Privacy Policy

Last updated: August 15, 2026

Puppy Play Expert is operated by TB Ecommerce (“Puppy Play Expert,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

Visit puppyplayexpert.com or one of its authorized subdomains;
Create an account;
Place or attempt to place an order;
Subscribe to our emails;
Participate in a promotion;
Contact us;
Submit a review or other content; or
Otherwise interact with Puppy Play Expert.

1. Who is responsible for your information?

For the purposes of the EU General Data Protection Regulation (“GDPR”), Spain’s Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), and other applicable privacy laws, the data controller is:

TB Ecommerce, trading as Puppy Play Expert

Avenida Isabel Manoja, 18
Apartment 11D
29620 Torremolinos, Málaga
Spain

Email: woof[at]puppyplayexpert.com

TB Ecommerce determines why and how personal information collected through the Puppy Play Expert website, online store, Customer Intelligence system, email communications, and related services is processed.

2. Scope of this policy

This policy applies to personal information processed through:

The Puppy Play Expert website;
Our WooCommerce store;
Customer accounts;
Our Customer Intelligence system;
Subscription forms and popups;
Transactional and marketing emails;
Promotions and promotional claims;
Customer-support communications;
Product reviews; and
Related services operated by Puppy Play Expert.

This policy does not govern independent websites or services operated by other companies. Those companies have their own privacy policies.

3. Personal information we collect

The information we collect depends on how you interact with us.

Information you provide directly

You may provide:

Your name;
Email address;
Telephone number;
Billing address;
Shipping address;
Account login information;
Products ordered;
Product sizes, colors, variations, and customization choices;
Personalized engraving text, such as a pup name or handler name;
Order notes;
Customer-service messages;
Returns, refund, and complaint information;
Reviews, survey answers, or other submitted content;
Marketing preferences and consent;
Information entered when participating in a promotion; and
Other information you choose to provide.

Please avoid entering unnecessary sensitive personal information into engraving fields, order notes, reviews, or customer-service messages.

Order and payment information

When you place or attempt to place an order, we may collect:

Products and quantities;
Order value and currency;
Discounts or promotional benefits;
Billing and shipping information;
Payment method;
Payment status;
Transaction reference;
Fraud-screening results;
Shipment and tracking information; and
Return, cancellation, or refund information.

Payment credentials are generally processed directly by the payment provider shown during checkout, such as PayPal or a card-payment processor.

We do not normally receive or store your complete payment-card number. We may receive a transaction identifier, payment status, billing details, and limited payment metadata.

Website and device information

When you use our website, we or our service providers may automatically collect:

Internet Protocol address;
Browser type and version;
Device type;
Operating system;
General location derived from your IP address;
Referring website;
Pages viewed;
Links clicked;
Products and categories viewed;
Search terms entered on our site;
Cart activity;
Date and time of visits;
Session information;
Cookie and similar-technology identifiers;
Error and diagnostic information;
Security logs; and
Information about how you interact with the website.

Subscriber and Customer Intelligence information

When you submit an email subscription form, we may record:

Email address;
Name, when provided;
Date and time of the request;
Subscription status, such as pending, subscribed, or unsubscribed;
The page or article where the form was submitted;
Source URL and page title;
Popup, form, campaign, or lead-magnet identifier;
Referring source and campaign parameters;
The consent statement displayed;
Consent-policy version;
Confirmation request;
Confirmation date;
Unsubscribe date;
Resubscription events;
A protected or hashed representation of technical information used as consent evidence;
Email-delivery information;
Email-opening and link-click information, where enabled and legally permitted; and
Promotional eligibility, claim, expiration, and redemption information.

We use this information to maintain accurate subscription records, respect your preferences, understand which content generates subscriptions, and measure the effectiveness of our communications.

Free Pup Tag promotion information

If you qualify for or claim a free personalized Pup Tag promotion, we may process:

The email address used to qualify;
Email-confirmation status;
Claim identifier;
Claim issue date;
Claim expiration date;
Selected Pup Tag finish;
Personalization text;
Cart eligibility;
Redemption status;
Associated order number; and
Information required to prevent duplicate or fraudulent claims.

