Privacy Policy

Effective Date: December 10, 2025
Last Updated: December 10, 2025

1. Introduction & Scope

This Privacy Policy (“Policy”) outlines how Domyso (“Company,” “we,” “us,” or “our”) collects, uses, maintains, and discloses personal data when you visit our website at https://domyso.com (“Website”), purchase pet food, pet toys, and other pet products (“Products”), and engage in transactions with us.

Domyso is a pet supplies retailer specializing in premium pet food, nutritional supplements, toys, and accessories for dogs, cats, and other companion animals. We are committed to protecting your privacy and ensuring transparency about our data practices.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: First name, last name, email address, phone number, password (hashed and encrypted), username, account preferences
• Pet Information: Pet name, species, breed, age, weight, dietary preferences, allergies, health conditions, vaccination records (optional)
• Billing & Shipping Address: Street address, city, state/province, ZIP code, country/region, apartment/unit number
• Payment Information: Payment method type and partial card information (we do not store complete credit card details; PayPal handles encryption)
• Order Information: Products purchased, order amount, dates, transaction IDs, order notes, delivery confirmations
• Communication: Messages through contact forms, support tickets, email correspondence, pet product inquiries, chat logs
• Customer Preferences: Wishlists and saved items, product preferences, newsletter subscriptions, marketing preferences
• User-Generated Content: Pet photos (for testimonials/reviews), unboxing videos, product reviews, pet health documentation

2.2 Information Collected Automatically

• Device & Browser Information: Device type, operating system, browser type and version, user agent information, screen resolution
• Access Information: IP address, access times, referring website URLs, pages viewed, exit pages, navigation paths
• Cookies & Tracking Technologies: Session IDs, preference cookies, shopping cart cookies, analytics cookies, tracking pixels
• Analytics Data: Pages viewed, product pages visited, time spent, search queries, conversion events, heat maps
• Location Data: Approximate geographic location derived from IP address, country, city, region (for delivery availability)

2.3 Information from Third Parties

• Payment Processors: PayPal (payment confirmation, transaction IDs, order verification)
• Analytics Platforms: Google Analytics (website usage data, visitor insights)
• Marketing Services: Meta Pixel (conversion data, audience information)
• Shipping Partners: Logistics providers (delivery status, tracking information)
• Hosting Provider: WordPress/Automattic (account data, transaction records, user activity)

3. How We Use Your Information

We use your information for:

• Order Processing & Fulfillment: Processing purchases, verifying payment, managing shipping, issuing confirmations
• Pet Recommendations: Recommending pet food based on pet type, age, breed, and health conditions
• Customer Service: Responding to inquiries, providing support, sending order updates
• Account Management: Creating and maintaining customer accounts, managing pet profiles
• Marketing Communications: Sending promotional emails, newsletters, product recommendations (with consent)
• Website Improvement: Analyzing user behavior, improving functionality, optimizing experience
• Security & Fraud Prevention: Detecting fraudulent transactions, protecting against unauthorized access
• Legal Compliance: Complying with applicable laws, tax reporting, responding to legal requests
• Business Analytics: Understanding sales trends, customer preferences, inventory management

4. Sharing with Third Parties

We do not sell your personal data. We share information with:

• Payment Processors: PayPal (for payment processing)
• Shipping Partners: Logistics carriers and fulfillment centers (name, address, phone, order details)
• Hosting & Platform Providers: WordPress.com, WooCommerce, Automattic
• Analytics Services: Google Analytics 4, Meta Pixel (with GDPR/CCPA compliance)
• Marketing Partners: Email marketing platforms (newsletter subscribers only)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In case of merger, acquisition, or asset sale

We do not share aggregated or de-identified data with third parties without consent.

5. Cookies & Tracking Technologies

Types of Cookies We Use:

• Strictly Necessary Cookies: Shopping cart, authentication, payment processing (always active, no consent required)
• Preference Cookies: Language, layout, pet type preferences (requires consent)
• Analytics Cookies: Google Analytics for usage measurement (requires consent)
• Marketing Cookies: Meta Pixel, Google Ads for remarketing (requires consent)

Cookie Management:

You can control cookies through:

• Our cookie consent banner on the website
• Your browser settings
• Withdrawing consent anytime at the cookie preferences page

Disabling cookies may limit certain website functionality.

Third-Party Tracking Services:

6. Payment & Shipping Partners

Payment Processing:

• PayPal Integration: Secure payment gateway for pet product purchases
• Encryption: All transactions use TLS 1.3 (minimum) encryption
• PCI DSS Compliance: Level 1 compliance for payment handling
• Data Retention: Payment confirmations retained for 7 years (tax requirement)

Shipping Information:

• We share name, address, phone, and order details with shipping carriers
• Tracking information is provided via email
• International shipments may involve customs brokers
• Shipping partners are contractually bound to protect your information

7. Advertising & Remarketing

• Facebook/Meta Pixel Remarketing: We track pet owners who visited our website to display remarketing ads
• Google Ads Remarketing: Google Ads tracks visits to display ads across the Display Network
• Email Remarketing: Abandoned cart and product recommendation emails may be sent
• Social Media Platforms: Facebook, Instagram, Pinterest, TikTok for pet product promotion

