Privacy

Who we are

pawdentials.com is run by Bentley & Puddles Studio Ltd., the studio behind Pawdentials by Bentley & Puddles. Questions or requests about your information: privacy@bentleypuddles.com.

What we collect, and why

When you join the list

Your email address, the date and time, which form you used, the exact consent wording you agreed to, the page address, any ad campaign tags in the link (like utm_source), and the country your connection comes from. We keep this so we can email you about news and offers, and so we can show that you asked to hear from us.

When you design a tag

When you add a tag to your cart we save your design so we can make it: the jurisdiction, document, holder, size and colour, the phone number you enter for the tag, and the details you choose to print (your pet's name, breed, home, a note, "about me" and so on). Each design gets a File No., which is printed on the back of the tag and on your order. Until you add to the cart, nothing you type leaves your browser. The phone number is also kept in your browser for the rest of your visit (and no longer), so adding a second tag doesn't ask for it again.

Your pet's photo

If you add a photo to a Good Pet ID, your browser crops it to the photo window and strips the hidden information in it (such as where it was taken) before it is sent. We store it privately and use it only to print your tag. Only you see it (in your cart); we don't show it to anyone else or share it, and you can ask us to delete it.

Your cart and checkout

Your cart is a Shopify cart, remembered by a cookie so it's still there when you come back. At checkout, Shopify collects your name, email, shipping address and payment details. We receive your order, email and shipping address so we can make and send your tag; your card details go to Shopify and its payment provider, and we never see or store them. If you tick "Email me news and offers from Bentley & Puddles Studio Ltd. Unsubscribe anytime." at checkout, that's your separate consent to marketing emails; you can order without it.

If someone scans your pet's tag

Every tag has a QR code on the back that opens your pet's found page. Only tags we've printed have one. The page shows the details printed on your tag (your pet's name and photo, your phone number, breed, home, note and About me), plus any extra contacts and note for the finder that you add. You can hide any of them at Your tags. Anyone who has the tag, or its File No., can see the page, so add only what you're happy for a finder to see. It never shows your email.

When someone opens a tag's page, we log the date and time, whether they scanned the code or typed the File No., and the country and region worked out from their IP address. We don't keep the IP address itself. There are no analytics on found pages. If a finder taps "Text my location", their phone asks their permission, then puts a map link to where they are into a text message they send from their own phone. Their location never reaches us.

If you hide your phone number and add no other contacts, the page offers "Message the family" instead. A finder writes a message there, and can add a way to reach them and a map link to where they are. We email it to the address on your order, without showing them your address. We don't keep the message, the finder's contact details or their location after it's sent: only the date, the tag, whether it was delivered and whether it had a location, and the finder's country, so we can stop anyone flooding you with messages.

Your phone number. We use the phone number on your tag only to print it, to show it on your tag's page (unless you hide it), and on your order in Shopify so we can make the tag. We never use it for marketing, never sell it, and never share it beyond the services below that make and send your order. You can hide it from the page at any time, or show it only while your pet is marked missing. Before you add someone else's number for finders to call, you confirm they've agreed to be listed.

Your tags

When we print your tag, we keep the email from your order with it, so you can sign in at Your tags and change what the page shows. To sign in, you enter that email and we send you a link that works once, for 30 minutes. We store only a scrambled (hashed) form of each link and sign-in. Signed in, you can also see when your tag's page was opened in the last 30 days, and roughly where from (country and region).

Analytics

We use PostHog to learn which designs, sizes and colours people choose, and where people stop, so we know what to print and what to fix. It uses no cookies. Instead it gives each visit a random code, kept in your browser tab's session storage, which is deleted when you close the tab. So we can follow one visit from page to page, but we can't tell that two visits came from the same person. It records:

• the choices you make (for example "Texas, vanity plate, Jumbo", or "added to cart");
• which pages you visit, how you got here (the referring site and any campaign tags in the link) and how far down each page you scroll;
• where you click or tap, including clicks that do nothing or are repeated in frustration, so we can draw heatmaps of each page and find what's confusing;
• how fast the page loads and responds on your device (web vitals), with your browser, device type and approximate location (country, region and city, worked out from your IP address);
• a replay of the visit: what the pages looked like, where the pointer moved, and what was clicked and scrolled, so we can watch where people get stuck.

It never records what you type into a form: in replays every field shows as hidden characters. The tag preview, your photo, the sample tags at the top of the page and the tags in your cart are left out entirely, and replays show them as empty boxes. So it never sees your email, phone number, address, photo or your pet's name. Replays only capture this website, never anything else on your screen.

Cookies

Four small cookies, none used for tracking or ads. j remembers which state or province you picked (for example "tx"), so the page opens on it next time, and m remembers whether you picked Canada or the United States in "Ship to", so prices show in the right currency; both are kept for 30 days. cart holds the ID of your Shopify cart for 14 days, so your tags are still in it when you come back. bp_owner keeps you signed in to Your tags for 30 days after you use a sign-in link; it's set only if you sign in.

Spam protection

Our forms and "Add to cart" use Cloudflare Turnstile to check that a person, not a bot, is using them. Cloudflare looks at technical signals from your browser and connection to do this.

Who handles it for us

We don't sell or rent your information. These services process it on our behalf:

• Cloudflare hosts the site, our database and the private storage for photos, and runs Turnstile.
• Shopify keeps our email list, sends our emails, and handles your cart, orders and payments.
• Stallion Express, our shipping company, and the carrier it books for your parcel (such as Canada Post) receive your name, shipping address and order details to deliver your tag.
• PostHog provides the analytics and replays described above.
• Bird sends the sign-in emails for Your tags, and finders' messages from a tag's page.

These services may store information on servers in Canada, the United States or elsewhere, so it may be subject to the laws of those countries.

How long we keep it

We keep your list signup while you're subscribed, and the record of your consent for as long as we need to show we had it. We keep orders, with their designs and photos, as long as we need them to make and support your order and to keep our business and tax records. Designs in a cart that never becomes an order are deleted within 12 months, or sooner if you ask. You can ask us to delete your photo at any time. We keep a tag's found page, its visit log and the contacts and note you add for as long as the page is on; you can change or remove your extra contacts and note at Your tags at any time, or ask us to switch the page off.

Your choices

• Every email has an unsubscribe link. Unsubscribing takes effect right away.
• You can ask to see, correct or delete the information we hold about you by emailing privacy@bentleypuddles.com. We'll reply within 30 days.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll email the list.