Promotion eligibility is subject to the terms displayed with the offer. These may include a minimum merchandise subtotal, expiration period, first-order limitation, or one-per-subscriber restriction.

Information received from other sources

We may receive information from:

Payment providers;
Shipping carriers;
Fraud-prevention services;
Analytics providers;
Email-delivery providers;
Social media or advertising services, where used;
Suppliers and fulfillment partners;
Publicly available sources; and
Customers who provide information about another recipient.

If you provide information about another person, such as a gift recipient, you should have their permission to do so.

4. How we use personal information

We may use personal information to:

Operate and maintain our website;
Provide the products and services you request;
Process payments and orders;
Customize, manufacture, engrave, package, and deliver products;
Send order confirmations, production updates, shipping notices, and other transactional communications;
Manage accounts and shopping carts;
Manage promotions and gift claims;
Provide customer service;
Process refunds, returns, exchanges, and disputes;
Verify email ownership through double opt-in;
Send marketing emails when we have the required permission;
Record, manage, and honor subscription preferences;
Measure email delivery and engagement;
Understand how visitors use our website;
Measure which pages, articles, forms, and offers generate engagement or sales;
Improve our products, content, website, and customer experience;
Detect spam, fraud, abuse, security incidents, and technical problems;
Enforce our terms and protect our rights;
Meet tax, accounting, consumer-protection, and other legal obligations;
Establish, exercise, or defend legal claims; and
Respond to lawful requests from authorities.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases.

Performance of a contract

We process information when necessary to:

Provide your shopping cart and checkout;
Process an order;
Take payment;
Customize and deliver products;
Provide order updates;
Handle returns or refunds; and
Provide customer support relating to your purchase.

This also applies when you ask us to take steps before entering into a contract, such as responding to a product or order inquiry.

Consent

We rely on consent for:

Marketing-email subscriptions;
Non-essential cookies or similar technologies where consent is required;
Certain analytics or advertising activities;
Personalized advertising where used; and
Any other processing for which applicable law requires consent.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legitimate interests

Where permitted, we may process information for legitimate business interests such as:

Securing our website;
Preventing fraud and abuse;
Preventing misuse of promotions;
Maintaining accurate business records;
Diagnosing technical issues;
Improving our store and services;
Understanding aggregate business performance;
Responding to ordinary customer inquiries; and
Establishing or defending legal claims.

We consider the possible effect on your privacy before relying on legitimate interests.

Legal obligations

We process information when necessary to comply with legal obligations involving:

Tax and accounting records;
Commercial recordkeeping;
Consumer protection;
Product safety;
Fraud prevention;
Regulatory requirements; and
Lawful requests from courts or authorities.

6. Marketing emails and consent

We send marketing emails only when we have an appropriate legal basis, normally your consent.

Submitting an order does not automatically subscribe you to marketing emails. Marketing consent is separate from agreeing to store terms or completing a purchase.

Our subscription process may use double opt-in. After submitting a subscription form, you may receive an email asking you to confirm ownership of the email address. Your marketing subscription becomes active only after confirmation.

Our consent records may include:

The consent language displayed;
The page and form where the request was submitted;
The date and time of the request;
The applicable consent-policy version;
Confirmation status;
Confirmation date;
Unsubscribe date; and
Subsequent preference changes.

Every marketing email will provide a way to unsubscribe. You do not need to create an account or contact customer support to unsubscribe.

After unsubscribing:

We will stop sending marketing emails to that address;
Transactional messages concerning an order may still be sent;
We may retain the minimum information needed to honor the unsubscribe request; and
A previously issued promotional claim may remain available until its stated expiration unless its terms provide otherwise.

Repeated use of an unsubscribe link will not create duplicate consent-history events once the address is already unsubscribed.

You can also withdraw marketing consent by emailing woof[at]puppyplayexpert.com.

