Privacy Policy
Welcome to the Privacy Policy of Wee Whiskers Pet Supplies (“Wee Whiskers”, “we”, “us”, or “our”).
This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with:
your use of Wee Whiskers Pet Supplies (the “Website”);
customer accounts;
Orders and purchases;
communications with us; and
related business activities.
Wee Whiskers Pet Supplies is a trading name of Tessa Donkersloot, a sole trader established in Scotland, United Kingdom.
We are committed to protecting your privacy and handling personal data in a lawful, fair, transparent, and secure manner.
Our processing of personal data is governed by applicable UK data protection laws, including:
the UK General Data Protection Regulation (“UK GDPR”);
the Data Protection Act 2018; and
the Privacy and Electronic Communications Regulations 2003 (“PECR”), where applicable.
This Privacy Policy applies to customers, Website visitors, account holders, and other individuals whose personal data we process in connection with our business.
For privacy-related questions, requests, or concerns, please contact:
Email: contact@weewhiskerspetsupplies.co.uk
1. Data Controller
For the purposes of applicable UK data protection laws, including the UK GDPR and the Data Protection Act 2018, the data controller responsible for your personal data is:
Wee Whiskers Pet Supplies
Tessa Donkersloot trading as Wee Whiskers Pet Supplies
Email: contact@weewhiskerspetsupplies.co.uk
Website: www.weewhiskerspetsupplies.co.uk
Trading Address: Office 2/3, 48 West George Street, Glasgow, G2 1BP, Scotland, United Kingdom
ICO Registration Number: ZC140273
Wee Whiskers Pet Supplies owns and operates the Website and is responsible for determining how and why personal data is processed in connection with the Website and our business activities.
2. Applicable Legal Framework
Our processing of personal data is governed by applicable UK data protection and privacy laws, including:
a. the UK General Data Protection Regulation (“UK GDPR”);
b. the Data Protection Act 2018; and
c. the Privacy and Electronic Communications Regulations 2003 (as amended) (“PECR”).
Where applicable, certain aspects of our business activities may also be subject to consumer protection laws, including the Consumer Rights Act 2015.
3. Who We Are
Wee Whiskers Pet Supplies is an independent online retailer of pet products operated by Tessa Donkersloot trading as Wee Whiskers Pet Supplies, a sole trader established in Scotland, United Kingdom.
We operate Wee Whiskers Pet Supplies and process personal data in connection with:
customer Orders and purchases;
customer accounts;
Website usage;
customer communications; and
related business activities.
Wee Whiskers Pet Supplies acts as a data controller in relation to personal data processed through the Website and our business operations.
Information about the lawful bases we rely upon when processing personal data is set out in Section 7 of this Privacy Policy.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Email: contact@weewhiskerspetsupplies.co.uk
4. Consent
Where required by applicable data protection laws, including the UK GDPR, we will request your consent before processing personal data for specific purposes, including:
non-essential cookies and similar technologies;
marketing communications; or
other activities requiring consent under applicable law.
Where processing is based on consent, you may withdraw your consent at any time by:
adjusting your cookie preferences;
unsubscribing from marketing communications; or
contacting us at contact@weewhiskerspetsupplies.co.uk.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Please note that we may also process personal data using other lawful bases permitted under applicable data protection laws, including where processing is necessary:
to perform a contract;
to comply with legal obligations; or
for legitimate business interests.
Further information regarding our lawful bases for processing is set out in Section 7 of this Privacy Policy.
5. What Personal Data We Collect
5.1 Customers and Account Holders
When you place an Order, create an account, contact us, or otherwise interact with the Website, we may collect and process the following categories of personal data:
Identity Data - Full name, username, title
Contact Data - Email address, billing address, delivery address, telephone number
Transaction Data - Order details, purchased products, payment status, delivery information
Account Data - Login credentials, account settings, saved preferences
Technical Data - IP address, browser type, device information, operating system, Website usage information
Communication Data - Emails, messages, customer support enquiries, reviews, feedback, and correspondence
Marketing and Preference Data - Marketing preferences, consent choices, cookie preferences, and communication preferences
5.2 Website Visitors
When you visit Wee Whiskers Pet Supplies, we may automatically collect certain technical and usage information, including:
Technical Data - IP address, browser type, device type, operating system, language settings
Usage Data - Pages viewed, navigation paths, time spent on pages, referring websites, interaction data
Cookie and Tracking Data - Information collected through cookies and similar technologies as described in our Cookie Policy
6. How We Collect Personal Data
We may collect personal data through a variety of methods, including:
a. Direct interactions — when you:
place an Order;
create a customer account;
contact us;
subscribe to marketing communications; or
otherwise provide information directly to us.
b. Website usage and automated technologies — including through:
cookies and similar technologies;
analytics tools;
server logs; and
Website interaction tracking, as further described in our Cookie Policy.
c. Communications with us — including emails, customer support enquiries, messages, feedback, reviews, or other correspondence.
d. Third-party service providers — including Website hosting providers, payment processors, delivery partners, analytics providers, and other services used to operate our business and Website.
e. Account and transaction activity — including information relating to Orders, payments, deliveries, returns, refunds, and customer account activity.
