Who We Are (and Who Holds the Leash):

OnlyPaws is operated by [The Assembly AB], the company responsible for handling personal data. 

What We Collect (and Why We’re Asking):

When you place an order, we collect your name, billing and delivery addresses, contact details, and order and payment references. For products made to size, we also collect the measurements you provide and link them to your order. We use this information to process your payment, prepare your product, and deliver your order.

The information we need varies by product. All fields marked as required for the product you choose must be completed so we can fulfil your order and, where sizing applies, make the product to the measurements you provide.

Why We Use Your Data (Every Detail Has a Job)

To fulfil your order. We use your name, billing and delivery addresses, contact details, and order and payment references to process your payment, prepare and deliver your order, and send you order updates. If you order a made-to-size collar, we use the measurements you provide to make it to size. Our legal basis is performing our contract with you.

To make reordering easier. If you tick the optional box when ordering, we save your dog’s measurements so we can retrieve them if you reorder. We keep them for up to 24 months from the date of the most recent order for which you chose to save them. Our legal basis for this use is your consent. You can withdraw it at any time by emailing talktothepaw@onlypawsclub.com. Your choice does not affect your current order.

To meet our accounting obligations. We keep the information we’re required to retain under Swedish accounting law, such as invoices and payment records. Our legal basis is compliance with a legal obligation.

To understand how people use our shop. If you allow optional analytics cookies, we use Squarespace Analytics to see how visitors find our shop and which pages they visit. This helps us improve the site. Our legal basis for this use is your consent, which you can withdraw at any time through Cookie settings. See our Cookie Policy for details.

To understand what our Instagram audience enjoys. We use summary statistics from Instagram Insights, such as post reach and engagement, to see which content people respond to and plan future posts.

To consider and publish pet features. If you send us a pet photo through Instagram, email or our website, we use the photo and your contact details or Instagram handle to review your submission and get in touch. Our legal basis is our legitimate interest in managing the submissions people choose to send us. If we’d like to publish or edit your photo, or tag you, we’ll explain how and where we’d like to use it and ask for your permission first. Our legal basis for those uses is your consent. You can withdraw it at any time by messaging @onlypaws.club or emailing talktothepaw@onlypawsclub.com.

Withdrawing consent does not affect the lawfulness of how we used your data before you withdrew it.

Preventing Payment Fraud (Our Guard Dog Is on Duty)

We use Squarespace Payments, which works with Stripe, to process payments. Fraud checks at checkout can automatically block a payment. Its fraud checks can automatically block a payment. If an order is flagged, we may review the order and the payment information available to us. Our legal basis for reviewing flagged orders and requesting a review of blocked payments is our legitimate interest in preventing fraudulent purchases and protecting Only Paws Club from financial losses.

If you believe your payment was blocked in error, email talktothepaw@onlypawsclub.com to ask us to look into it. Where possible, we’ll ask Squarespace Payments to review the block.

Who We Share Data With (Who’s on the Other End of the Leash?)

Our online shop. We use Squarespace to host and operate the Only Paws Club website and shop. Squarespace processes information on our behalf when you place an order or submit a form on our website. This can include your contact details, order information and any measurements you enter for a custom collar.

Payments. We use Squarespace Payments, which works with Stripe, to process payments and refunds. They receive the checkout and transaction information needed to handle those transactions and carry out payment security checks.

Delivery. We use PostNord to ship and track your order. We share the recipient’s name and delivery address with PostNord, along with an email address or phone number where needed for delivery notifications. For international shipments, PostNord may work with a local postal or delivery partner to complete the delivery.

Accounting. We share relevant transaction information, such as invoices and payment records, with our accounting provider for bookkeeping and reporting.

Email and customer support. We use Google Workspace (Gmail) to receive and reply to messages sent to talktothepaw@onlypawsclub.com. Google Workspace processes your email address, the contents of your messages and any attachments you send us so we can respond to your enquiry.

Instagram and pet features. If you contact us through Instagram, Meta handles your messages through its platform. If you give us permission to feature your pet on Instagram, the photo and any tag you’ve agreed to share may be visible to people who can view the feature.

Outside the EEA. Some of the services we use may process personal data outside the European Economic Area (EEA), including in the United States. For website and shop data, payment data and email data covered by the applicable data processing terms of Squarespace, Stripe and Google Workspace, eligible transfers to certified U.S. recipients can take place under the EU–U.S. Data Privacy Framework. Where that framework does not apply and contractual safeguards are required, the applicable terms provide for the European Commission’s Standard Contractual Clauses.

