Privacy Policy

Family's Best Friend ("we," "us," or "our") operates at familiesbestfriend.com. We are the data controller for personal information collected through this website. For privacy inquiries, contact us at privacy@familiesbestfriend.com.

We collect the following categories of personal information:

• Identifiers: name, email address, IP address, account credentials.
• Commercial information: purchase history, order details, cart contents.
• Pet profile data: pet name, species, age, breed, health notes, mobility level — provided voluntarily.
• Quiz responses: answers you submit in the Comfort Quiz to generate recommendations.
• Payment information: processed securely by Stripe. We never store full card numbers or financial data on our servers.
• Internet/network activity: pages visited, time on site, browser type, referring URLs, collected via cookies and analytics.
• Geolocation data: approximate location derived from IP address for shipping and compliance purposes.

We do not knowingly collect data from children under 16 years of age.

For users in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:

• Contract performance: to process and fulfill your orders.
• Legitimate interests: to improve our services, prevent fraud, and ensure site security — where our interests are not overridden by your rights.
• Consent: to send marketing emails and newsletters. You may withdraw consent at any time.
• Legal obligation: to comply with applicable laws, including tax and consumer protection regulations.

• To process, fulfill, and communicate about your orders.
• To personalize product recommendations based on your pet's profile and quiz responses.
• To send transactional emails (order confirmations, shipping updates) — these cannot be opted out of.
• To send marketing communications and newsletters, with your consent.
• To analyze site usage and improve our website, products, and services.
• To detect and prevent fraud and security incidents.
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We share data only with trusted service providers acting on our behalf:

• Stripe — payment processing (PCI-DSS compliant).
• Printify — custom product fulfillment.
• Supliful — supplement fulfillment.
• Shipping carriers — order delivery.
• Analytics providers — aggregated, anonymized usage analysis.

All third-party processors are contractually bound to protect your data and use it only for the purposes we specify. We may disclose information if required by law, court order, or to protect the rights and safety of our users.

We use the following types of cookies:

• Strictly necessary: session management, cart persistence, authentication. These cannot be disabled.
• Analytics: to understand how visitors use our site. Collected in aggregate or pseudonymous form.
• Marketing: to serve relevant ads and measure campaign effectiveness (only with your consent).

You can manage cookie preferences in your browser settings or via our cookie banner. Disabling certain cookies may affect site functionality.

We retain your personal data for as long as your account remains active or as necessary to provide services and comply with legal obligations:

• Account data: retained while your account is active, then deleted within 90 days of account closure upon request.
• Order records: retained for 7 years to comply with tax and accounting laws.
• Marketing preferences: retained until you withdraw consent.
• Pet profile data: deleted upon account closure or upon your request.

If you are located in the EEA or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention requirements.
• Right to restriction: request that we limit the processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: withdraw consent for marketing at any time without affecting prior lawful processing.
• Right to lodge a complaint: file a complaint with your local data protection authority (e.g., the ICO in the UK, or your EU supervisory authority).

To exercise any of these rights, email us at privacy@familiesbestfriend.com. We will respond within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) grants you the following rights:

• Right to know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties we share it with.
• Right to delete: request deletion of personal information we hold about you, subject to certain exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale/sharing: we do not sell or share personal information for cross-context behavioral advertising. If this practice changes, we will update this policy and provide an opt-out mechanism.
• Right to limit use of sensitive personal information: we do not use sensitive personal information beyond what is necessary to provide our services.
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request, email privacy@familiesbestfriend.com or visit our Data Rights Request page. You may also designate an authorized agent to make a request on your behalf.

Categories of personal information collected in the past 12 months: Identifiers, commercial information, internet/network activity, geolocation (approximate), and inferences drawn to create a profile about preferences.

Our services are operated from the United States. If you are located in the EEA, UK, or other jurisdictions with data protection laws, your information may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms to protect your data when transferring outside your jurisdiction.

We implement industry-standard technical and organizational measures to protect your personal data, including TLS encryption, access controls, and regular security reviews. However, no transmission over the internet is completely secure. We will notify affected users of any data breach as required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on our website. Continued use of our services after changes constitute acceptance of the revised policy.

For any privacy-related questions, to exercise your rights, or to contact our Data Protection Officer:
Email: privacy@familiesbestfriend.com
Mail: Family's Best Friend, Attn: Privacy, [Your Business Address]