Privacy policy

Privacy Policy

Last updated: 17 April 2026

At Zepawo, we care about your privacy just as much as we care about your pets. This Privacy Policy explains what personal information we collect when you shop with us, how we use it, who we share it with, and the rights you have over your data.

Zepawo is a brand operated by SV4 Ventures, S.L. (NIF: ESB19496322), registered at Calle Molinell 6, bajo, La Saïdia, 46010 Valencia, Spain. For the purposes of the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD), SV4 Ventures, S.L. is the data controller of your personal information.

Our store is powered by Shopify, which helps us deliver the shopping experience to you. If there is ever a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy takes precedence regarding how your personal information is handled.

By using our website or making a purchase, you confirm that you've read and understood this Privacy Policy.

1. Personal Information We Collect

"Personal information" means any information that identifies you or could reasonably be linked to you. It does not include anonymous or de-identified data.

Depending on how you interact with us, we may collect the following:

  • Contact details: name, billing and shipping address, phone number, email address.
  • Payment information: card details, payment method, transaction confirmations. Payments are processed securely by our payment providers (such as Shopify Payments, PayPal, and similar); we do not store your full card number on our own servers.
  • Account information: username, password (encrypted), preferences, and settings.
  • Order and transaction information: items viewed, added to cart or wishlist, purchased, returned, or exchanged, along with your order history.
  • Customer communications: any messages you send us via email, contact forms, or social media.
  • Device and technical information: IP address, browser type, device identifiers, operating system.
  • Usage information: how you navigate and interact with our website, including pages visited and time spent.
  • Pet-related preferences (optional): if you choose to share them, details like your pet's size, breed, or preferences, to help us recommend suitable products.

2. Where We Collect Your Information From

  • Directly from you: when you create an account, place an order, contact us, or sign up for our newsletter.
  • Automatically: through cookies, pixels, and similar technologies when you browse our site.
  • From our service providers: such as Shopify, payment processors, shipping carriers, and fulfilment partners.
  • From marketing and analytics partners: such as Meta (Facebook/Instagram), Google, and TikTok, where applicable.

3. How We Use Your Information (and Our Legal Basis)

Under GDPR, we must have a lawful reason to process your data. Here's how we use your information and why we're allowed to:

Purpose Legal Basis
Processing your orders, payments, shipping, returns, and customer support Performance of a contract (Art. 6(1)(b) GDPR)
Creating and managing your account Performance of a contract
Sending marketing emails and promotions Your consent (Art. 6(1)(a)) — you can withdraw at any time
Showing personalised ads on social media and other platforms Your consent via our cookie banner
Preventing fraud, securing our website, and protecting our business Legitimate interests (Art. 6(1)(f))
Complying with tax, accounting, and consumer protection laws Legal obligation (Art. 6(1)(c))
Improving our products, website, and customer experience Legitimate interests

4. Who We Share Your Information With

We never sell your personal data. However, we do share it with trusted parties who help us run our business:

  • Shopify — our e-commerce platform provider, which hosts the store and processes data on our behalf.
  • Payment processors — such as Shopify Payments, PayPal, Stripe, and Klarna, to securely process your payment.
  • Our fulfilment and shipping partners — to prepare and deliver your order. Zepawo works with third-party fulfilment providers based in the EU who receive the information necessary to pack and ship your order (typically your name, shipping address, phone number, and order details). They are contractually required to protect your data and only use it for fulfilment purposes.
  • Shipping carriers — such as Correos, SEUR, GLS, DHL, UPS, and similar, to deliver your parcel.
  • Marketing and analytics partners — such as Meta, Google, TikTok, and email marketing platforms (e.g. Klaviyo, Mailchimp), where you've consented.
  • Professional advisors — such as accountants, tax advisors, and lawyers, when necessary.
  • Authorities — when legally required, such as tax authorities, law enforcement, or courts.
  • Business successors — if SV4 Ventures is involved in a merger, acquisition, or restructuring.

5. Relationship with Shopify

Our store runs on Shopify, which processes your personal information to provide and improve the service. Some of that data may be transferred to and shared with Shopify and third parties located outside the EU, always with appropriate safeguards in place.

Shopify also offers enhanced features that use data from your interactions across Shopify merchants. In those cases, Shopify acts as an independent data controller. You can learn more and exercise your rights directly through the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. International Data Transfers

Because we work with global service providers (including Shopify and some marketing platforms), your data may be transferred outside the European Economic Area (EEA). When this happens, we ensure it's protected through recognised safeguards such as:

  • Transfers to countries deemed "adequate" by the European Commission
  • EU Standard Contractual Clauses (SCCs)
  • Other legally approved mechanisms

7. How Long We Keep Your Information

We only keep your data for as long as necessary:

  • Order and invoice data: at least 6 years, as required by Spanish tax and commercial law.
  • Customer account data: while your account is active, plus a reasonable period afterwards.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Website analytics data: typically up to 24 months.
  • Customer service communications: up to 3 years after the last interaction.

After these periods, we either delete or anonymise your data.

8. Third-Party Websites

Our website may contain links to external sites (such as social media or payment providers). We are not responsible for their privacy practices. Please review their policies before sharing information with them.

9. Children's Privacy

Our website is not intended for children under 14 (the minimum age for consent to data processing under Spanish law). We do not knowingly collect personal data from children. If you believe a child has shared information with us, please contact us and we'll promptly delete it.

10. Security

We take reasonable steps to protect your personal information, including encryption, secure payment processing, and access controls. However, no system is 100% secure. Please avoid sending sensitive information through unsecured channels, and keep your account credentials confidential.

11. Your Rights

Under GDPR and Spanish data protection law, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete information
  • Delete your data ("right to be forgotten")
  • Restrict or object to our processing of your data
  • Portability — receive a copy of your data in a portable format
  • Withdraw consent at any time (without affecting prior lawful processing)
  • Opt out of marketing communications by clicking "unsubscribe" in any of our emails
  • Not be subject to automated decision-making that significantly affects you

To exercise any of these rights, email us at privacy@zepawo.com. We'll respond within 30 days, as required by law. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD) C/ Jorge Juan, 6, 28001 Madrid, Spain Website: www.aepd.es

12. Cookies

Our website uses cookies and similar technologies to make the site work, analyse traffic, personalise your experience, and deliver relevant advertising. You can manage your cookie preferences at any time through our cookie banner or your browser settings. For full details, please see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we do, we'll update the "Last updated" date at the top of this page, and, where required, notify you directly.

14. Contact Us

For any questions about your privacy or to exercise your rights, reach out to us at:

SV4 Ventures, S.L. (trading as Zepawo) 📧 Email: privacy@zepawo.com 📍 Address: Calle Molinell 6, bajo, La Saïdia, 46010 Valencia, Spain 🆔 NIF: ESB19496322

We are the data controller responsible for your personal information under applicable data protection laws.