7. Why We Use Your Personal Data and Our Lawful Bases
Under the UK GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
performance of a contract;
compliance with legal obligations;
legitimate business interests; or
your consent where required.
7.1 Customers and Account Holders
Purpose - Lawful Basis - Details
Creating and managing customer accounts - Contract / Legitimate Interests - Necessary to provide account functionality and customer services.
Processing Orders and payments - Contract - Necessary to fulfil Orders, process payments, and provide Products and services.
Managing deliveries, returns, refunds, and customer support - Contract / Legitimate Interests - Necessary for customer service, dispute handling, and operational management.
Maintaining transaction and business records - Legal Obligation - Necessary to comply with tax, accounting, fraud prevention, and regulatory obligations.
Communicating about Orders or services - Contract / Legitimate Interests - Necessary to provide updates relating to Orders, deliveries, customer support, or account activity.
Sending marketing communications - Consent / Legitimate Interests - Used where permitted under PECR and applicable law. Users may opt out at any time.
Improving Website functionality and customer experience - Legitimate Interests - Necessary to analyze and improve our services, Website performance, and business operations.
Fraud prevention and Website security - Legitimate Interests / Legal Obligation - Necessary to protect the Website, customers, and business operations.
7.2 Website Visitors
Purpose - Lawful Basis - Details
Operating and securing the Website - Legitimate Interests - Necessary for Website functionality, security, and administration.
Analyzing Website usage and performance - Legitimate Interests / Consent - Depending on the analytics tools and cookie settings used. See our Cookie Policy for further information.
Managing cookie preferences - Legal Obligation / Consent - Necessary to comply with applicable cookie and privacy laws.
8. Automated Decision-Making and Profiling
We do not currently carry out solely automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
We may use limited automated processes for purposes such as:
Website functionality;
fraud prevention;
analytics;
security monitoring; or
marketing preferences,
but these activities do not involve solely automated decisions that significantly affect customers or users within the meaning of applicable data protection laws.
9. How Long We Keep Your Data (Data Retention)
We retain personal data only for as long as reasonably necessary to:
fulfil the purposes for which it was collected;
provide our services and customer support;
comply with legal, tax, accounting, and regulatory obligations; and
protect our legitimate business interests.
Retention periods may vary depending on the type of personal data involved and the purpose for which it was collected.
9.1 Retention Periods
Data Type - Typical Retention Period
Customer accounts and active user profiles - Up to 24 months from the last meaningful interaction or account activity
Order and transaction records - Up to 6 years from the date of purchase for tax, accounting, fraud prevention, and contractual record-keeping purposes
Marketing preferences and consent records - Until consent is withdrawn or the user unsubscribes or opts out
Technical and Website usage data - Retained for limited periods necessary for analytics, security, and Website administration
Website visitor analytics data - Retained in accordance with the settings and retention periods of the relevant analytics or cookie tools
Customer support enquiries and email correspondence - Typically up to 3 years from the last communication unless longer retention is necessary for legal, regulatory, fraud prevention, dispute resolution, or business continuity purposes
9.2 Secure Deletion and Anonymization
Once personal data is no longer required, we may:
securely delete it;
anonymise it; or
aggregate it for statistical, analytical, or business reporting purposes,
so that it can no longer be used to identify an individual.
10. Who We Share Your Data With
Wee Whiskers Pet Supplies does not sell, rent, or trade personal data to third parties.
We may share personal data where reasonably necessary to:
operate and manage the Website and business;
process Orders and payments;
provide customer support and delivery services;
comply with legal obligations; or
protect our legal rights and business interests.
Depending on the circumstances, third parties may act as either:
data processors acting on our behalf; or
independent data controllers responsible for their own processing activities.
10.1 Categories of Third Parties
Service Provider / Category - Purpose
Squarespace - Website hosting, ecommerce functionality, customer accounts, checkout services, and Website operations
Payment providers and payment processors - Secure payment processing, fraud prevention, and transaction management
Delivery and courier providers - Delivery and fulfilment of customer Orders
IT, analytics, and Website support providers - Website administration, analytics, security, maintenance, and technical support
Email and communication providers - Customer communications, customer support, and business correspondence
Professional advisers and legal authorities - Legal compliance, dispute resolution, fraud prevention, regulatory obligations, and protection of legal rights
10.2 International Transfers
Some third-party providers may process or transfer personal data outside the United Kingdom.
Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection laws, including the use of:
adequacy regulations;
approved international data transfer mechanisms; or
standard contractual clauses where appropriate.
10.3 Third-Party Data Protection Requirements
Where third-party providers process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual, confidentiality, and security measures are in place consistent with applicable data protection laws.