7. Transactional communications

Messages necessary to complete or support a transaction are not marketing messages. These may include:

Order confirmations;
Payment notices;
Production updates;
Product-customization questions;
Photo-approval requests;
Shipping and tracking information;
Product-safety notices;
Return or refund messages; and
Responses to customer-service requests.

You may continue to receive these communications even if you unsubscribe from marketing emails.

8. Email delivery provider

We currently use Brevo to help deliver transactional and marketing emails.

Depending on the communication and enabled features, Brevo may process:

Recipient email address;
Recipient name;
Email content;
Delivery status;
Bounce or complaint information;
Message identifiers;
Opens and clicks;
Device or browser information; and
IP address or related technical information.

Brevo processes this information as a service provider acting on our instructions and subject to contractual data-protection requirements.

Brevo’s privacy information is available at:

https://www.brevo.com/legal/privacypolicy/

Our Customer Intelligence system is designed so that our core subscriber and consent records remain under our control and are not dependent on a single email provider.

9. Cookies and similar technologies

We use cookies and similar technologies for purposes including:

Remembering your cart;
Maintaining website sessions;
Keeping customer accounts secure;
Saving privacy preferences;
Operating checkout;
Remembering promotion or gift-claim eligibility;
Preventing fraud and spam;
Measuring website performance; and
Understanding how visitors use the site.

Some cookies are strictly necessary for the website to operate. These cookies do not require consent where the law permits them to be used without consent.

Where required, analytics, advertising, and other non-essential technologies will not be activated until you provide consent through our cookie banner or privacy-preferences tool.

You can withdraw or change cookie consent through the available privacy-preferences tool.

You can also control cookies using your browser settings. Blocking necessary cookies may prevent parts of the store, customer account, cart, or checkout from working properly.

More detailed information about individual cookies and providers may be presented through our cookie banner, privacy-preferences tool, or a separate Cookie Policy.

10. Analytics and advertising

We may use analytics services to understand how visitors find and use our website.

Analytics information may include:

Pages viewed;
Referral source;
Device information;
Browser information;
Approximate location;
Product views;
Cart activity; and
Purchasing activity.

Where applicable law requires consent, non-essential analytics and advertising tools will be used only after consent has been provided.

We may use aggregated or properly de-identified information for business reporting. We do not attempt to identify individuals from properly de-identified information.

If we use personalized advertising, the relevant consent controls and service providers will be identified through our cookie banner or privacy-preferences interface.

11. Sensitive and adult-related information

Puppy Play Expert sells products intended for adults. A person’s product interests, purchases, browsing activity, or communications could potentially reveal or suggest information about their private life.

We do not ask customers to disclose their sexual orientation, sex life, health information, or other legally protected sensitive information in order to subscribe to marketing emails.

We do not currently use purchase or browsing information to intentionally infer sexual orientation, sex life, health status, or other special-category characteristics for automated marketing profiles.

Product selections are processed as needed to operate the store, fulfill orders, prevent fraud, provide customer service, and comply with legal obligations.

Please do not include unnecessary sensitive information in:

Product-personalization fields;
Engraving text;
Order notes;
Product reviews; or
Customer-service messages.

If we introduce processing that intentionally uses sensitive personal information or creates sensitive inferences, we will first conduct an appropriate privacy assessment, update this policy, and obtain explicit consent where required.

12. Artificial intelligence and customer profiling

We may use automation to organize customers or subscribers based on non-sensitive information such as:

The page where someone subscribed;
Products or categories viewed;
Purchase history;
Engagement with previous emails;
General customer interests; and
Whether someone is a new, returning, or repeat customer.

We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Automated recommendations, segmentation, fraud signals, or marketing categorization may be used to assist our operations. Where appropriate, meaningful decisions remain subject to human review.

If we later introduce AI-assisted customer segmentation or recommendations, we will:

Apply data-minimization safeguards;
Limit information to what is reasonably necessary;
Avoid intentionally creating sensitive profiles without a lawful basis;
Assess risks to customers;
Provide additional transparency where required; and
Update this policy where the processing materially changes.

