Last updated: 15/09/2026
This policy explains what personal data we collect when you use this website or buy from us, why we collect it, who we share it with, and what rights you have.
1. Who is responsible for your data
Póg Mo Paw is the data controller. We are a general partnership established in Ireland, whose partners are Cónall McAteer and Erica O’Shea.
- Registered business name: Póg Mo Paw
- Business name registration number: 765923
- Principal place of business: 7 Floraville Avenue, Clondalkin, Dublin 22
- Email: Pogmopaw@gmail.com
Please use the contact address above for any question about your data or to exercise any of the rights set out in section 8.
2. What we collect
When you place an order: your name, delivery and billing address, email address, phone number, order details, and any personalisation text you enter, such as a dog’s name.
When you create an account: your name, email address, password (stored in encrypted form), saved addresses, and your order history.
When you contact us: your name, email address, and whatever you tell us in your message.
When you pay: your payment is processed by SumUp. We receive confirmation that a payment succeeded, along with limited details such as the card type and last four digits. We never receive or store your full card number, expiry date or security code.
Automatically, when you browse: your IP address, browser type and version, device type, the pages you visit, and the time and date of your visit. See section 9 on cookies.
We do not knowingly collect data from children. This website is not directed at children, and orders may only be placed by people aged 18 or over.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, including personalisation | Performance of a contract with you |
| Managing your account | Performance of a contract with you |
| Responding to your enquiries | Our legitimate interest in answering people who contact us |
| Handling returns, refunds and complaints | Performance of a contract, and compliance with our legal obligations |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Preventing fraud and keeping the website secure | Our legitimate interest in protecting our business and customers |
| Sending marketing emails | Your consent, which you can withdraw at any time |
| Non-essential cookies and analytics | Your consent, which you can withdraw at any time |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we have concluded that they are not. You can object to this processing at any time (see section 8).
4. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, and only to the extent needed to do their job.
| Who | What for |
|---|---|
| Hostinger | Hosting this website and its database |
| SumUp | Processing card payments |
| An Post | Delivering your order |
| Cloudflare | Turnstile anti-spam checks on our contact form |
| Hostinger | Understanding how the website is used |
We may also disclose data where we are legally required to, for example to Revenue or to a court.
5. Transfers outside the EEA
Some of our providers process data outside the European Economic Area. Where that happens, we rely on safeguards approved under GDPR, such as the European Commission’s standard contractual clauses or an adequacy decision covering the destination country. You can ask us for details of the safeguards that apply.
6. How long we keep it
- Order and transaction records: six years from the end of the relevant tax year, as required for Revenue purposes.
- Account data: for as long as your account is open. If you ask us to delete your account, we remove it, except for order records we are legally required to retain.
- Contact form enquiries: up to two years after the matter is resolved.
- Marketing consent records: until you unsubscribe, plus a record of the unsubscribe so that we do not contact you again.
7. Your rights
Under GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where we have no continuing legal basis to keep it;
- restrict how we use your data while a query is resolved;
- receive data you gave us in a portable format, or have it sent to another provider;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where we rely on consent.
To exercise any of these, email [PRIVACY EMAIL]. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, you can complain to the Data Protection Commission:
Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28
dataprotection.ie
8. Cookies
Cookies are small text files stored on your device when you visit a website.
Essential cookies are needed for the site to work. They keep track of what is in your basket, keep you logged in, and secure the checkout. These do not require your consent, and the site cannot function without them.
Non-essential cookies, including any analytics, are only set if you consent through our cookie banner. You can change or withdraw your choice at any time using the cookie settings link in our footer, or by clearing cookies in your browser.
| Cookie | Purpose | Type |
|---|---|---|
| woocommerce_cart_hash | Keeps track of your basket contents | Essential |
| woocommerce_items_in_cart | Keeps track of your basket contents | Essential |
| wp_woocommerce_session_ | Links you to your basket and order data | Essential |
| wordpress_logged_in_ | Keeps you signed in to your account | Essential |
Blocking essential cookies in your browser will prevent the basket and checkout from working.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will make that clear on the website.