Privacy
Privacy policy
Last updated: May 2026
At Sin Bozal Pet Supply we treat your data with the care it deserves. This document explains what data we collect, what for and what rights you have — no small print, no endless paragraphs.
Data controller
Site owner: Sin Bozal (sin-bozal.com)
Registered company: ServiPlusUltra Solutions S.L.
Spanish tax ID (CIF): B-26892760
Address: Carrer d'Aribau 168, 1º 1ª, 08036 Barcelona, España
Contact email: info@sin-bozal.com
Data we collect
Account data: email, name, password (stored with Argon2id, never in plain text).
Delivery data: postal address, phone. Encrypted at rest with AES-256-GCM.
Payment data: we NEVER store cards. Stripe handles the PCI-DSS side.
Behaviour data: pages visited, products viewed. Anonymised analytics.
Your dog's profile: breed, weight, measurements. Only if you create one yourself.
What we use them for
Processing and shipping your orders.
Tailoring recommendations to your dog's breed and build.
Transactional messages (order confirmation, dispatch, returns).
Marketing — only if you give explicit consent.
Legal compliance (invoicing, warranty, tax).
Legal bases (GDPR)
Performance of a contract: to process orders.
Consent: marketing, non-essential cookies.
Legal obligation: invoicing, tax records.
Legitimate interest: fraud prevention, improving the service.
Retention
Account data: while your account is active, plus 6 years after you close it, to meet our tax obligations. Orders: 6 years (legal). Marketing: until you withdraw your consent. Security logs: 12 months.
Your rights
Access, rectification, erasure (right to be forgotten), objection, portability and restriction. Exercise them by writing to info@sin-bozal.com — we answer within 30 days at the latest.
Sharing with third parties
Stripe: payment processing.
SEUR: delivery.
Resend: transactional emails.
UploadThing: image storage.
All of them comply with the GDPR and we sign data processing agreements with them. We do not sell your data to anyone.
Security
HTTPS is required on every connection, passwords use Argon2id, 2FA is optional, sensitive data is encrypted at rest, and admin access is audited continuously.
Cookies
Read our dedicated cookie policy at /en/cookies for the detail.