11. International Data Transfers
Some third-party service providers used by Wee Whiskers Pet Supplies may process or store personal data outside the United Kingdom.
Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection laws.
Such safeguards may include:
a. adequacy regulations recognized by the UK Government;
b. approved international data transfer agreements or standard contractual clauses; or
c. other lawful transfer mechanisms permitted under applicable data protection laws.
International transfers may occur in connection with services including:
Website hosting;
payment processing;
cloud storage;
analytics tools; and
email or communication services.
We take reasonable steps to ensure that third-party providers handling personal data maintain appropriate privacy, confidentiality, and security standards.
Further information regarding third-party providers and cookies is available in our Cookie Policy.
12. Your Rights Under UK GDPR
Under applicable UK data protection laws, including the UK GDPR and the Data Protection Act 2018, you have certain rights relating to your personal data.
These rights may include:
Right of Access - You may request confirmation of whether we process your personal data and request a copy of the personal data we hold about you (commonly known as a Subject Access Request).
Right to Rectification - You may request correction of inaccurate or incomplete personal data.
Right to Erasure - You may request deletion of personal data where there is no lawful reason requiring continued processing. This is sometimes known as the “right to be forgotten”.
Right to Restrict Processing - You may request that we temporarily restrict processing of your personal data in certain circumstances.
Right to Data Portability - You may request that certain personal data be provided in a structured, commonly used, machine-readable format.
Right to Object - You may object to processing based on legitimate interests or direct marketing activities.
Right to Withdraw Consent - Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.
Right to Lodge a Complaint - You may lodge a complaint with the UK Information Commissioner’s Office (“ICO”) if you believe your personal data has been handled unlawfully.
Exercising Your Rights
To exercise any of your data protection rights, please contact:
We will normally respond to valid requests within one month.
Where permitted by applicable law, we may:
request proof of identity;
extend the response period for complex requests; or
refuse requests that are manifestly unfounded, excessive, or repetitive.
Further information about your rights is available from the Information Commissioner’s Office (ICO).
13. Data Security
We take the security of personal data seriously and implement reasonable technical and organizational measures designed to protect personal data against:
unauthorized access;
accidental loss;
misuse;
alteration;
disclosure; or
destruction.
Our security measures may include:
a. Access controls — personal data is accessible only where reasonably necessary for business operations and administration.
b. Secure Website technologies — the Website uses secure technologies and encrypted connections designed to help protect data transmitted through the Website.
c. Password protection and account security — accounts and services used to process personal data are protected using strong passwords and security measures such as multi-factor authentication where available.
d. Secure forms and communications — forms, checkout systems, and customer communications are processed using reputable service providers and secure transmission methods.
e. Data minimization — we aim to collect and retain only the personal data reasonably necessary for the purposes described in this Privacy Policy.
While we take reasonable steps to protect personal data, no method of electronic transmission, storage, or security system can be guaranteed to be completely secure.
Personal Data Breaches
Where required under applicable data protection laws, we will notify the UK Information Commissioner’s Office (“ICO”) and affected individuals of qualifying personal data breaches within the timeframes required by law.
14. Children’s Data
The Website and our services are not intended for children under the age of 18 without the involvement or consent of a parent or legal guardian.
We do not knowingly collect personal data from children in violation of applicable data protection laws.
If we become aware that personal data relating to a child has been collected unlawfully or without appropriate consent where required, we will take reasonable steps to:
delete the data;
anonymize the data; or
otherwise restrict processing as appropriate.
Parents or guardians who believe that a child has provided personal data through the Website should contact:
We may request reasonable verification before processing such requests.
15. Links to Third-Party Websites and Services
The Website may contain links to third-party websites, services, embedded content, or external platforms.
Wee Whiskers Pet Supplies does not control and is not responsible for:
the privacy practices;
cookie practices;
content; or
security
of third-party websites or services.
Users should review the privacy policies and terms of any external websites or services they choose to access before submitting personal data or interacting with those services.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our business practices;
changes to the Website or technologies used;
legal or regulatory developments; or
other operational requirements.
The most recent version of this Privacy Policy will always be available on this page together with the “Last Updated” date.
Where we make material changes affecting how personal data is processed or your rights under applicable data protection laws, we may provide additional notice where appropriate, including by:
email;
Website notification; or
other reasonable communication methods.
We encourage users to review this Privacy Policy periodically to remain informed about how personal data is collected, used, and protected.
17. Contact Us
If you have any questions, concerns, requests, or complaints relating to this Privacy Policy or the processing of your personal data, please contact:
Wee Whiskers Pet Supplies
Tessa Donkersloot trading as Wee Whiskers Pet Supplies
Website: www.weewhiskerspetsupplies.co.uk
Trading Address: Office 2/3, 48 West George Street, Glasgow, G2 1BP, Scotland, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your personal data has been processed unlawfully.
Last updated 14/06/2026