Privacy

What we collect, why we collect it, and who else sees it. Written from what the site actually does rather than from a template.

This page covers Nooki Pets, the shop you are reading. It was last checked against the site's own code on 1 September 2026, and it describes what happens today — not what we might do later.

What we collect, and when

Very little until you do something. Browsing the shop is anonymous: no account, and on a first visit no cookies are set. We do count visits with Umami, a cookie-free analytics tool we host ourselves: which pages are read, what goes into a basket, when a checkout starts, an order's number and total, the site or campaign link that sent you, your browser, operating system, device type, screen size and language, and the country and city your connection comes from. It keeps no IP address and cannot follow you to other websites. It can tell that visits in the same calendar month came from the same browser and connection; when the month changes it starts again, and cannot link the two.

• When you buy: your name, delivery address, email address and phone number. We need all of it to send you a parcel and tell you it is coming.
• When you create an account: your email address, your name if you give one, and a password we never see in readable form.
• When you message us on live chat: your name, your email address, what you wrote, and which page you were on. If you had a basket, its total is attached so we can answer without asking you to describe it.
• When you apply to the affiliate programme: what you type into that form.
• When you sign up for the newsletter: your email address, which of our forms you used, and the date. Nothing else — not your name, not your IP address.

We never see your card number. It goes straight from your browser to Stripe, who take the payment. What comes back to us is whether it worked, the last four digits, and the card type.

Cookies

Four, and every one of them exists to make something you asked for work. There is no advertising cookie and no analytics cookie on this site, so there is nothing here to opt out of:

• Your basket: remembers what you put in it, so it is still there when you come back.
• Your sign-in: keeps you signed in between pages. Set only if you have an account and use it.
• Signing up: holds your place for a moment during registration, then goes.
• Your region: remembers the country and currency you chose, so you are not asked twice.

Clearing them empties your basket and signs you out. Nothing else breaks, and nothing follows you to another website.

Who else sees your information

Only companies that do a specific job for us, and only the part they need for it. None of them may use your details for their own purposes:

• Stripe takes the payment. They receive your card details directly and your billing address.
• Resend sends our emails — order confirmations, password resets. They receive your email address and what the message says.
• Railway and Supabase host the shop and its database. Your order lives there.
• Railway also hosts our copy of Umami, the visit counter above. It is ours, not a shared service, so the numbers go to nobody else.
• Our own admin system holds live chat conversations and affiliate applications, so the person answering can see what you wrote.

We do not sell your information, and we do not share it with advertisers. If that ever changes, this page changes first.

Where it is stored

The shop's database and our visit counts are in the United States, and our admin system is in Japan. Both are run by companies operating under standard contractual protections. If you are ordering from the UK or the EU, that means your details leave your country — which is normal for online shopping, and worth saying plainly rather than burying.

How long we keep it

• Orders: kept for as long as tax and consumer law require, which in Australia is five years.
• Accounts: kept until you ask us to close yours.
• Live chat conversations: kept so we can pick up where we left off if you write again.
• Baskets that were never ordered: cleared as they expire.
• Newsletter signups: kept until you unsubscribe, then kept as a record that you did, so we do not add you back by mistake.
• Visit counts: kept for now, because we have not yet set a date for clearing them. When we do, this page will say so.

What you can ask us to do

Email us and we will do it. You do not need to give a reason, and it costs nothing:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete it, except the parts we are legally required to keep — an order we have to hold for tax purposes, for instance.
• Send you a copy in a form you can take elsewhere.

If you are in the UK or the EU you can also complain to your national data protection authority, and in Australia to the Office of the Australian Information Commissioner. We would rather you told us first, but the route exists either way.

Common questions