Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how PetRoot, operated by Scaling Co. ("PetRoot," "we," "us," or "our"), collects, uses, shares and protects your personal information when you visit get-petroot.com (the "Site"), place an order, contact us or otherwise use our services (collectively, the "Services").

Scaling Co. is the data controller responsible for the personal information described in this Privacy Policy.

If you have questions about this Privacy Policy or would like to exercise your privacy rights, you can contact us at:

support@petroot.com

1. Personal Information We Collect

Depending on how you interact with PetRoot, we may collect the following categories of personal information:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.

• Order and transaction information, such as the products you purchase, order history, payment status, refunds, returns and delivery information.

• Payment information. Payments are processed by Shopify and applicable payment providers. We do not directly store complete payment-card numbers.

• Account information, where applicable, such as your account details, saved addresses and preferences.

• Customer-support information, including messages, requests, complaints, reviews and other information you provide when contacting us.

• Device and usage information, such as your IP address, browser type, device type, operating system, pages viewed, referring website, interactions with the Site and approximate location derived from your IP address.

• Marketing information and preferences, including whether you have subscribed to promotional communications and how you interact with those communications.

• Cookie and similar technology information, as described in this Privacy Policy.

We may collect personal information:

• Directly from you when you place an order, create an account, contact us or otherwise provide information to us.

• Automatically when you visit or interact with the Site.

• From service providers involved in processing payments, fulfilling orders, delivering parcels, preventing fraud, operating the Site, marketing or providing customer support.

2. How We Use Personal Information

We may use personal information to:

• Process, manage and fulfil orders.

• Process payments and confirm transactions.

• Arrange shipping, tracking and delivery.

• Handle cancellations, returns, refunds and customer-service requests.

• Create and manage customer accounts.

• Communicate with you about your order or enquiries.

• Detect, investigate and prevent fraud, misuse and security incidents.

• Maintain, operate and improve the Site and our Services.

• Understand how customers interact with our Site.

• Measure the effectiveness of our marketing and advertising.

• Provide relevant advertising or product recommendations where permitted.

• Send promotional communications where you have consented or where otherwise permitted by law.

• Comply with tax, accounting, regulatory and other legal obligations.

• Establish, exercise or defend legal claims.

• Enforce our policies and protect our rights, customers and business.

3. Legal Bases for Processing

Where the EU General Data Protection Regulation ("GDPR"), UK GDPR or similar data protection laws apply, we process personal information only where we have an appropriate legal basis.

Depending on the circumstances, this may include:

Performance of a Contract

We process information where necessary to perform our contract with you or to take steps at your request before entering into a contract.

This includes activities such as:

• Processing your order.

• Taking payment.

• Arranging delivery.

• Providing order updates.

• Handling returns and refunds.

• Providing customer support relating to your purchase.

Legal Obligations

We may process information where necessary to comply with legal obligations, including tax, accounting, consumer-protection and regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

• Protecting our business and customers against fraud.

• Securing and maintaining our Site.

• Improving our products, Services and customer experience.

• Managing and responding to customer enquiries.

• Understanding business and website performance.

• Establishing or defending legal claims.

Consent

Where required by law, we rely on your consent for certain activities, such as:

• Certain marketing communications.

• Non-essential cookies.

• Certain analytics or advertising technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

4. How We Share Personal Information

We may share personal information with service providers and other parties where necessary to operate PetRoot and provide our Services.

These may include:

• Shopify, which provides our ecommerce platform.

• Payment processors and financial institutions.

• Fulfilment, logistics, shipping and tracking providers.

• Website hosting and technical-service providers.

• Security and fraud-prevention providers.

• Customer-service and communication providers.

• Analytics and marketing providers where enabled.

• Advertising platforms where permitted by law and your privacy choices.

• Accountants, insurers, lawyers and other professional advisers.

We may also disclose personal information:

• Where required by law, regulation, legal process, court order or competent authority.

• To investigate suspected fraud, misuse or security incidents.

• To protect the rights, property or safety of PetRoot, our customers or others.

• In connection with a merger, acquisition, financing, restructuring or sale of all or part of our business.

Service providers may process personal information only as permitted under their agreements with us and applicable law.

5. Shopify

Our store is powered by Shopify.

Shopify provides the ecommerce platform that enables us to operate the Site, process orders and offer products to our customers.

Shopify processes certain personal information on our behalf and may also process information for its own purposes in accordance with its applicable privacy policies.

Payment information may be processed by Shopify or the payment provider selected at checkout.

For more information about how Shopify processes personal information, you can review Shopify's applicable privacy notices.

6. International Data Transfers

PetRoot is based in the Netherlands, but some of the service providers we use may process personal information in countries outside the European Economic Area ("EEA") or the United Kingdom.

This means your personal information may be transferred to or processed in other jurisdictions.

Where applicable law requires safeguards for an international transfer, we use or rely on appropriate transfer mechanisms. These may include:

• Adequacy decisions.

• Standard Contractual Clauses.

• The UK International Data Transfer Agreement or UK Addendum, where applicable.

• Other legally recognised transfer mechanisms.

You may contact us at support@petroot.com if you would like more information about the safeguards applicable to your personal information.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax and regulatory requirements.

