Policy
Privacy policy
What we collect, why we collect it, who else sees it, and how to get it deleted. Written to be read rather than skimmed.
Updated 3 June 2026
What we collect
We collect the information a normal shop needs to sell you something and get it to you, and nothing more.
- Order details: what you bought, quantities, price paid and the payment method used.
- Delivery address, if the order is going out on our van or with a courier.
- Contact details: your name, phone number and email address.
- WhatsApp conversation history, because most product advice, animal enquiries and support run through WhatsApp rather than a ticketing system.
- Analytics: which pages you view, roughly where you are browsing from, your device type and how you arrived at the site, collected through Google Analytics.
Why we collect it, and the lawful basis
Most of what we hold exists to fulfil a contract with you: we need your address to deliver an order, your phone number to call you if something goes wrong, and your order history to handle a return or a warranty claim. That is our main lawful basis.
A smaller amount is held under legitimate interest: understanding which products sell, spotting fraudulent orders, and keeping the site working properly. Where we ever send you marketing messages beyond your order updates, that is based on your consent, and you can withdraw it at any time by telling us on WhatsApp or by email.
Who else processes it
We do not sell your data to anyone. A handful of specialists process parts of it on our behalf so the shop can actually function:
- Stripe handles card and wallet payments. We never see or store your full card number, expiry date or security code on our own systems, Stripe processes and holds that directly under its own PCI DSS certified infrastructure.
- Tabby processes instalment payments where you choose to split an order. To run its own eligibility check, Tabby receives your contact details and the order value.
- Our courier partner, Noor Delivery, receives the name, address and phone number needed to hand over a parcel that falls outside our own delivery routes.
- Google Analytics receives browsing behaviour on the site in a form that is not tied back to your name or contact details.
How long we keep it
Order and invoice records are kept for 5 years, which is the minimum the UAE Federal Tax Authority requires for VAT records, even if you ask us to delete your account sooner. WhatsApp conversation history is kept for as long as it stays relevant to an order or an ongoing question, then archived. Analytics data is held in aggregate form and is not useful for identifying an individual after about 14 months.
Access and deletion
Email salaam@finsandpaws.ae to ask for a copy of everything we hold about you, or to ask us to delete it. We reply within 30 days. Where a record has to be kept for tax law, such as an invoice, we will tell you that plainly rather than delete it and pretend otherwise.
UAE PDPL
We process personal data as a controller under UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data, commonly called the PDPL. In practice that means the same rights already described on this page, access, correction, deletion and the right to object to how we use your data, plus the right to raise a complaint with the UAE Data Office if you feel we have not resolved something properly.
Still not clear?
Message us on WhatsApp and a person will answer, usually within the hour during shop opening times.
Ask us directly