Privacy policy
1.Who holds your data
The controller of everything described here is SOLVETA LTD, trading as Wrenpaw. For customers in the United Kingdom that means the UK GDPR and the Data Protection Act 2018 apply; for customers across the European Union, the EU General Data Protection Regulation does.
- Seller
- SOLVETA LTD, trading as Wrenpaw
- Company number
- 17349586
- Registered office
- Dept 6953, 196 High Road, Wood Green, London, N22 8HH
- info@fawnandpaw.com
- Support hours
- Mon–Fri, 09:00–18:00 (GMT)
Questions about your data, or a request to exercise a right, go to info@fawnandpaw.com.
2.What we hold
- Account details: forename and surname, email, telephone number, date of birth, street, town, postcode and country, plus your password — kept only as a one-way hash.
- Order details: what you bought, where it went and where it was billed, how you can be contacted, the delivery method, and the payment outcome plus transaction reference our provider passes back.
- Messages: the content of anything you send by email or through the contact form, any order number in it, and — for the form — the originating IP address.
- Saved items: whichever products you have bookmarked to the account.
- Newsletter: an email address, where you have given us one for that purpose.
- Technical data: IP address, browser and device, and which pages were requested, as written to server logs. What is kept in your browser is covered by the Cookie policy.
3.Card payments
Full payment card data is neither stored nor processed on our side. Every card payment goes through our PCI DSS compliant provider.
Card details are typed into the provider’s hosted page, never into this site. 3-D Secure and Strong Customer Authentication (SCA) sit over the payment, which is why your bank may want to confirm it — usually inside its own app. All that comes back to us is whether it worked, and a reference.
4.Our purposes and lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Accepting, packing and shipping an order | Name, email, phone, delivery and billing address, items ordered | Contract |
| Maintaining your account | Name, email, phone, date of birth, address, password (stored as a hash), order history, saved items | Contract |
| Confirming you have reached 18 | Date of birth | Contract and legitimate interests |
| Replying to messages and complaints | Name, email, order number, the content of your message, the IP address it was sent from | Contract and legitimate interests |
| Processing refunds, defending chargebacks and preventing fraud | Order details, payment result and transaction reference, IP address | Legal obligation and legitimate interests |
| Keeping restricted countries and territories out of checkout | Delivery and billing country, address | Legal obligation |
| Meeting accounting and tax obligations | Order and refund records | Legal obligation |
| Sending the newsletter, where you asked for it | Email address | Consent |
| Keeping the site up and secure | IP address, browser and device type, pages requested, error logs | Legitimate interests |
6.International transfers
Because packing and dispatch happen in Spain, delivery details are handled inside the European Union. Each of the UK and the EU treats the other’s data protection regime as adequate. Should a provider handle data beyond the UK or the European Economic Area, we rely on an adequacy decision or on standard contractual clauses, adding the UK International Data Transfer Addendum for UK data.
7.Retention
- Orders, payments and refunds: held 6 years from the order, because accounting and tax law require it.
- The account itself: until you ask us to close it, or once 3 years pass with no sign-in and no order. Order records then remain on the basis above.
- Correspondence and complaints: 24 months from the end of the exchange.
- Newsletter address: until you unsubscribe.
8.Your rights
You are entitled to:
- a copy of the personal data we hold on you;
- correction of anything inaccurate;
- erasure, where the need has passed or no lawful basis remains;
- restriction of, or objection to, our use of it — legitimate interests included;
- a portable copy of whatever you supplied to us;
- withdrawal of consent whenever you choose — unsubscribing, or changing your cookie settings.
Write to info@fawnandpaw.com to exercise any of them. Our answer comes within one month, and we may need you to verify who you are before we act.
A supervisory authority will also hear a complaint: in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in the European Union, the authority for the country where you live or work. We would rather have the first opportunity to put it right.
9.Security
Nothing is served except over HTTPS. Passwords exist only as one-way hashes. Customer data is reachable only by the people who need it to get orders out and answer messages. Card details never touch our systems at all.
10.Automated decisions
No decision with legal or comparable consequences for you is taken here by machine alone. Your card issuer and our payment provider do run their own automated fraud screening and can refuse a payment; where that happens, get in touch and we will look at the order ourselves.
11.Age
This is an adult shop. We do not knowingly take data from anyone under 18. Tell us at info@fawnandpaw.com if you think somebody under18 has registered and the account will be removed.
12.Changes to this policy
This policy is revised whenever our handling of personal data changes, and the date at the head of the page identifies the current version.