Meta handles Instagram data under its own Privacy Policy. Meta Platforms, Inc. participates in the EU–U.S. Data Privacy Framework for transfers covered by its certification.

You can email talktothepaw@onlypawsclub.com for more information about these transfers or to request a copy of the applicable safeguards.

How Long We Keep Your Data (We Don’t Bury It for Later)

Orders and accounting records. We keep order information for as long as we need it to make and deliver your order, handle returns or complaints, and resolve disputes. We keep records required under Swedish accounting law, such as invoices and relevant payment records, for seven years after the end of the calendar year in which the financial year closed.

Customer messages. We keep routine enquiries for up to 12 months after the last message about your enquiry. If a conversation relates to an order, complaint or dispute, we may keep the relevant messages for as long as needed to handle that matter or meet a legal obligation.

Collar measurements. We use the measurements you provide to make your collar and keep them for as long as needed to handle any sizing questions or issues with that order.

Pet photo submissions. If we don’t select your photo for a feature, we keep it for up to 90 days from submission. If you give us permission to feature it, we keep the photo for as long as needed for the agreed feature or until you withdraw your consent, whichever comes first. You can withdraw consent by messaging via Instagram @onlypaws.club or emailing talktothepaw@onlypawsclub.com.

Instagram and Pet Features (Your Pet, Your Call).

When you send us a photo

You can submit a pet photo through Instagram DM, email or our website. We use the photo, your message and your Instagram handle or other contact details to review your submission and get back to you. Our legitimate interest is managing the submissions people choose to send us. If you contact us on Instagram, Meta also handles your messages under its own Privacy Policy.

Before we feature your pet. 

If we’d like to repost your photo, feature it on our website, turn it into an AI editorial or use it in a paid ad, we’ll explain what we have in mind and ask for your consent for that specific use. We’ll ask separately before tagging you or displaying your handle. If you agree to an Instagram Story and we later want to use the image in an ad, we’ll ask again.

AI editorials. 

We use Leonardo.Ai in Private mode to create AI editorials. If we’d like to use your pet photo as a reference, we’ll explain the planned edit and ask for your permission before uploading it. We upload only the pet image needed for the edit and remove identifying details such as people’s faces, visible names and location metadata. Leonardo.Ai  content generated in Private mode is not visible to other users or used by Leonardo.Ai to train its models.

If you change your mind. 

You can withdraw your consent at any time by messaging via Instagram @onlypaws.club or emailing talktothepaw@onlypawsclub.com. We’ll stop using the material for the purpose you’ve withdrawn permission for and remove it from posts or pages we control. Withdrawing consent does not affect the lawfulness of any use before you withdrew it.

Cookies & Tracking (Some Treats Are Optional)

Necessary. 
These cookies help the Only Paws Club website and shop work. For example, they keep items in your shopping bag as you move through the site and remember your cookie choices. These cookies are always on.

Performance and Analytics. 
If you allow these cookies, we use Squarespace Analytics to count visits and understand how people find and use our website. This helps us improve the shop. You can still browse and place an order if you reject these cookies.

Manage Cookies. 
You can accept or reject optional cookies in the cookie banner. To change your choices or withdraw your consent at any time, open Manage Cookies, adjust your settings and select Save Preferences. See our Cookie Policy for details about the cookies we use, who sets them, what they do and how long they last.

Your Rights & How to Contact Us (You Hold the Leash).

Your rights. 
Under the GDPR, you can ask us to confirm whether we use your personal data and request a copy of it. You can ask us to correct inaccurate information or complete missing information. In certain circumstances, you can ask us to delete your data, restrict how we use it or receive the data you provided in a format you can reuse with another service. You can also object to uses based on our legitimate interests, and you can object to direct marketing at any time.

Withdraw your consent. 
If we use your data based on your consent, you can withdraw it at any time. For optional website cookies, open Manage Cookies, update your choices and select Save Preferences. For a pet feature, message via Instagram @onlypawsclub or email us. Withdrawing consent does not affect the lawfulness of how we used your data before you withdrew it.

Contact us. 
To exercise your rights or ask a privacy question, email talktothepaw@onlypawsclub.com. We’ll respond without undue delay and normally within one month. If we need more time, we’ll tell you within that first month and explain why.

Make a complaint. 
You have the right to complain to Sweden’s data protection authority, Integritetsskyddsmyndigheten (IMY). You can also complain to the relevant EU data protection authority where you live, where you work or where you believe the issue occurred.