Privacy Policy

Last updated: 28.10.2026

Who is responsible

Doganics Dog Care SL, trading as Doganics, is the controller of personal data processed through doganicscare.com and our customer, order and marketing services.

Registered address: C/ Demestre 8-10, 08017, Barcelona, Spain
Contact: hello@doganicscare.com.

Information we use and where it comes from

We use the name, email, telephone number, delivery and billing details, order contents, payment status, transaction references, returns and correspondence needed to handle purchases and enquiries. Where you supply business invoicing details, these may also contain personal data.

Payments are processed through Shopify Payments and the relevant payment services available at checkout, including supported cards, Apple Pay, Google Pay, Bizum, Klarna and MobilePay, depending on your location.

Doganics receives information needed to manage orders, payments and refunds, including payment status, amount, transaction reference and limited payment-method details. For card and wallet payments, these may include the card brand and the last four digits of the card or wallet account number. Full card numbers and card security codes are not made available to Doganics through this checkout.

The relevant payment providers also process personal data in accordance with their own privacy notices.

When you visit our site, technical systems process information such as IP address, browser type, requested pages, access times and security events. Optional analytics and advertising information is processed only as described in our Cookie Policy and your choices.

Where you use them, we receive account details, preferences, reviews, submitted photographs, referral details and information you choose to give about your dog. Dog information linked to an identifiable owner forms part of that owner's personal data. Please avoid sending unnecessary information about your own health or other sensitive personal matters.

We collect personal data directly from you when you place an order, contact us, submit a review or subscribe to marketing communications. We also receive information from service providers supporting our store, including Shopify, Judge.me, BixGrow, Trustpilot and Klaviyo, where you interact with the relevant services. This may include order and payment-status updates, delivery information, reviews, referral information and interactions with our marketing communications.

Information needed for a purchase

Fields marked as required are needed to process your order or meet legal requirements. Without them we may be unable to accept, deliver or invoice your purchase. Marketing consent and optional tracking are voluntary; refusing them does not prevent a purchase.

This notice explains our processing. Reading it or visiting the website does not constitute consent to marketing or optional tracking.

Why we use your information

• Orders and requested services: we use order, contact and transaction information to take payment, deliver products, manage returns and respond to purchase enquiries. Legal basis: performance of our contract or steps you request before a contract, GDPR Article 6(1)(b).
• Accounting and legal duties: we use transaction records to meet applicable tax, accounting, product-safety and other statutory obligations. Legal basis: GDPR Article 6(1)(c).
• Security and claims: we use proportionate technical and transaction information to protect the shop from fraud and misuse and to establish or defend claims. Legal basis: GDPR Article 6(1)(f). Our legitimate interests are protecting customers, the business and legal rights; we balance these against your interests and rights.
• Other enquiries and feedback: where they are outside a contract, we use correspondence to respond and improve customer service, based on our legitimate interest in handling communications. Legal basis: GDPR Article 6(1)(f).
• Marketing: where you opt in, we use your contact details to send the communications you select. Legal basis: consent, GDPR Article 6(1)(a). You can unsubscribe in each message or email us. Necessary order messages continue separately. [CONFIRM marketing channels. This draft adopts opt-in marketing throughout the EU and does not rely on an existing-customer exception.]
• Optional measurement, personalisation and advertising: where enabled and consented to, we process browsing events and identifiers for the specific purposes and providers listed in the Cookie Policy. Legal basis: consent, GDPR Article 6(1)(a), with prior permission for terminal storage or access where required. [CONFIRM audience matching, profiling and server-side advertising disclosures; remove unused activities.]
• Reviews, referrals and customer content: [CONFIRM the features actually offered, information displayed, lawful basis for each processing activity, and separate permission needed to reuse identifiable photos or testimonials in advertising. Insert the resulting description before publication.]

Who receives information

We disclose only the information needed by providers supporting our shop, payments, delivery, hosting, communications, accounting and customer support. Some act on our instructions under processing agreements; others, such as certain payment providers, act as independent controllers for their own regulated purposes.

We may provide information to public authorities where legally required, professional advisers for relevant advice or claims, and a prospective business successor where lawful and subject to appropriate safeguards.

Transfers outside the EEA

We do not treat use of the website as consent to international transfers. Where standard contractual clauses are used, we assess the transfer and adopt supplementary measures where needed. Contact hello@doganicscare.com for information or a copy of applicable safeguards, subject to necessary redactions.

How long we keep information

We keep order and customer records while needed to fulfil purchases and deal with related service issues, then retain only records required by applicable law or reasonably needed for claims. Tax, accounting and claim records follow the periods applicable to the record and obligation; retention may be extended by a legal hold.

We retain enquiries until resolved and for up to 180 days afterwards where necessary for related follow-up; optional account information until account closure or 730 days of inactivity, whichever occurs first; and marketing data until consent is withdrawn or after 730 days without meaningful interaction, whichever occurs first. We review marketing records every 365 days. We may retain minimal suppression information for as long as necessary to honour an opt-out. Cookie and identifier lifetimes appear in the cookie inventory. We retain minimal consent evidence while relying on that consent and for up to 1,095 days after it expires or is withdrawn, where necessary to demonstrate compliance. Residual copies in backups expire within 90 days of deletion from active systems and are not used for ordinary business purposes. We delete or anonymise information when no longer needed, or restrict access where continued retention is necessary to comply with legal obligations or establish, exercise or defend legal claims.

Your choices and rights

You may request access, correction, erasure, restriction and, where applicable, portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time without giving reasons, including related profiling. Where processing relies on consent, you can withdraw it at any time; this does not affect earlier lawful processing.

Email hello@doganicscare.com. We normally respond within one month. Where complexity or the number of requests requires an extension, we may take up to two additional months and will explain this within the first month. Requests are normally free. We ask for proportionate identity information only where reasonably necessary.

You can complain to the Spanish Data Protection Agency at www.aepd.es or to the competent authority in the country of your habitual residence, workplace or alleged infringement. You do not have to contact us first.

Additional information

We apply appropriate technical and organisational safeguards.

Our shop is intended for adults. We do not seek children's personal data. Contact us if you believe a child has supplied it. We will update this notice when processing changes and provide further notice or obtain fresh consent when required.