13. When we share personal information

We may share personal information with service providers that help us operate our business, including:

Website-hosting and database providers;
Security, backup, and technical-support providers;
Payment processors;
WooCommerce-related service providers;
Email-delivery providers such as Brevo;
Suppliers, manufacturers, engravers, and fulfillment partners;
Shipping and tracking providers;
Analytics providers;
Fraud-prevention services;
Accountants, insurers, auditors, lawyers, and other professional advisers; and
Government, regulatory, or law-enforcement authorities where legally required.

Suppliers, engravers, fulfillment partners, and shipping carriers receive only the information reasonably necessary to manufacture, personalize, package, or deliver the relevant order.

We may also disclose information:

To protect customers, our business, or other people;
To investigate fraud, abuse, or security incidents;
To enforce agreements;
In connection with a merger, sale, restructuring, financing, or transfer of the business; or
With your direction or consent.

Our service providers are expected to use personal information only for authorized purposes and to apply appropriate privacy and security safeguards.

Where required by the GDPR, service providers that process personal information on our behalf are subject to a data-processing agreement.

14. Sale of personal information

We do not sell personal information for money.

Certain privacy laws use broader definitions of “sale,” “sharing,” or targeted advertising. If we engage in activities covered by those definitions, we will provide any notices and opt-out controls required by applicable law.

15. International data transfers

Puppy Play Expert is operated from Spain. Personal information is therefore primarily governed by European Union and Spanish data-protection law.

Some of our service providers, suppliers, payment processors, hosting providers, email providers, shipping providers, or other partners may be located outside the European Economic Area (“EEA”).

As a result, personal information may sometimes be processed in countries that do not provide the same level of legal protection as Spain or the EEA.

When personal information is transferred outside the EEA, we use an appropriate lawful safeguard where required, such as:

A European Commission adequacy decision;
European Commission Standard Contractual Clauses;
Supplementary contractual, organizational, or technical safeguards;
A legally recognized certification or transfer framework; or
Another transfer mechanism permitted under the GDPR.

You may contact us at woof[at]puppyplayexpert.com to request further information about the safeguards relevant to your personal information.

16. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to comply with applicable legal, accounting, tax, consumer-protection, security, and dispute-resolution obligations.

The applicable period depends on the information:

Order, invoice, transaction, and business records: generally retained for at least six years where required by Spanish commercial-recordkeeping law.
Tax records: retained for the applicable statutory period and longer where an audit, investigation, dispute, or legal requirement applies.
Active subscriber records: retained while the marketing subscription remains active.
Unsubscribe records: the email address and minimum suppression information may be retained for as long as necessary to ensure the unsubscribe request continues to be respected and to demonstrate compliance.
Consent evidence: retained while consent remains active and afterward for an appropriate limitation or compliance period.
Unconfirmed subscription requests: deleted or anonymized after a limited period if email confirmation is not completed.
Promotion and gift-claim records: retained through the claim period and afterward where necessary to prevent misuse, associate redemption with an order, maintain financial records, or resolve a dispute.
Customer-service communications: retained for a reasonable period depending on whether the request relates to an order, complaint, refund, dispute, or legal obligation.
Security and technical logs: generally retained for a limited period unless needed to investigate fraud, abuse, a security incident, or a technical problem.
Analytics information: retained according to our configured analytics settings and applicable consent.

Where information is no longer required but must be preserved to comply with a legal obligation or defend a legal claim, it may be restricted from ordinary use instead of immediately erased.

When personal information is no longer required, we delete, anonymize, or securely isolate it.

17. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These measures may include:

Access controls;
Encryption in transit;
Protected server configuration;
Restricted access to passwords, API keys, and other credentials;
Backups;
Security monitoring;
Software updates;
Spam and fraud controls;
Staging-site safety controls;
Testing before production deployment; and
Limiting service providers to information necessary for their role.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security.

