In force from: 21 August 2026
We explain here, simply and completely, what data we collect about you, why we collect it, who else sees it and what rights you have. Without needless legalese, but with everything the law requires.
1. Who we are
The controller of your data is:
- PETIQUE SRL
- VAT number: RO51980472
- Trade Register no.: J2025043075002
- Registered office: Strada Cpt. Sultana 39, sat Săcueni, postcode 137243, Dâmbovița County, Romania
- Email: contact@petique.ro
For any question about your data, write to us at contact@petique.ro. We usually answer within 1-2 working days; for requests concerning your rights, we answer within one month at most, as the law requires.
2. What data we collect and why
We collect strictly what is needed to process your order and to meet our legal obligations. The data under “Order and delivery” is necessary for concluding and performing the contract. Without it we can't process your order. Everything else (the account, the dog profile, the newsletter) is optional. Specifically:
Order and delivery
What: name, phone, delivery address, billing address, order history (what you bought, when, the value).
Why: so we can deliver your order and issue the invoice.
Legal basis: performance of the contract (art. 6(1)(b) GDPR) and the legal obligation to invoice (art. 6(1)(c) GDPR).
How long: 5 years, under Romanian tax legislation. We can't delete billing data sooner. That's a legal obligation, not our choice.
What: your email address.
Why: two separate purposes, with separate rules:
- Order confirmations and delivery tracking: you receive these automatically with any order. They're part of the contract, you don't need to subscribe.
- Newsletter: only if you subscribe explicitly. Consent for the newsletter is separate from the order: you can buy without subscribing, and subscription is never ticked by default. You unsubscribe at any time with one click, from the “Unsubscribe” link in every email, or by writing to us at contact@petique.ro.
Legal basis: the contract for order emails; your consent (art. 6(1)(a) GDPR) for the newsletter.
How long: email linked to orders: 5 years (tax obligation); newsletter email: until you unsubscribe or ask us to delete it.
The contact form
What: your name, email and message, when you write to us from the contact page.
Why: so we can answer your questions and requests.
Legal basis: steps taken at your request (art. 6(1)(b) GDPR), for example a question about an order, or our legitimate interest in answering people who write to us (art. 6(1)(f) GDPR).
How long: for as long as it takes to resolve the request, then a maximum of 2 years from the last message, except for correspondence linked to an order or a complaint, which is kept as long as the order data.
The dog profile
You can optionally fill in a profile of your dog: name, date of birth, sex, size, weight, activity level, confirmed allergies, food preferences and health conditions (for example diabetes, kidney problems, a sensitive stomach). We use it to flag automatically the products that don't suit your dog, for example, products containing a confirmed allergen get a visible warning on the product card, on the product page and in the cart.
There's an extra layer of privacy here that we want you to know about:
- The profile describes your animal, not you. Even so, when it's saved in your account, it's linked to an identifiable person, so we treat it as your personal data, with all the rights in section 6.
- Without an account: the profile is saved in your browser, on the device you filled it in on (localStorage). We don't store it on our servers. Syncing with our systems works only for accounts, and without an account nothing from the profile is retained by our systems. You can delete it at any time from the Dog profile page or by clearing your browser's browsing data.
- With an account, while you're signed in: the profile is also saved in your Petique account, so you can find it again from any device. It stays in your account only. We don't use it for any other purpose and we don't pass it to anyone.
- When you sign out using the sign-out button on the site, the profile disappears from the pages and stops flagging products. So you don't lose your data on an accidental sign-out, a copy stays in the browser's memory on that device; copies associated with your account are deleted automatically when another customer signs in there. On a shared computer, if you want nothing left behind, delete the profile from the Dog profile page before you sign out, or clear your browser's browsing data.
Information about allergies is used only for product compatibility and doesn't replace your vet's advice.
Legal basis: your consent. The profile is entirely optional.
How long: until you delete it or until you ask us to delete your account.
Customer account
If you create an account: email, name, saved addresses, order history and, if you filled it in, the dog profile. The account is optional. You can order without one.
Legal basis: performance of the contract (art. 6(1)(b) GDPR). The account is a service you ask us for, and this data is needed for us to provide it.
How long: until you ask for the account to be deleted (except billing data, 5 years, see above).
Cookies and technical data
Strictly necessary cookies, the shopping cart, the session and the security of the Shopify platform, always work: without them the shop simply doesn't run. A saved cart expires automatically after an interval set by the Shopify platform.
