Legal
Privacy Policy
Last updated: 9 June 2026
Who We Are
The Dog Store is operated by Oxford Pet Whisperers Ltd. Our business address is 5 Hawksworth, Didcot, OX11 7HR.
We are the data controller for personal data collected through this website. If you have any questions about how we handle your data, contact us at hello@thedogstore.uk.
What Data We Collect
We collect personal data in the following ways:
- •Account registration: name, email address, password (hashed), and optionally your dog's name and birthday
- •Order placement: name, delivery address, email address, phone number, and order details
- •Payment processing: payment is handled by Shopify Payments. We do not store your card details; they are processed securely by Shopify and its payment partners
- •Loyalty programme: points balance, earning and redemption history, referral activity (via Smile.io)
- •Website usage: pages visited, time on site, device type, browser, and IP address (via Shopify analytics and cookie-based tracking, including Meta advertising measurement where you consent)
- •Communications: any messages you send us via the contact form, email, or WhatsApp
- •OPW membership data: if you are an OPW member, your membership tier is used to apply your automatic shop discount. This data originates from our GoHighLevel CRM.
How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Performance of a contract |
| Managing your account and loyalty points | Performance of a contract |
| Applying OPW member discounts | Performance of a contract / legitimate interests |
| Sending order confirmations and shipping updates | Performance of a contract |
| Responding to enquiries and customer service | Legitimate interests |
| Sending marketing emails (if you have opted in) | Consent |
| Improving our website and services | Legitimate interests |
| Complying with legal obligations | Legal obligation |
Third-Party Services (Data Processors)
We use the following third-party services to operate the shop. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements:
- •Shopify Inc: e-commerce platform, payment processing, and order management. Data may be processed in the USA under appropriate safeguards. Shopify's privacy policy: shopify.com/legal/privacy
- •Smile.io: loyalty programme management (points, rewards, referrals). Privacy policy: smile.io/privacy-policy
- •GoHighLevel: CRM used to manage OPW membership data and trigger automated discount updates. Privacy policy: gohighlevel.com/privacy-policy
- •Royal Mail: order fulfilment and delivery. Your name and delivery address are shared with Royal Mail for the purpose of delivering your order.
- •Manus: website hosting and infrastructure. Data is stored on secure servers within the EU/UK.
- •Meta Platforms Ireland Limited: advertising measurement and product-ad performance measurement. Browser events are sent only when you consent to marketing cookies. Privacy policy: facebook.com/privacy/policy
Marketing Communications
We will only send you marketing emails if you have explicitly opted in. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or by contacting us at hello@thedogstore.uk.
Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew consent. You will continue to receive transactional emails (order confirmations, shipping updates) as these are necessary to fulfil your contract with us.
Cookies
We use cookies and similar tracking technologies on this website. Non-essential cookies (such as analytics cookies) are only placed on your device with your explicit consent. You can manage your cookie preferences at any time using the cookie settings link in the footer, or by reading our full Cookie Policy.
How Long We Keep Your Data
- •Order and transaction data: 7 years (required for tax and accounting purposes)
- •Account data: for as long as your account is active, plus 2 years after the last activity
- •Marketing consent records: until you withdraw consent, plus 3 years
- •Customer service communications: 3 years from the date of the last communication
Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- •Right of access: you can request a copy of the personal data we hold about you
- •Right to rectification: you can ask us to correct inaccurate or incomplete data
- •Right to erasure: you can ask us to delete your data in certain circumstances
- •Right to restrict processing: you can ask us to pause processing of your data
- •Right to data portability: you can ask for your data in a machine-readable format
- •Right to object: you can object to processing based on legitimate interests or for direct marketing
- •Right to withdraw consent: where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, contact us at hello@thedogstore.uk. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses HTTPS encryption. Payment data is handled exclusively by Shopify Payments, which is PCI DSS compliant.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last updated. For significant changes, we will notify you by email or by a prominent notice on the website.
Contact Us
If you have any questions about this Privacy Policy or how we handle your data, contact us at hello@thedogstore.uk or via the contact form.