Opt-Out Options:

• Email Marketing: Click unsubscribe in any promotional email
• Behavioral Advertising: Adjust Facebook ad preferences or Google Ad Settings
• Contact us at support@domyso.com

8. Data Retention

• Account Information: For the lifetime of your account plus 1-2 years after closure
• Pet Profiles & Health Information: For as long as you maintain your account
• Transaction Records: Minimum 7 years (tax requirement)
• Payment Information: Only during transaction processing (30-90 days); card data never stored
• Marketing Communications: Until you unsubscribe
• Cookies & Tracking Data: Typically 6-24 months depending on cookie type
• Pet Reviews & Testimonials: Until you request removal

9. GDPR/CCPA User Rights

GDPR Rights (EU/EEA Residents):

• Right of Access: Request copies of all personal data we hold
• Right to Rectification: Correct inaccurate pet information
• Right to Erasure: Request deletion of personal data (with exceptions)
• Right to Restrict Processing: Limit how we use your pet information
• Right to Data Portability: Receive data in a structured, machine-readable format
• Right to Object: Object to processing for marketing purposes
• Right to Withdraw Consent: Retract consent for pet health data processing

CCPA/CPRA Rights (California Residents):

• Right to Know: Request what personal information we collect
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate pet information
• Right to Opt-Out: Opt-out of sale or sharing of personal information
• Right to Limit Use: Limit use of sensitive information
• Right to Non-Discrimination: We will not discriminate for exercising your rights

Exercising Your Rights:

Response Timeline:

• GDPR: 30 days (may extend 60 days for complex requests)
• CCPA/CPRA: 45 days (may extend 45 additional days for verification)

10. Data Security

Security Measures:

• Encryption: TLS 1.3 (minimum) for all data in transit; AES-256 encryption for data at rest
• Access Controls: Role-based access control for employees; multi-factor authentication for admin accounts
• Network Security: Web Application Firewall, DDoS protection, regular penetration testing
• Backups: Encrypted, redundant backups with regular testing
• Employee Training: Annual data protection and security training for all staff
• Vendor Management: Strict Data Processing Agreements with all third-party processors

Data Breach Notification:

If a breach occurs, we will:

1. Detect and assess the breach scope
2. Contain the breach within 24 hours
3. Notify authorities: GDPR (72 hours), CCPA (without unreasonable delay)
4. Notify affected individuals within 30-90 days with clear, plain-language notification

Security Limitations:

While we implement industry-standard protections, no security system is completely impenetrable. We cannot guarantee absolute security of your data.

11. Children’s Privacy

• Age Restrictions: Our Website is not intended for children under 13 years
• No Intentional Collection: We do not knowingly collect information from children under 13
• Parental Consent: If a child’s information is collected, we require verifiable parental consent
• Teen Users (13-18): Enhanced privacy protections applied; limited data collection
• Reporting: If you suspect illegal collection from children, contact us immediately at support@domyso.com

12. International Data Transfers

• Data Location: Domyso is based in the United States (Florida); personal data is stored and processed in the US
• Compliance: International transfers comply with GDPR through Standard Contractual Clauses (SCCs)
• Consent: By using our Website, you consent to transfer of personal data to the United States
• Your Rights: You can withdraw consent with service limitations; you can request data deletion instead of transfer
• Your Recourse: You can lodge a complaint with your Data Protection Authority

13. Contact Information

Privacy Inquiries:

Company Information:

• Legal Entity: Domyso
• Business Type: Pet Products E-Commerce & Retail
• Address: 3057 U K Cir Apt 2848, Winter Park, FL 32792, USA
• Business Email: support@domyso.com
• Website: https://domyso.com
• Working Hours: 8 AM – 5 PM (EST), Monday – Saturday

What We Sell:

• Premium pet food and nutritional supplements
• Toys and enrichment products for dogs, cats, and other pets
• Pet accessories and care products

14. Compliance & Certifications

• GDPR compliant (Standard Contractual Clauses)
• CCPA/CPRA compliant
• Data Breach Notification procedures in place
• Privacy policy reviewed and updated regularly
• Annual third-party security audits
• Privacy by design implemented in new services

15. Policy Updates

• Material Changes: We will notify you via email and display prominent notices on our Website
• Timing: Material changes typically have 30 days notice before taking effect
• Your Acceptance: Continued use of Website after updates constitutes acceptance of new policy
• Responsibility: You are responsible for reviewing updates periodically

16. Definitions

• Personal Data: Any information that identifies you or could identify you
• Pet Health Information: Medical records, dietary information, wellness data about your pets
• Sensitive Data: Information about health (including pet health), location, biometric data
• Cookie: Small text file stored on your device to remember preferences and track activity
• Encryption: Mathematical encoding that makes data unreadable without the proper key
• GDPR: General Data Protection Regulation (EU data protection law)
• CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act

© 2025 Domyso. All rights reserved.