Privacy Policy

RTpetshop
Last updated: August 25, 2026

1. Who We Are

RTpetshop operates the online store at rtshopstore.com. We are the data controller responsible for your personal data. For any privacy-related questions, please contact us at:

RTpetshop — contact@rtshopstore.com | rtshopstore.com

2. What Personal Data We Collect

When you use our website or place an order, we may collect the following information:

Identity data: full name
Contact data: email address, phone number
Delivery data: shipping address and billing address
Transaction data: order history, items purchased, payment amounts
Payment data: payment method details (processed securely by Stripe or PayPal — we never store your full card number)
Technical data: IP address, browser type, pages visited, and cookies (see Section 7)

3. Why We Collect Your Data & Legal Basis (GDPR)

We collect and use your personal data for the following purposes:

Purpose	Legal Basis (GDPR)
Processing and fulfilling your orders	Performance of a contract (Art. 6(1)(b))
Sending order confirmations and shipping updates	Performance of a contract (Art. 6(1)(b))
Processing payments via Stripe or PayPal	Performance of a contract (Art. 6(1)(b))
Complying with legal and tax obligations	Legal obligation (Art. 6(1)(c))
Sending marketing emails (with your consent)	Consent (Art. 6(1)(a))
Improving our website and services	Legitimate interests (Art. 6(1)(f))
Fraud prevention and security	Legitimate interests (Art. 6(1)(f))

4. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third parties who help us operate our business:

Stripe — payment processing. Your payment data is handled by Stripe in accordance with PCI-DSS standards. See Stripe’s privacy policy at stripe.com/privacy.
PayPal — payment processing. See PayPal’s privacy policy at paypal.com/privacy.
Shipping carriers (AliExpress Standard Shipping, Cainiao, and PostNL) — to deliver your order. We share your name and delivery address with the carrier handling your shipment.
Shopify Inc. — our e-commerce platform provider, which hosts our store and processes order data on our behalf.
Legal authorities — if required by law, court order, or to protect our legal rights.

All third-party processors are contractually required to handle your data securely and only for the purposes we specify.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

Order and transaction records: 7 years (to comply with tax and accounting obligations)
Account information: for the duration of your account, plus 2 years after your last activity
Marketing consent records: until you withdraw consent, plus 1 year
Technical/log data: up to 12 months

When data is no longer needed, it is securely deleted or anonymised.

6. Your Rights

Depending on where you are located, you have the following rights regarding your personal data:

EU/EEA customers (GDPR):

Access — request a copy of the personal data we hold about you
Correction — ask us to correct inaccurate or incomplete data
Deletion — request that we delete your data (“right to be forgotten”), subject to legal retention requirements
Data portability — receive your data in a structured, machine-readable format
Restriction — ask us to limit how we use your data in certain circumstances
Objection — object to processing based on legitimate interests or for direct marketing
Withdraw consent — where processing is based on consent, you may withdraw it at any time
Lodge a complaint — you have the right to lodge a complaint with your national data protection authority (e.g. the CNIL in France, the ICO in the UK, or the AEPD in Spain). A full list of EU supervisory authorities is available at edpb.europa.eu.

Customers in the Americas (Brazil, USA, Canada, etc.):

We apply the same rights above as best practice. Brazilian customers may also exercise rights under the LGPD (Lei Geral de Proteção de Dados) by contacting us directly.

To exercise any of these rights, please contact us at contact@rtshopstore.com. We will respond within 30 days.

7. Cookies & Tracking Technologies

We use cookies and similar technologies on our website. This section explains what they are, what we use them for, and how you can control them.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help the site remember information about your visit, such as your language preference or shopping cart contents.

Types of cookies we use

Strictly necessary cookies — essential for the website to function. These include session cookies that keep you logged in and remember your cart. They cannot be disabled. Legal basis: legitimate interests.
Functional cookies — remember your preferences (e.g. language, currency) to improve your experience. Legal basis: legitimate interests or consent.
Analytics cookies — help us understand how visitors use our site (e.g. which pages are most visited, where users drop off). This data is aggregated and anonymised where possible. Legal basis: consent.
Marketing cookies — used to show you relevant ads on other platforms and to measure the effectiveness of our campaigns. These are only set with your explicit consent. Legal basis: consent.

Third-party cookies

Some cookies are set by third-party services we use, including Stripe and PayPal (for payment processing) and Shopify (our platform provider). These parties have their own privacy and cookie policies.

How to manage your cookies

When you first visit our site, you will be shown a cookie banner where you can accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting our site.

You can also control cookies directly through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

8. International Data Transfers

As we serve customers across Europe and the Americas, your data may be transferred to and processed in countries outside your own. Where this involves transfers outside the EU/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in accordance with GDPR requirements.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review it periodically.