Legal

Privacy Policy

Effective since May 18, 2026

Last updated: May 18, 2026

This Privacy Policy describes how PupTrace ("we", "us", "our") collects, uses, and shares personal information when you visit, use, or make a purchase from puptrace.com (the "Site") or otherwise interact with us (collectively, the "Services").

Data controller. PupTrace is operated by Social Data Media Limited, a company registered in Hong Kong SAR. All references to "PupTrace", "we", "us", and "our" in this Policy refer to Social Data Media Limited. Our contact details are in Section 8.

1. Personal information we collect

We collect the following categories of personal information:

  • Order information. When you place an order, we collect your name, billing and shipping addresses, payment confirmation (we do not store full payment card numbers — see Section 3), email address, phone number (where provided), and the contents of your order.
  • Account information. If you create an account, we collect the information you provide (email, name, password hash, saved addresses).
  • Customer support communications. When you email or message us, we retain the message, your contact details, and any attachments (including photographs you send us, for example for a return claim).
  • Pet photographs. If you submit a pet photograph for a portrait, sketch preview, or custom engraving, we retain the photograph for the duration of the production queue and for 30 days after delivery, after which the photograph is automatically anonymized or deleted. Photographs submitted for the free design preview follow the same 30-day post-delivery retention window.
  • Device and usage information. When you visit the Site, we automatically collect technical information such as your IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps. This information is collected through cookies, log files, and similar technologies, including Google Analytics 4, the Meta (Facebook) Pixel, and the TikTok Pixel (see Section 3 and Section 4).
  • Marketing information. If you subscribe to our email list or opt in to marketing communications, we collect your email address and your engagement with our messages (opens, clicks).

2. How we use personal information

  • To process and fulfill your order, including production, shipping, returns, refunds, and customer support.
  • To communicate with you about your order, account, or inquiries.
  • To send you marketing communications, where you have opted in. You can opt out at any time using the unsubscribe link in any marketing email.
  • To detect, prevent, and address fraud, security incidents, and abuse.
  • To improve the Site and our Services, including analyzing usage patterns.
  • To comply with our legal obligations.

3. How we share personal information

We share personal information with the following categories of third parties, only as needed to provide the Services:

  • Shopify. Our Site and checkout are powered by Shopify, Inc. Shopify stores order data and provides core e-commerce infrastructure. See Shopify's privacy policy at shopify.com/legal/privacy.
  • Payment processors. Payment card and wallet information is processed directly by Stripe (card payments) and PayPal (wallet payments). We do not see or store your full payment card number. See stripe.com/privacy and paypal.com/privacy.
  • Shipping carriers. We share your name and shipping address with carriers (such as USPS, UPS, FedEx, DHL, and their international counterparts) to deliver your order.
  • Email platform. We use Klaviyo to send transactional and marketing email. Klaviyo processes your email address and engagement data on our behalf.
  • Analytics. We use Google Analytics 4 (provided by Google LLC) and Shopify's built-in analytics to understand how visitors use the Site. Google Analytics may set cookies on your device. See Google's privacy policy.
  • Advertising and marketing performance. We use the Meta (Facebook) Pixel (provided by Meta Platforms, Inc.) and the TikTok Pixel (provided by TikTok Pte. Ltd.) to measure the performance of advertising on Facebook, Instagram, and TikTok and, where permitted, to deliver more relevant advertising to you. These pixels set cookies and share information about your interactions with the Site with the relevant platform. See Meta's privacy policy and TikTok's privacy policy.
  • Legal disclosures. We may disclose personal information when required by law, in response to a valid legal process, or to protect our rights, property, or safety.

4. Cookies

We and our service providers use cookies and similar technologies on the Site for the following purposes:

  • Strictly necessary cookies — required for the Site to function (for example, to keep your cart populated during checkout). Set by Shopify.
  • Analytics cookies — to understand how visitors use the Site. Set by Google Analytics 4 and Shopify's built-in analytics.
  • Advertising / marketing cookies — to measure advertising performance and, where you have consented, to personalize marketing. Set by the Meta (Facebook) Pixel and the TikTok Pixel.

Most browsers let you refuse or delete cookies. If you refuse non-essential cookies (analytics and advertising), strictly necessary cookies will still be set so that core checkout functionality continues to work; however, some Site features may not function correctly.

5. Your rights

Depending on where you live, you may have the following rights with respect to your personal information:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Request that we correct inaccurate information.
  • Deletion. Request that we delete your personal information, subject to our legal and operational retention obligations.
  • Portability. Request a copy of your personal information in a machine-readable format.
  • Objection / restriction. Object to, or request restriction of, certain processing.
  • Withdraw consent. Where processing is based on consent, withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5.1 EU / UK residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal information are: (i) performance of a contract (to process your order and provide customer support); (ii) legitimate interests (to operate, secure, and improve the Site and our business); (iii) consent (for marketing communications and non-essential cookies); and (iv) compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.

5.2 California residents (CCPA / CPRA)

If you are a California resident, you have the rights described above with respect to personal information collected in the preceding 12 months. We do not sell personal information in exchange for money. To exercise any of these rights, contact us at the address in Section 8.

6. Data retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

  • Order records: retained for the period required by applicable tax, accounting, and consumer-protection law (typically 7 years).
  • Pet photographs: retained while the order is in production and for 30 days after delivery, after which they are automatically anonymized or deleted, unless you have separately consented to longer retention.
  • Marketing email subscriptions: retained until you unsubscribe.
  • Customer support correspondence: retained for up to 3 years from the date of last contact.

7. International data transfers

PupTrace is operated from Hong Kong SAR. Our service providers (including Shopify, Klaviyo, Stripe, PayPal, Google, Meta, and TikTok) operate from a range of jurisdictions including the United States, the European Union, and Asia. If you access the Site from the European Economic Area, the United Kingdom, or another jurisdiction whose data-protection laws differ from those of Hong Kong, please be aware that your personal information may be transferred to, stored, and processed in those service providers' jurisdictions. Where required for EU/UK transfers, we and our service providers rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

8. Contact us

For privacy questions or to exercise any of the rights above, contact us at support@puptrace.com. Please include "Privacy request" in the subject line.

If you require a physical mailing address (for example, to lodge a formal data-protection request), write to:

PupTrace
Room 2304, 23/F, Ho King Commercial Centre
2–16 Fa Yuen Street, Mong Kok
Kowloon, Hong Kong

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this page indicates when this Policy was most recently revised. Material changes will be communicated via the Site or by email where appropriate.