Legal

Privacy Policy

Last updated: 27/04/2026

We've tried to write this in plain English. The law makes us cover certain things in detail — but we'd rather you actually read it than pretend to.

If you'd prefer the short version: we collect only what we need to send you a parcel and stay in touch if you've asked us to. We don't sell your data to anyone. We don't share it with third parties beyond the few tools we use to run the shop. And if you ever want us to forget you, you write to us and we do — within thirty days, properly and entirely.

The detailed version follows.

1. Who we are

Strollhound is the trading name of EI Sami Guerninouche, a sole-trader business registered in France (auto-entrepreneur).

For the purposes of UK GDPR and the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data we collect about you. That simply means we're the ones responsible for what happens to your information.

2. Our UK Representative

Because we're based in France but offer products to people in the United Kingdom, UK GDPR (Article 27) requires us to appoint a UK Representative. They act as a point of contact for UK customers and the UK Information Commissioner's Office (ICO) on matters relating to your personal data.

UK customers can contact our UK Representative directly with any question about their data. You can also contact us at Strollhound directly — both routes work.

3. What data we collect, and why

We try to keep this as small as possible. Here's everything we hold, when we collect it, and what we use it for.

When you place an order

To send you a parcel and meet our legal duties, we need:

• Your name
• Your delivery and billing address
• Your email address
• Your phone number (some couriers require it for delivery updates)
• Order details (what you bought, when, how much you paid)
• Payment information — handled and stored by our payment processors (Shopify Payments, PayPal). We never see or store your full card details.

Legal basis: performance of a contract (our agreement to sell and deliver your order) and compliance with our legal obligations (tax, accounting, consumer law).

When you sign up to our newsletter

• Your email address
• Your first name (optional, but it helps us write to you properly)
• Your dog's name and age (optional, and only ever used so we can write something that feels written for you, not at you)

Legal basis: your explicit consent. You can withdraw it at any time — there's an unsubscribe link at the bottom of every email we send, and we honour it immediately.

When you write to us

If you email us or use our contact form, we keep your message and your details so we can reply, and so we have a record of the conversation if you write again. Legal basis: our legitimate interest in answering you properly.

When you visit our website

Like nearly every website, ours collects some technical information automatically:

• Your IP address and approximate location (country/region only)
• Your browser type and device
• Pages you visit on our site, and how long you stay
• The site you came from (if any)

We use this to keep the site running smoothly, to spot problems, and — if you've consented — to understand which pages people find useful.

4. Cookies and tracking

We use cookies — small text files stored on your device — for three reasons:

When you first arrive on our site, you'll see a cookie banner with three options: accept all, reject all (except strictly necessary), or choose what you'd like. Whatever you pick, we honour. You can change your preferences at any time by clicking "Cookie settings" at the bottom of any page.

5. Who we share your data with

We never sell your data. Full stop. But to run a small online shop properly, we do rely on a handful of carefully chosen third-party tools. Each of them is contractually bound to handle your data only for the purposes we ask, and to UK GDPR / GDPR standards.

We may also share your data where we're legally required to — for example, with HMRC for VAT purposes, or with French tax authorities for our accounting obligations.

6. International data transfers

Some of our service providers (Shopify, Klaviyo, Google, Meta, TikTok) are based outside the UK or the European Economic Area. When we send your data to them, we make sure it's covered by one of the legal safeguards UK GDPR allows — most often the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision from the UK ICO.

In plain English: your data is treated to the same standard wherever it goes, and you can ask us for a copy of those safeguards at any time.

7. How long we keep your data

We don't keep things forever. As a general rule:

• Order and accounting records: ten years from the end of the relevant tax year. This is the minimum the French tax authorities require us to keep.
• Customer account details: for as long as you have an account with us. If you ask us to close it, we delete what we can and anonymise the rest.
• Newsletter subscribers: until you unsubscribe, or until we notice you haven't opened anything from us in two years — at which point we ask if you'd like to stay, and remove you if you don't reply.
• Email correspondence: three years after our last exchange, unless it relates to an order (in which case the order retention rules apply).
• Analytics data: retained for fourteen months by Google Analytics, then automatically deleted.

8. Your rights

Under UK GDPR and EU GDPR, you have the following rights over your personal data:

• Right of access — to ask us what data we hold on you, and receive a copy.
• Right to rectification — to have inaccurate data corrected.
• Right to erasure ("right to be forgotten") — to have your data deleted, where we no longer have a legal reason to keep it.
• Right to restriction — to ask us to stop processing your data while a question is being resolved.
• Right to data portability — to receive your data in a portable format, so you can take it elsewhere.
• Right to object — to processing based on our legitimate interests, including marketing.
• Right to withdraw consent — at any time, where we've relied on consent (for example, our newsletter or marketing cookies).
• Rights related to automated decision-making — though we don't make any automated decisions that significantly affect you.

To exercise any of these, write to us at contact@strollhound.com. We respond within thirty days, properly and entirely, and there's no charge for any of this. UK customers can also contact our UK Representative directly (details in section 2).

9. How we keep your data safe

We take security seriously, in proportion to what we hold. The site runs on Shopify's enterprise infrastructure, which is PCI-DSS Level 1 compliant for payment data. All connections are encrypted (HTTPS). Access to your data inside our team is limited to the people who genuinely need it — which, for now, is one of us. We use strong, unique passwords with two-factor authentication on every account that touches customer data.

If a data breach ever occurred that posed a real risk to your rights or freedoms, we'd notify you and the relevant authorities (the UK ICO and/or the French CNIL) within seventy-two hours, as the law requires.

10. Children

Our products are sold to adults, and we don't knowingly collect personal data from anyone under sixteen. If you believe a child has given us their data, please write to us and we'll remove it.

11. How to make a complaint

If you're unhappy with how we've handled your data, please write to us first — most things are quicker to sort out directly. But you also have the right to complain to a supervisory authority:

12. Changes to this policy

We update this policy from time to time — when our tools change, when the law changes, or when we find a clearer way to explain something. The date at the top of the page tells you when it last changed. If we make a substantial change, we'll let our newsletter subscribers know in advance.