Privacy Policy

Paw Havenly Limited ("we", "us", "our") is the data controller for personal data collected through https://pawhavenly.xyz. We are registered in England and Wales and operate as Paw Havenly.

We respect your privacy and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect and process the following information when you use our website or make a donation:

• Identity and contact data — such as your name and email address.
• Donation data — campaign selected, donation amount, currency, optional message, and whether you donate anonymously.
• Payment data — card type and last four digits, transaction reference, payment status, and records needed for receipts and administration. Full card numbers are processed by our payment provider and are not stored on our servers.
• Technical data — IP address, browser type, device information, and cookies or similar technologies where used.
• Communications — messages you send to us by email or through the website.

We use personal data for the following purposes:

• processing and recording donations;
• providing donation receipts and transaction confirmations;
• operating, securing, and improving our website;
• responding to enquiries, complaints, or refund requests;
• meeting legal, regulatory, and accounting obligations;
• preventing fraud and misuse of our services.

We rely on one or more of the following lawful bases under UK GDPR:

• Contract — where processing is necessary to complete your donation and provide related services.
• Legal obligation — where we must keep financial and transaction records.
• Legitimate interests — to operate our charity website, prevent fraud, and improve our services, where those interests are not overridden by your rights.
• Consent — where you have given clear consent, for example for optional marketing communications if we offer them.

We do not sell your personal data. We may share it with trusted service providers who help us run our website and process donations, such as:

• payment processing partners;
• website hosting and infrastructure providers;
• database and authentication providers;
• professional advisers where required (for example accountants or lawyers).

These providers may process data on our behalf under contractual safeguards. We may also disclose information where required by law, regulation, or court order.

Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as UK adequacy regulations, standard contractual clauses, or equivalent protections recognised under UK data protection law.

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, tax, and accounting requirements. Donation and transaction records are typically retained for up to seven years unless a longer period is required by law or needed to resolve a dispute.

Under UK data protection law, you have rights including:

• the right to access a copy of your personal data;
• the right to rectification of inaccurate data;
• the right to erasure in certain circumstances;
• the right to restrict or object to processing in certain circumstances;
• the right to data portability where applicable;
• the right to withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at hello@pawhavenly.xyz. We may need to verify your identity before responding.

If you are unhappy with how we handle your personal data, please contact us first at ${company.privacyEmail}. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: https://ico.org.uk/make-a-complaint/.

We may use essential cookies and similar technologies needed for website security, session management, and checkout functionality. Where non-essential cookies are used in future, we will provide appropriate notice and, where required, obtain consent.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure.

Our website is not directed at children under 13. We do not knowingly collect personal data from children under 13 without appropriate parental consent. Donations should be made by adults or with a parent or guardian's permission.

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date shown at the top.

For privacy questions or requests, contact Paw Havenly Limited, registered office: London, United Kingdom, at hello@pawhavenly.xyz.