address bar. In addition, we take appropriate technical and organizational measures to protect your data against loss, manipulation and unauthorized access.

14. Changes

We update this Privacy Policy as soon as the legal situation or the services we use change. The version published here applies in each case; the date of the last update is shown at the top of this page.