With your agreement, given in the cookie banner, two more categories are set: the Shopify platform's statistics cookies (they show us how the shop is used) and the Klaviyo cookie, used for the newsletter and for emails relating to your cart. If you don't give your agreement, the shop works normally, just without these cookies. You can withdraw your agreement at any time from the site's cookie settings or by deleting the cookies from your browser.
On every visit, the Shopify platform also processes technical log data (IP address, browser type) for the shop's security and fraud prevention: our legitimate interest in keeping the site safe (art. 6(1)(f) GDPR). These logs aren't used for marketing.
We don't use advertising cookies from third-party networks (Google, Meta, TikTok) and we don't track your browsing on other sites.
3. Who else sees your data
We don't work alone, but each partner sees only the strict minimum: Shopify and Klaviyo under a data processing agreement (art. 28 GDPR), and the courier as an independent controller, under postal services legislation:
- Shopify: the platform the shop runs on. It processes orders and payments; card details are encrypted to the PCI-DSS standard and never reach us.
- Courier (FAN Courier): receives only the delivery details: name, phone, address. That's all.
- Klaviyo: the platform we send the newsletter through. It receives your email address and, for emails relating to orders (for example an abandoned cart), information about your order or cart, only if you've given your agreement to marketing communications.
Public authorities (for example ANAF, the Romanian tax authority) may receive data where the law obliges us.
4. What we do NOT do
- We don't sell your data. To anyone, ever.
- We don't pass it to third parties for marketing and we don't build profiles for other companies.
- We don't store card details: payments are processed encrypted by Shopify Payments (PCI-DSS).
- We don't collect biometric data, GPS location or your browsing on other sites.
- We don't take automated decisions with legal effect on you. The only “automation” is the flagging of products as suitable or unsuitable according to the dog profile, a function you control completely.
5. Transfers outside the European Union
Two of our partners have infrastructure in the United States as well:
- Shopify (order processing)
- Klaviyo (newsletter)
For these transfers the safeguards required by the GDPR apply: standard contractual clauses (SCCs) approved by the European Commission and, where the partner is certified, the EU-U.S. Data Privacy Framework. Your data enjoys a level of protection equivalent to that in the EU. You can obtain a copy of these safeguards (the standard contractual clauses) by writing to us at contact@petique.ro; the list of companies certified under the Data Privacy Framework is public at www.dataprivacyframework.gov.
6. Your rights
The GDPR gives you concrete rights, and with us you exercise them through a simple email to contact@petique.ro:
- Access: you find out exactly what data we hold about you.
- Rectification: we correct any incorrect data.
- Erasure: we delete your data within 30 days at most, subject to the exceptions provided by law: billing data is kept for 5 years (tax obligation), and data strictly necessary for establishing, exercising or defending a legal claim may be kept until the statutory limitation periods expire. You receive written confirmation once the deletion is complete.
- Portability: you receive your data in a structured format, so you can move it wherever you want.
- Objection: you object to processing based on legitimate interest.
- Restriction: you ask us to “freeze” the processing while we clear up a dispute.
- Withdrawal of consent: at any time, just as easily as you gave it (for example, unsubscribing from the newsletter with one click). Withdrawal doesn't affect processing carried out while the consent was valid.
For erasure requests, use the subject line “GDPR data erasure” and mention the email you use for orders. It helps us identify you quickly.
If you feel we haven't handled a request properly, you have the right to lodge a complaint with ANSPDCP (the Romanian National Supervisory Authority for Personal Data Processing), www.dataprotection.ro, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest. But we'd be glad if you wrote to us first. We sort it out directly, with no running around.
7. How long we keep data: in brief
- Billing and order history: 5 years (Romanian tax obligation).
- Newsletter email: until you unsubscribe or request erasure.
- Correspondence from the contact form: for as long as it takes to resolve, then a maximum of 2 years.
- Customer account: until the account is deleted.
- Dog profile (without an account): on your device only, until you delete it.
- Dog profile (in an account): until you delete it or delete your account.
- Necessary cookies (cart, session, security): some expire when you close the browser, others after a few weeks at most (for example the saved cart); the durations are set by the Shopify platform.
- Statistics and newsletter cookies: they're set only with your agreement and stay until you withdraw it or delete them from your browser.
8. How to contact us
For any question about your data:
PETIQUE SRL · VAT number RO51980472 · registered office in Dâmbovița County, Romania (full address in section 1)
contact@petique.ro. We usually answer within 1-2 working days; for requests concerning your rights, we answer within one month at most, as the law requires.
9. Updates to this policy
If we change something important in the way we process data, we update this page and the date at the top. For major changes that affect you directly, we let you know by email.
