Privacy policy

Privacy Policy — Pawgevity

Last updated: June 29, 2026

At Pawgevity ("we," "us," "our," or "the Store"), operated by Luis Alonso Molina Castro, we take the privacy of our customers and visitors seriously. This Privacy Policy explains what personal data we collect, for what purpose, with whom we share it, and what rights you have over it when you visit or make a purchase on our online store (hereinafter, the "Site").

By using the Site or making a purchase, you accept the practices described in this policy.

1. Data Controller
• Controller: Luis Alonso Molina Castro
• Registered address: Birri, Santa Bárbara de Heredia; from the northwest corner of the Alfredo Volio Jiménez school, 100 m north and 175 m west, house on the left-hand side
• Country / jurisdiction: Costa Rica
• Contact email: luismcfut10.12@gmail.com

For any inquiry related to your personal data or this policy, you can write to us at the email address indicated above.

2. What Personal Data We Collect

We collect information that you provide to us directly, as well as data that is generated automatically when you browse the Site.

2.1 Data You Provide to Us
• Identification and contact data: first name, last name, email address, phone number.
• Shipping and billing data: mailing address, city, ZIP/postal code, country.
• Payment data: your card or payment method details are processed directly by our payment providers. We do not store full card numbers.
• Account data: if you create an account, your email address and password (encrypted).
• Communications: messages you send us by email, contact forms, or social media.

2.2 Data Collected Automatically
• Browsing and device data: IP address, browser type, operating system, language, pages visited, products viewed, time spent, and traffic source.
• Cookie and pixel identifiers: identifiers that allow us to recognize your device across sessions (see Section 5).
• Advertising interaction data: actions taken after clicking on our ads on Meta (Facebook/Instagram) or TikTok.

3. Purpose and Legal Basis for Processing Your Data
Purpose    Legal basis
-----------  ------------
Processing and shipping your orders    Performance of a contract
Managing your customer account    Performance of a contract
Customer service and support    Legitimate interest / contract
Sending marketing communications and newsletters    Consent
Displaying personalized advertising and remarketing (Meta, TikTok, Google)    Consent
Statistical analysis and Site improvement    Legitimate interest / consent
Fraud prevention and security    Legitimate interest / legal obligation
Complying with tax and legal obligations    Legal obligation

4. Sharing Data with Third Parties

To operate the Store, we share data with providers that act as data processors or independent controllers. We only share the information that is strictly necessary.
• Shopify Inc. — the e-commerce platform that hosts the Site and processes order and browsing information.
• Payment providers (for example, Shopify Payments, PayPal, Stripe, or others) — secure payment processing.
• Dropshipping provider(s) — since we operate under a dropshipping model, we share your shipping data (name, address, phone number) with external suppliers, which may be located outside your country, including internationally, so they can prepare and ship your order directly.
• Shipping and logistics companies — for order delivery and shipment tracking.
• Advertising platforms: Meta Platforms (Facebook/Instagram), TikTok, and Google — for campaign measurement and personalized advertising (see Section 5).
• Email marketing and analytics providers — for sending communications and analyzing usage.
• Public authorities — when there is a legal obligation to do so.

4.1 International Transfers
Some of our providers (including dropshipping suppliers, Shopify, Meta, TikTok, and Google) may process your data in countries other than yours. In such cases, we adopt appropriate safeguards such as Standard Contractual Clauses or other equivalent legal mechanisms to protect your information.

5. Cookies and Tracking Technologies (Pixels)

The Site uses cookies and similar technologies (pixels, tags, and SDKs) to function properly, analyze traffic, and display relevant advertising.

5.1 Types of Cookies
• Technical or necessary cookies: essential for the operation of the Site, the shopping cart, and security. They do not require consent.
• Analytics cookies: allow us to understand how the Site is used (for example, through Google Analytics).
• Advertising and marketing cookies: allow us to show you personalized ads and measure their effectiveness.

5.2 Advertising Tracking Pixels
We use the following tracking pixels and identifiers for advertising and remarketing (showing you ads for products you have viewed):
• Meta Pixel (Facebook/Instagram): records actions you take on the Site (visits, product views, add-to-cart, purchases) to optimize and measure our ads on Facebook and Instagram, and to create custom and lookalike audiences.
• TikTok Pixel: records equivalent actions to optimize and measure our campaigns on TikTok and to carry out remarketing.
• Google Analytics / Google Ads: traffic analysis and advertising and remarketing campaigns across the Google network.

These pixels may collect your IP address, device identifiers, browsing events, and, in some cases, data associated with your account on those platforms. The processing carried out by each platform is also governed by their own privacy policies:
• Meta: https://www.facebook.com/privacy/policy
• TikTok: https://www.tiktok.com/legal/privacy-policy
• Google: https://policies.google.com/privacy

5.3 Consent Management
Where required by applicable law, we will request your consent through a cookie banner before activating analytics and advertising cookies. You may withdraw your consent or change your preferences at any time through the Site's cookie manager or by configuring your browser to block or delete cookies.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes described:
• Order and billing data: for the period required by the applicable tax and commercial legislation in Costa Rica (usually between 5 and 10 years).
• Account data: for as long as you keep your account active.
• Marketing data: until you withdraw your consent or unsubscribe.
• Browsing and cookie data: according to the periods indicated in our cookie manager.

When they are no longer needed, we securely delete or anonymize them.

7. Your Rights

In accordance with the GDPR, the CCPA/CPRA, and other applicable data protection regulations, you have the right to:
• Access: know what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request the deletion of your data.
• Objection: object to certain types of processing, including direct advertising.
• Restriction: request that we restrict processing.
• Portability: receive your data in a structured and reusable format.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
• No sale of personal information (CCPA): California residents may request that we not sell or share their personal information ("Do Not Sell or Share My Personal Information").
• Complaint: file a complaint with the competent supervisory authority in Costa Rica.

How to Exercise Your Rights
To exercise any of these rights, write to us at luismcfut10.12@gmail.com, indicating the right you wish to exercise. We may ask you to verify your identity. We will respond within the timeframes set out by applicable law (generally, within 30 days).

8. Data Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration (encryption, secure HTTPS connections, and restricted access). However, no system is 100% secure, so we cannot guarantee absolute security.

9. Minimum Age

The Site and our products are intended for adults. We do not knowingly collect data from individuals under 16 years of age (or the minimum age established by Costa Rican law). If we discover that we have collected data from a minor without proper consent, we will delete it. If you are a parent or legal guardian and believe your child has provided us with data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy to reflect legal changes or changes in our practices. We will post the revised version on this page along with its update date. We recommend that you review it periodically.

11. Contact

If you have questions about this Privacy Policy or the processing of your data:
• Luis Alonso Molina Castro
• Email: luismcfut10.12@gmail.com
• Address: Birri, Santa Bárbara de Heredia; from the northwest corner of the Alfredo Volio Jiménez school, 100 m north and 175 m west, house on the left-hand side