Privacy Policy

This policy explains what we collect when you visit paslunapets.com or place an order, why we collect it, who we share it with, and how to have it deleted.

The site and the store are operated by DAPHN'S LLC, an Ohio limited liability company (Charter No. 4731476), trading as PASLUNA™. Our address is 25000 Euclid Ave Ste 305-511, Euclid, OH 44117, United States. You can reach us at hello@paslunapets.com.

What we collect

When you place an order. Your name, email address, phone number and shipping address. We also store the order amount and a payment reference from Stripe.

Card details: we never see them. Payments are processed by Stripe. Your card number is sent directly to Stripe and never reaches our servers. We do not see, handle or store card numbers, and Stripe is the controller of that data under its own privacy policy.

When you contact us. Your name, email address and whatever you write to us.

When you subscribe. Your email address, if you have opted in to our newsletter.

Automatically. Our hosting provider processes standard technical data such as IP address and browser type in order to deliver and secure the site. If you accept analytics cookies, the analytics services listed below also collect usage data.

Why we collect it

To take payment for your order, to ship it to you, to email you about it, to answer your questions, to keep the records we are required to keep for tax and accounting, and — only where you have opted in — to send you our newsletter. If you accept analytics cookies, we also use usage data to understand how the site is used.

Who we share it with

We share personal information only with the service providers we need to run the store. We do not sell personal information, and we do not share it for cross-context behavioural advertising beyond the advertising measurement listed below, which runs only with your consent.

• Stripe, Inc. — Payment processing. Stripe receives your card details directly and is the controller of that data.
• Amazon.com Services LLC — Order fulfilment and shipping. Receives your name and shipping address in order to ship your order.
• Cloudflare, Inc. — Website hosting and database. Order records are stored encrypted at rest.
• Resend — Transactional email — order confirmation, shipping notification and refund notices.
• MailerLite — Newsletter delivery. Only used where you have opted in.
• Google Analytics — Website analytics. Loads only after you accept analytics cookies.
• Microsoft Clarity — Website analytics. Loads only after you accept analytics cookies.
• Meta Platforms, Inc. — Advertising measurement, both in your browser and from our servers after an order. Either way it runs only if you accepted analytics cookies.

We may also disclose information where we are legally required to.

Buying on Amazon instead

We also sell through Amazon. If you buy there, that purchase is governed by Amazon’s terms and Amazon’s privacy policy, not by this one. We do not receive your payment details or your full customer record from those orders.

How long we keep it

Completed orders are kept for 180 days from the order date. After that, your name, phone number and shipping address are automatically deleted from the order record.

We keep the order id, the order date, the amount, the payment reference and your email address beyond that period, because we need them for tax, accounting and to handle any payment dispute.

180 days covers the 30-day return window and the card chargeback window with room to spare. Newsletter subscriptions are kept until you unsubscribe or ask us to delete them.

Cookies and the consent banner

Cookies that are strictly necessary — the ones that keep your cart and your checkout session working — are set without asking, because the store cannot function without them. Our email pop-up also sets a small cookie so it does not reappear for 30 days after you dismiss it.

Analytics and advertising cookies are not set until you accept them. Google Analytics, Microsoft Clarity and the Meta Pixel do not load at all before you click Accept on the consent banner. If you decline, or simply ignore the banner, none of those scripts run.

What checkout shares, and when

Placing an order sends two things beyond your order details: technical data identifying the browser you ordered from, and — only if you accepted the consent banner — identifiers that let us measure which advert led to the sale.

Stripe receives your IP address and browser user agent whenever you start a checkout, whether or not you accepted the banner. Stripe needs them to process the payment and screen the transaction for fraud, so this is not something consent switches off. Declining the banner does not stop it.

Meta receives your IP address, browser user agent and Meta’s ad-click identifiers — the _fbp and _fbc cookies, which record that you arrived from a Facebook or Instagram advert — along with the value and contents of your order. This is advertising measurement: it tells us an advert produced a sale. It happens only if you accepted the consent banner. If you declined or ignored it, nothing about your purchase is sent to Meta, and the cookies carrying those ad-click identifiers are never set in the first place, because the Meta Pixel does not load.

Your email address, name and phone number are also sent to Meta for this measurement, but hashed — converted to an irreversible string before they leave our servers, so Meta can match the sale to an advert without receiving them in readable form. Your card details are never part of this.

Some of this measurement is sent from our servers rather than from your browser, which means an ad blocker will not stop it. Your consent still governs it: the check happens on our side, before anything is sent.

Does GDPR apply?

No, not to our store. We sell and ship to United States addresses only. We do not offer goods or services to people in the European Union or the United Kingdom, and we do not monitor their behaviour, so the GDPR and UK GDPR do not generally apply to us.

That said, if you are outside the United States and have given us your email address, you can ask us to delete it the same way anyone else can — email hello@paslunapets.com.

California residents

If you live in California, the CCPA/CPRA gives you the right to know what personal information we have collected about you and why; to request that we delete it; to request that we correct it; to opt out of the sale or sharing of personal information; and not to be treated differently for exercising any of these rights.

We do not sell personal information and never have.

To exercise any of these rights, email hello@paslunapets.com from the address you used to order, or tell us enough to find your order. We will confirm what we hold before we delete anything.

How to have your data deleted

Email hello@paslunapets.com and ask. We will delete what we are not required to keep. Records we must retain for tax and accounting are the exception, and we will tell you what those are rather than quietly keeping them.

Security

Order records are stored in a database hosted by Cloudflare and encrypted at rest. Card details never reach us at all. No system is perfect, and we do not claim ours is.

Children

The site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed, and continuing to use the site after a change means you accept the updated policy.

Contact

Questions about this policy, or about anything we hold? Email hello@paslunapets.com, or write to DAPHN'S LLC, 25000 Euclid Ave Ste 305-511, Euclid, OH 44117, United States.