Privacy policy

1. Controller

petsdojo – Ailiyaer Maimaiti (sole trader)
Brauerstraße 8, 76137 Karlsruhe, Germany
E-mail: petsdojo.eu@gmail.com · Phone: +49 162 4009878 (no telephone support)

We have not appointed a data protection officer, as this is not legally required for us.

2. Overview

We process personal data only as far as necessary to provide our online shop, process orders, communicate with you and – with your consent – for analytics and marketing. Legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract), (c) (legal obligation) and (f) (legitimate interests). For cookies and similar technologies, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies.

3. Hosting and shop system: Shopify

Our shop runs on the platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Shopify processes the data arising from visits and orders on our behalf as a processor (Art. 28 GDPR), e.g. IP address, browser and device information, order, contact and payment data. Data may also be processed by Shopify Inc. (Canada) and Shopify’s service providers in other countries, including the USA. For Canada there is an EU adequacy decision; for other countries, transfers are based on the EU-U.S. Data Privacy Framework (where the recipient is certified) or the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(b) and (f) GDPR (secure and stable shop operation).

When you visit the website, server log data (IP address, date/time, page visited, referrer, browser) is processed automatically to deliver the website and protect it against misuse (Art. 6(1)(f) GDPR).

4. Cookies and consent

We use strictly necessary cookies (e.g. cart, checkout, language and currency settings, storing your cookie choice) based on Section 25(2) TDDDG and Art. 6(1)(b)/(f) GDPR.

All other cookies and similar technologies (analytics and marketing, e.g. the Meta pixel or Google services) are only used with your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time with effect for the future via the cookie settings.

5. Orders and customer account

For your order we process your name, delivery and billing address, e-mail address, phone number (if given), order and payment information (Art. 6(1)(b) GDPR). If you create a customer account, we store your data for future orders until you delete the account.

Retention: data that we must keep for commercial and tax law reasons (e.g. invoices and accounting records) is stored for the statutory retention periods (generally up to 10 years) (Art. 6(1)(c) GDPR in conjunction with the German Commercial Code and Fiscal Code). Other data is deleted as soon as it is no longer needed.

6. Fulfilment and shipping: CJ Dropshipping

Our orders are packed and shipped by our fulfilment partner CJ Dropshipping (cjdropshipping.com). To ship your order, we pass your name, delivery address and phone number and the order contents to CJ Dropshipping, which passes the data needed for delivery to the shipping carriers. CJ Dropshipping may process data outside the EU, in particular in the People’s Republic of China, for which there is no EU adequacy decision. The transfer is necessary to perform the contract with you (Art. 49(1)(b) GDPR). Legal basis: Art. 6(1)(b) GDPR.

7. Payment providers

Payments are processed by the payment provider you choose at checkout (for example Shopify Payments or other providers offered at checkout). We pass them the data needed for the payment (Art. 6(1)(b) GDPR). Some payment providers act as independent controllers; their own privacy notices apply. Payment providers may carry out fraud and risk checks.

8. Contact by e-mail or contact form

When you contact us by e-mail or via our contact form, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). Our e-mail account is provided by Google (Gmail, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); data may be transferred to Google LLC in the USA on the basis of the EU-U.S. Data Privacy Framework.

9. Newsletter via Shopify Email

If you sign up for our newsletter (website form or tick box at checkout), we use your e-mail address to send you news, offers and discount codes (Art. 6(1)(a) GDPR). E-mails are sent via Shopify Email (Shopify, see section 3). We measure whether an e-mail was opened and which links were clicked to improve our newsletter. You can unsubscribe at any time via the link in every e-mail or by e-mailing us.

10. Meta pixel and ads (Facebook/Instagram)

With your consent we use the Meta pixel (and, where set up, Meta’s Conversions API) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This lets us measure the performance of our ads on Facebook and Instagram, build audiences (e.g. visitors to our shop) and show relevant ads. Data processed includes IP address, browser and device information, pages visited, cart and purchase events and, where applicable, hashed contact data.

We and Meta are joint controllers for collecting and transmitting this data (Art. 26 GDPR; controller addendum). Meta may transfer data to the USA on the basis of the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings. Meta’s privacy policy: facebook.com/privacy/policy.

11. Google

We may use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), e.g. to show our products in Google services and to measure visits and ads. Tracking and measurement services are only used with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to Google LLC in the USA on the basis of the EU-U.S. Data Privacy Framework. Google’s privacy policy: policies.google.com/privacy.

12. Instagram

We link to our Instagram account @pets_dojo and may embed Instagram content (posts or images) on our website. A simple link does not transfer any data to Instagram. When embedded Instagram content is loaded, your browser connects to Meta’s servers and Meta receives e.g. your IP address and information about the page visited. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). For our Instagram page itself, we and Meta are joint controllers for page insights (Art. 26 GDPR).

13. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time with effect for the future (Art. 7(3)). Just write to petsdojo.eu@gmail.com.

Right to object: where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.

Right to lodge a complaint: you can complain to a data protection supervisory authority, e.g. the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

14. Data security

Our website uses SSL/TLS encryption (recognisable by “https://”).

15. Changes

We update this privacy policy when our services or the law change. Last updated: 22 October 2026