1. Introduction
   Indar Pet Care Ltd (“IndarPet”, “we”, “us” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit indarpet.co.uk, create an account, place orders, contact us or otherwise interact with us.
2. Data controller
   Indar Pet Care Ltd (registered company number: 16747650 is the data controller for the purposes of UK data protection law. Registered address: 20 ME2 4PT For privacy enquiries, please contact: contact@indarpet.co.uk.
3. Personal data we collect
   We collect information you provide and information collected automatically:

• Identity: name, title, date of birth (optional).
• Contact: email address, billing and delivery addresses, telephone.
• Order information: order history, receipts, confirmations and returns.
• Payment details: processed by our payment provider (we do not store full card details).
• Technical data: IP address, browser and device information, pages visited, search terms, analytics data.
• Cookies and similar technologies.
  Providing optional pet-related information (e.g. pet breed, dietary needs) helps us to personalise recommendations; this is optional.

4. How we use your data & lawful basis
   We process personal data only where we have a lawful basis under UK GDPR. Major processing activities:

• To provide and fulfil orders (including payment, delivery and refunds) — lawful basis: contract.
• To comply with legal obligations (tax, accounting, fraud prevention) — lawful basis: legal obligation.
• To send marketing where you have consent — lawful basis: consent (or, where permitted, the soft opt-in under PECR for existing customers; see section 8).
• To improve our website, products and services, and to detect and prevent fraud — lawful basis: legitimate interests (our legitimate interests are: secure operations, service improvements, and fraud prevention; we balance these against your rights).
  If we process any special category personal data (sensitive data) we will set out the additional legal basis and safeguards where relevant.

5. Cookies and similar technologies
   We use cookies to provide functionality and analytics. Non-essential cookies are used only with your consent. Visit our Cookie Policy at /cookie-policy for a full list of cookies, purposes, providers and retention periods, and to manage your preferences. You may block or delete cookies via your browser settings, but this may affect site functionality.
6. Sharing your data
   We share data with trusted third parties who provide services on our behalf (delivery partners, payment processors, hosting, IT providers, analytics and marketing platforms). Each third party acts as a processor under contract and is required to use your data only to provide services for us. We will never sell your personal data.
7. International transfers
   If your data is transferred outside the UK we will ensure appropriate safeguards are in place (for example the ICO’s International Data Transfer Agreement (IDTA), the UK Addendum to the EU SCCs, or transfers to countries with an adequacy decision). We carry out transfer risk assessments where required and document safeguards.
8. Marketing and the law (PECR)
   We will only send you marketing emails or texts if you have given consent or where the soft opt-in applies (i.e., you are an existing customer and the marketing relates to similar goods or services and you were given a clear opportunity to opt out). You can withdraw marketing consent at any time using the unsubscribe link in emails or by contacting us at contact@indarpet.co.uk. For more information see our full Marketing Preferences page.
9. Retention of data
   We only keep personal data for as long as necessary for the purposes set out in this policy and to meet legal obligations. Typical retention periods:

• Order and transaction records, invoices and accounting records: 6 years (or otherwise as required by tax and company law). GOV.UK+1
• Account information for active customers: retained while the account is active and for 2 years after last activity (unless longer retention is required for legal reasons).
• Marketing consents: retained until withdrawn.
  If you want a full retention schedule, please contact contact@indarpet.co.uk.

10. Your rights
    Under UK GDPR you have rights including: access, rectification, erasure (right to be forgotten), restriction of processing, objection, data portability, and to withdraw consent. To exercise your rights contact contact@indarpet.co.uk. We will respond promptly and in any event within one calendar month (may be extended in complex cases by up to 2 months). ico.org.uk+1
11. Automated decision-making and profiling
    Where we use automated decision-making (e.g. personalised product recommendations or fraud scoring), we will tell you the logic involved, the significance and the likely consequences, and your right to request human review, where applicable.
12. Security
    We implement appropriate technical and organisational measures to protect personal data (access controls, encryption in transit, secure backups, regular security reviews). However, no system can be 100% secure — if there is a personal data breach we will follow ICO guidance on notification.
13. Children
    Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13; if we become aware that we have collected such data we will delete it.
14. Complaints
    If you consider we have not handled your data properly, please contact contact@indarpet.co.uk first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
15. Changes to this policy
    We may update this policy from time to time; the “Last updated” date above shows when this policy was last revised.

Indar Pet Care Ltd

www.indarpet.co.uk
contact@indarpet.co.uk