If a personal-data breach occurs, we will investigate it and notify affected individuals or the appropriate authority when required by law.

18. Your privacy rights

Depending on where you live, you may have the right to:

Request access to personal information we hold about you;
Obtain a copy of certain information;
Correct inaccurate or incomplete information;
Request deletion;
Restrict certain processing;
Object to processing based on legitimate interests;
Withdraw consent;
Request data portability;
Object to direct marketing;
Opt out of certain advertising uses;
Ask about service providers or international-transfer safeguards;
Request human review of certain automated decisions; and
Complain to a privacy or data-protection authority.

These rights may be subject to legal exceptions. For example, we may need to retain transaction records required for tax, accounting, fraud-prevention, or legal-claims purposes.

To exercise a privacy right, email:

woof[at]puppyplayexpert.com

Please use the subject line:

Privacy Request

We may request information reasonably necessary to verify your identity and protect your information.

You will not be discriminated against for exercising a privacy right.

19. Rights of people in the European Economic Area

If you are located in the European Economic Area, your rights may include the following.

Right of access

You may ask whether we process your personal information and request access to that information.

Right to rectification

You may ask us to correct inaccurate information or complete information that is incomplete.

Right to erasure

You may ask us to delete personal information where the GDPR provides a right to deletion.

This right is not absolute. We may retain information where required for tax, accounting, commercial recordkeeping, fraud prevention, legal claims, or another lawful purpose.

Right to restriction

You may ask us to restrict how certain information is processed while an accuracy, legal-basis, or objection question is being resolved.

Right to object

You may object to processing based on legitimate interests. We will stop the processing unless we demonstrate compelling legitimate grounds or need the information for legal claims.

You may object to direct marketing at any time. If you object to direct marketing, we will stop using your information for that purpose.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Right to data portability

Where applicable, you may request certain information in a structured, commonly used, machine-readable format or request that eligible information be transmitted to another controller.

Automated-decision rights

You may have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where legally permitted.

Response period

We will normally respond to a valid GDPR request within one month.

That period may be extended by up to two additional months where permitted due to the complexity or number of requests. We will notify you if an extension is necessary.

Complaints

You have the right to complain to the Spanish Data Protection Agency:

Agencia Española de Protección de Datos (AEPD)
Calle Jorge Juan, 6
28001 Madrid
Spain

Website: https://www.aepd.es/

You may also complain to the supervisory authority in the EEA country where you live, work, or believe an infringement occurred.

We would appreciate the opportunity to address your concern first. You can contact us at woof[at]puppyplayexpert.com.

20. Privacy rights outside the European Economic Area

People outside the European Economic Area may have additional privacy rights under the laws of their country, state, or province.

Where applicable, these may include rights to:

Access personal information;
Correct personal information;
Delete personal information;
Obtain a copy of personal information;
Withdraw consent;
Object to certain processing; or
Opt out of certain disclosures or advertising activities.

Requests may be submitted to woof[at]puppyplayexpert.com. We will process valid requests in accordance with applicable law.

21. Children

Our website and products are intended only for adults aged 18 or older.

We do not knowingly collect personal information from children.

If you believe a person under 18 has provided personal information through our website, contact us at woof[at]puppyplayexpert.com so that we can investigate and delete it where appropriate.

22. Third-party links

Our website may link to third-party websites or services.

We do not control those services and are not responsible for their privacy practices, content, security, or handling of personal information.

Review the privacy policy of a third-party service before providing information to it.

23. Changes to this policy

We may update this Privacy Policy to reflect:

Changes to our services;
New technologies or providers;
New legal requirements;
Changes to our Customer Intelligence system;
Changes to our email or marketing systems; or
Changes to how we use personal information.

The updated version will be published on this page with a revised “Last updated” date.

If a change materially affects consent-based processing, we will provide additional notice or obtain new consent where required.

24. Contact us

For questions, concerns, complaints, or privacy-rights requests, contact: