IPW.PET

Privacy & Cookie Statements

Last updated: 2 September 2026

This notice explains how IPW.PET handles personal data and how cookies and similar technologies are used on the storefront. It applies to Retail visitors, customers, approved Trade buyers and retailer applicants.

1. Who we are

IPW DISTRIBUTION LIMITED, trading as IPW.PET, is the data controller for the processing described in this notice.

IPW DISTRIBUTION LIMITED
51 Bracken Road
Sandyford Business Park
Dublin 18
Dublin
D18 CV48
Ireland

Company registration number: 804685
Email and privacy requests: trade@ipw.pet
Telephone: +353 85 762 1732

2. Information we collect

Depending on how you use IPW.PET, we may process:

  • Identity and contact data, such as name, email address, telephone number and account identifier.
  • Billing and delivery data, including addresses and delivery instructions.
  • Order and transaction data, such as products, values, discounts, returns, refunds and payment status. We do not normally receive or store complete payment-card credentials.
  • Account data, including authentication status, saved details and preferences.
  • Trade data, such as company, Company Location, buyer role, tax or registration details, retailer application information, Catalog eligibility and business communications.
  • Support and communications data, including questions, correspondence, call notes and return evidence.
  • Review or other submitted content, if you choose to provide it.
  • Marketing and consent data, including subscriptions, objections, cookie choices and consent records.
  • Technical and usage data, such as IP address, device, browser, approximate region, page interactions, referral information and diagnostic events.
  • Security and fraud data, including risk indicators, attempted misuse and records needed to protect accounts, transactions and the service.

3. How information is collected

We collect information you provide through checkout, accounts, Trade applications, forms, reviews and customer support; information generated when you use the Shopify storefront, checkout or customer-account services; technical information from your device and permitted cookies; and information from service providers or other third parties where lawful, such as payment status, delivery events, fraud signals and approved company information.

4. Purposes and lawful bases

Purpose Typical data GDPR lawful basis
Process orders, payments, delivery, returns and refunds Identity, contact, delivery, order and transaction data Performance of a contract; legal obligation where applicable
Create and operate customer or approved Trade accounts Identity, contact, account, company and buyer data Performance of a contract or steps requested before a contract; legitimate interests in administering business accounts
Respond to enquiries and provide support Identity, contact, communications and order data Contract; legitimate interests in customer service and business administration
Maintain accounting, tax, consumer and compliance records Transaction, company, return and communications data Legal obligation
Protect the service, prevent fraud and establish or defend legal claims Account, technical, security, transaction and communications data Legitimate interests in security, fraud prevention and legal protection; legal obligation where applicable
Improve storefront performance and services Aggregated or limited usage, diagnostic and support data Legitimate interests where the processing is necessary and balanced; consent where non-essential cookies or tracking require it
Send requested or legally permitted marketing Contact, preference, purchase and engagement data Consent where required; legitimate interests only where direct-marketing rules lawfully permit it
Publish and moderate reviews Name or display name, review and related product data Consent or contract where appropriate; legitimate interests in authentic product feedback and moderation

Where we rely on legitimate interests, we consider necessity, expected impact and your rights. You may object as described below. Where information is required to perform a contract or meet a legal duty, failing to provide it may prevent us from completing the relevant order or service.

5. Shopify

IPW.PET uses Shopify as its ecommerce platform. Shopify and its related infrastructure process information needed to host the storefront, provide accounts, secure transactions, support checkout, record consent choices and operate commerce services. Read Shopify’s Consumer Privacy Policy and Shopify’s Cookie Policy for current information about Shopify’s processing.

Shopify Network Intelligence is enabled for the store. Subject to applicable law and customer consent choices, Shopify may use information about interactions with IPW.PET and other merchants to provide enhanced fraud-prevention, personalisation, measurement and advertising services. For that enhanced processing, Shopify explains when it acts as a controller and provides rights through its Privacy Portal. Rejecting non-essential processing through the IPW.PET cookie controls restricts Shopify’s use of device data for non-essential purposes in configured consent regions.

6. Payments

Payment information is processed by Shopify Payments and/or another payment provider identified at checkout when enabled. Those providers receive the data needed to authorise and settle the transaction, prevent fraud and meet legal obligations. IPW.PET normally receives confirmation, status and limited transaction details rather than complete card credentials.

7. Service providers and other recipients

We share personal data only where necessary and lawful. Recipient categories can include Shopify and ecommerce infrastructure; payment processors; delivery and logistics providers; customer-support and service-communications providers; analytics providers when enabled and permitted; marketing or advertising providers only when enabled and legally permitted; accountants, insurers, legal and other professional advisers; and regulators, courts or law-enforcement bodies where disclosure is required or lawfully requested.

Service providers may act as processors under contract or, for some activities, as separate controllers under their own notices. We do not sell personal data in the ordinary meaning of selling customer lists for money.

8. International transfers

Some service providers may process personal data outside Ireland or the European Economic Area. Where the GDPR requires a transfer safeguard, the transfer is supported by an adequacy decision, Standard Contractual Clauses, or another lawful mechanism, together with supplementary protections where appropriate. We do not promise that all data remains exclusively in Ireland or the EEA.

9. Data retention

We retain information only for as long as necessary for the purpose collected, including completing transactions, supporting customers and Trade accounts, meeting accounting and tax duties, preventing fraud, resolving disputes and establishing or defending claims. Different records have different periods. Statutory or contractual records are kept for the legally required period; marketing data is kept until consent is withdrawn, an objection is made or it is no longer needed, subject to limited suppression records needed to honour the choice. We then delete, anonymise or securely restrict information where appropriate.

10. Your GDPR rights

Subject to the GDPR and lawful limitations, you may request access to your personal data, correction, erasure, restriction, portability, or information about processing; object to processing based on legitimate interests or direct marketing; and withdraw consent at any time without affecting processing already lawfully carried out.

Send a request to trade@ipw.pet. We may need proportionate information to verify identity and understand the request. We respond without undue delay and normally within one month; the law allows an extension for complex or numerous requests, in which case we will explain the reason and timing.

11. Complaints

You may contact us first, but you also have the right to complain directly to the Data Protection Commission, Ireland, or another competent supervisory authority where applicable.

12. Marketing

We send electronic marketing where you have opted in or where a limited existing-customer rule lawfully applies. A purchase alone is not treated as unlimited marketing permission. Marketing messages include an unsubscribe route where required, and you can object at any time by using that route or emailing us. Service messages about an order, account, safety notice or material terms change are not marketing.

13. Cookies and similar technologies

Cookies and related technologies can store or access information on your device. Strictly necessary technologies may operate without consent only where legally exempt, including where needed to transmit a communication or provide a service you explicitly request, such as security, cart and checkout. Functional or preference technologies remember choices and use consent where required. Analytics technologies measure use and performance and do not activate before required consent. Advertising or marketing technologies support attribution, personalised advertising or similar tracking and require consent where non-essential.

For visitors in configured regions, Shopify’s consent interface is used to control Shopify-managed cookies, pixels and related processing. It provides Accept all, Reject all and granular preference choices. Non-essential Shopify processing is not permitted before the required consent. You can change or withdraw a choice at any time by selecting Cookie preferences in the site footer; withdrawing consent is as direct as giving it.

Browser controls can also delete or block cookies, but blocking strictly necessary technologies may prevent cart, account or checkout functions from working. The footer control is preferred because it records the choice through Shopify’s Customer Privacy API. If a future app installs a separate third-party cookie or pixel, IPW.PET must ensure that it is integrated with the same consent signals or otherwise blocked until the required consent.

15. Current cookie and service table

This table reflects the development storefront and enabled services reviewed on 2 September 2026. It is a maintainable summary, not a claim that every temporary technical token has a fixed name. Shopify can update its platform list; its current Cookie Policy is the authoritative provider list.

Technology or service Purpose/category Party/provider Typical duration
_shopify_essential Store security, session, checkout and anti-tampering; strictly necessary First party / Shopify 1 year
_shopify_test Checks whether the browser supports cookies; strictly necessary First party / Shopify 1 minute
cart and cart_currency Cart contents and checkout currency; strictly necessary First party / Shopify 2 weeks
discount_code Carries a customer-selected discount into checkout; strictly necessary when used First party / Shopify Session
localization Country/localisation choice needed for the selected storefront context First party / Shopify 1 year
_tracking_consent Stores the visitor’s privacy choices; necessary consent record First party / Shopify 1 year
_landing_page and _orig_referrer Reporting/analytics; consent controlled where required First party / Shopify 2 weeks
_shopify_s Identifies a browser-session and store combination for analytics; consent controlled where required First party / Shopify 30-minute rolling expiry
_shopify_y and _shopify_analytics Storefront analytics; consent controlled where required First party / Shopify 1 year
_shopify_marketing Marketing data for buyer surfaces; consent controlled where required First party / Shopify 1 year

No Google Analytics, Meta pixel or custom advertising/customer-event pixel was installed in the development storefront at the review date. Checkout, account or payment services may create additional necessary tokens only when the relevant service is used. If apps or providers change, this section and the technical consent configuration must be reviewed.

16. Children

IPW.PET is a general pet-products ecommerce service and is not directed at children. We do not knowingly seek to collect a child’s personal data where parental or guardian consent is legally required. If you believe a child has provided such information inappropriately, contact us so we can review and take lawful action.

17. Security

We use reasonable organisational and technical measures appropriate to the nature and risk of the information, including access controls, platform security, account protections, staff procedures and service-provider due diligence. No online system can be guaranteed absolutely secure. Please protect account credentials and tell us promptly about suspected misuse.

18. Changes to this notice

We may update this notice when law, services, providers or processing change. The date above identifies the current version. Where legally appropriate, we will provide a more prominent notice or request fresh consent for a material change.

19. Contact

IPW DISTRIBUTION LIMITED
trading as IPW.PET
51 Bracken Road
Sandyford Business Park
Dublin 18
Dublin
D18 CV48
Ireland

Company registration number: 804685
Email: trade@ipw.pet
Telephone: +353 85 762 1732