The appropriate retention period depends on factors including:

• The type of personal information.

• The purpose for which it was collected.

• Whether we need the information to fulfil a contract.

• Applicable tax, accounting and legal requirements.

• Whether the information may be required to resolve disputes or establish or defend legal claims.

When personal information is no longer required, we take reasonable steps to delete, anonymise or otherwise securely dispose of it, subject to applicable legal obligations.

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage and similar technologies to operate and improve the Site.

These technologies may be used to:

• Keep the Site functioning correctly.

• Remember items in your shopping cart and your preferences.

• Maintain security and prevent fraud.

• Understand how visitors use the Site.

• Measure Site and marketing performance.

• Provide personalised content or advertising where permitted.

Some cookies are strictly necessary for the Site to operate.

Other cookies, including certain analytics and advertising cookies, may only be used with your consent where required by applicable law.

Where available, you can manage your preferences through the cookie controls displayed on the Site.

You can also manage cookies through your browser settings, although disabling certain cookies may affect Site functionality.

9. Analytics and Advertising

Where enabled, we may use analytics, advertising and marketing services provided by Shopify and other service providers.

These providers may process information such as:

• Device and browser information.

• IP addresses.

• Cookie or advertising identifiers.

• Pages viewed.

• Products viewed or purchased.

• Interactions with the Site or our advertisements.

We may use this information to understand Site performance, improve our Services, measure marketing effectiveness and provide relevant advertising where permitted.

Under certain privacy laws, some advertising or analytics activities may be considered "sharing," "sale" or "targeted advertising" even where no personal information is sold for monetary payment.

Where applicable, we provide the privacy choices required by law.

10. Email Marketing

If you subscribe to PetRoot marketing communications, we may send you information about products, promotions, offers and store updates.

You can unsubscribe at any time by using the unsubscribe link included in our marketing emails.

You may also contact:

support@petroot.com

Unsubscribing from marketing communications will not prevent us from sending transactional or service-related messages, such as:

• Order confirmations.

• Payment information.

• Shipping and tracking updates.

• Return or refund information.

• Responses to customer-service requests.

11. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures may include secure connections, access controls, authentication measures and security features provided by Shopify and our other service providers.

However, no method of Internet transmission or electronic storage can be guaranteed to be completely secure.

You are responsible for protecting any account credentials associated with your use of our Services.

If you believe your account or personal information has been compromised, please contact us at support@petroot.com.

12. Personal Data Breaches

If we become aware of a personal data breach, we will investigate and respond in accordance with applicable data protection law.

Where legally required, we will notify the appropriate supervisory authority and affected individuals within the applicable legal timeframes.

13. Children's Privacy

Our Services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children under the age of 16 where parental or guardian consent would be required under applicable law.

If you believe a child has provided personal information to us inappropriately, please contact:

support@petroot.com

We will investigate the request and take appropriate action where required.

14. Your Privacy Rights

Depending on where you live and the applicable law, you may have rights relating to your personal information.

These may include the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of personal information in certain circumstances.

• Request restriction of certain processing.

• Object to certain processing.

• Receive certain personal information in a portable format.

• Withdraw consent where processing is based on consent.

• Lodge a complaint with a competent data protection authority.

These rights are not absolute and may be subject to legal limitations or exceptions.

We may need to verify your identity before processing a privacy request.

To exercise your rights, contact:

support@petroot.com

Your Right to Object

Where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing based on your particular circumstances.

You also have the right to object at any time to the use of your personal information for direct marketing purposes.

If you object to direct marketing, we will stop using your personal information for that purpose.

15. Automated Processing

We and our service providers may use automated tools to assist with fraud detection, security, payment processing, analytics and advertising.

PetRoot does not use solely automated decision-making that produces legal or similarly significant effects on customers unless such processing is permitted by applicable law and the required safeguards and information are provided.

Payment providers, Shopify and other third parties may operate their own automated fraud-prevention or security systems in accordance with their respective privacy policies.

16. Third-Party Links

The Site may contain links to websites, applications or services operated by third parties.

We are not responsible for the privacy, security or content practices of third-party services.

We encourage you to review the privacy notices of third parties before providing them with personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business or Services.

• Our data-processing practices.

• Technology or service providers.

• Applicable legal or regulatory requirements.

When we update this Privacy Policy, we will publish the revised version on this page and update the "Last updated" date.

Where required by law, we will provide additional notice or request consent before material changes take effect.

18. Privacy Complaints

If you have a concern about how PetRoot handles your personal information, please contact us first so that we have an opportunity to investigate and respond.

Email:

support@petroot.com

You may also have the right to lodge a complaint with the data protection authority responsible for your location.

For customers in the Netherlands, the primary supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

UK residents may have the right to lodge a complaint with the Information Commissioner's Office (ICO).

EEA residents may also have the right to complain to the competent supervisory authority in the country where they live or work, or where the alleged infringement occurred.

19. Contact Us

For questions about this Privacy Policy, our use of your personal information or your privacy rights, please contact:

PetRoot, operated by Scaling Co.

Email: support@petroot.com
Website: get-petroot.com