Privacy policy

Last updated: November 3, 2026

1. Data controller

1.1. The controller of your personal data is: Kitty Pouches (kittypouches.com), email: contact@kittypouches.com.

1.2. For any questions about your personal data or product safety, contact us at contact@kittypouches.com.

2. Why we process your data and on what legal basis

• Fulfilling your order, including sharing data with our suppliers abroad (Art. 6(1)(b) GDPR – performance of a contract).
• Handling questions, complaints and product safety reports (Art. 6(1)(f) GDPR – our legitimate interest).
• Sending our newsletter, if you have subscribed (Art. 6(1)(a) GDPR – consent).
• Analysing website traffic and improving our store (Art. 6(1)(f) GDPR – our legitimate interest).
• Processing payments through external payment providers (Art. 6(1)(b) GDPR – performance of a contract).

3. What data we collect

3.1. Depending on how you use our store, we may collect: your name, email address, shipping address, phone number and transaction details (processed only by payment providers).

3.2. We do not store payment card details – they are processed directly by payment providers in accordance with their privacy policies.

3.3. Your name and shipping address may be shared with our suppliers abroad to fulfil your order.

4. Who receives your data

4.1. Your data may be shared with: product suppliers (to fulfil orders), courier and logistics companies, payment providers, Shopify Inc. (our e-commerce platform) and analytics providers (e.g. Google Analytics).

4.2. Each recipient processes data in accordance with the GDPR and on the basis of data processing agreements.

5. How long we keep your data

5.1. We keep your data for as long as needed to fulfil your order (including returns and complaints), for the period required by law (e.g. 5 years for tax purposes, counted from the end of the year of the transaction), until you withdraw your consent for marketing (where applicable), and for as long as needed to handle product safety reports (in line with the GPSR).

5.2. We keep analytics data only for as long as needed to improve our store, and no longer than our legitimate interest requires.

6. Your rights

6.1. Under the GDPR you have the right to: access your data (Art. 15), rectify it (Art. 16), have it erased (the "right to be forgotten", Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing (Art. 21) and withdraw your consent at any time (Art. 7(3)).

6.2. To exercise any of these rights, write to contact@kittypouches.com.

6.3. You also have the right to lodge a complaint with a data protection authority – in Poland, the President of the Personal Data Protection Office (PUODO) – or with the authority in your country.

6.4. Depending on where you live (for example in some US states), you may have additional rights, such as the right to know what data we hold about you, the right to request deletion and the right to opt out of the sale or sharing of your personal data. Contact us to exercise them.

7. Cookies and tracking technologies

7.1. Our website uses cookies to make the store work properly, to analyse traffic (e.g. Google Analytics) and to personalise content and ads.

7.2. We use Shopify's tools to manage cookies and consent.

7.3. You can manage your cookie settings in your browser or in the cookie banner on our website.

8. Transfers outside the EEA

8.1. Because we use the Shopify platform, your data may be transferred outside the European Economic Area (EEA), mainly to Canada.

8.2. Shopify Inc. uses appropriate safeguards in line with the GDPR, including standard contractual clauses.

9. Product safety (GPSR)

9.1. We process data to monitor product safety and to carry out product recalls in line with the EU General Product Safety Regulation (GPSR).

9.2. Please send product safety reports to contact@kittypouches.com. We aim to respond within 24 hours.

9.3. If a product is recalled, we will notify you by email with return instructions. See our Refund Policy for details.

10. VAT and customs

10.1. If your order is shipped from outside your country, you may be the importer of the goods and responsible for customs formalities and VAT, unless VAT is collected in the price under the EU IOSS scheme.

10.2. Information about how VAT and any customs costs are handled is shown before you place your order (e.g. in the cart or at checkout).

11. Changes to this Privacy Policy

11.1. We may update this Privacy Policy. The current version is always available on kittypouches.com. Changes take effect when they are published.