How We Define “Personal Information”
“Personal information” means any data that can be used to identify you directly or indirectly, including but not limited to:
- Identifiers: name, email address, phone number, shipping and billing addresses, and account login details.
- Transactional data: order history, product preferences, payment method (card/M Pesa/other payment processor), and delivery notes.
- Device and log data: IP address, browser type, operating system, device identifiers, pages visited, click streams, and referral source.
- Pet related information: pet names, breed, age, size, and any special notes you voluntarily share for product fit or styling advice.
We distinguish this from “publicly available information” shared by you on social media or in public reviews, which may be used for marketing or social proof in accordance with your visible consent.
What Information We Collect and Why
Directly from You
- Account creation and checkout: When you register, place an order, or book a concierge service, we collect your name, email, phone number, shipping and billing addresses, and payment details.
- Newsletters and marketing communications: When you subscribe to updates or offers, we store your contact details and preferences.
- Support and concierge interactions: When you contact us via email, chat, or forms, we retain your messages, order references, and any attachments to resolve your request.
- Surveys and feedback: When you respond to optional surveys or product reviews, we collect opinions, preferences, and any images you upload.
Automatically Through Technology
- Cookies and tracking: We use strictly necessary and performance cookies to keep your session secure and to improve site speed and navigation. We may also use limited analytics (e.g., Google Analytics–style tools) to understand traffic patterns, but we anonymize or aggregate data where possible.
- Logs and device data: Server logs, IP addresses, browser fingerprinting, and timestamps help us detect fraud, debug errors, and maintain uptime. We do not use invasive or covert tracking beyond what is needed for basic security and optimization.
We do not require or solicit sensitive information such as race, ethnicity, health records, or government ID numbers unless required by law or explicitly relevant to a specific service (e.g., veterinary adjacent partners, if later introduced); even then, we handle such data under separate, stricter frameworks.
How We Use Your Information
Your data is used to process orders, deliver products, personalize your experience, communicate updates, improve our platform, and comply with legal obligations.
"Your data exists to serve your experience—not to be traded."
To communicate with you about your orders, we may send transactional emails regarding order confirmations,shipping updates, and customer service responses. For marketing communications, we will only send information you have opted in to receive.
To improve our services, we may analyze aggregated and anonymized data to understand user behavior, optimize our website, and develop new products. We do not use your personal information for profiling or automated decision-making that would significantly affect you without explicit consent.
To comply with legal obligations, we may use your information to respond to lawful requests by public authorities, enforce our terms of service, or protect the rights, property, or safety of Fauna Cove, our users, or the public.
We do not sell your personal data to third parties as a revenue stream. Any data sharing with partners is limited to what is necessary to perform the service, and such partners are bound by contractual data protection obligations.
Who We Share Information With
We may share your information with the following cateegories of thrd party recipients:
- Payment processors: Card or mobile money payment gateways (e.g., Stripe, Flutterwave, Safaricom–integrated M Pesa partners) receive only the data required to process your transaction. We do not store full card numbers or CVC codes on our own servers.
- Logistics and delivery partners: Courier services and last mile carriers receive your name, shipping address, phone number, and order ID to deliver your package.
- Hosting and infrastructure providers: Cloud hosting, content delivery networks, and database providers may store or transmit your data in encrypted form, primarily in data centers compliant with international standards.
- Marketing and analytics tools: Email service providers and analytics platforms may receive anonymized or pseudonymized data, with identifiers stripped where possible.
- Legal and regulatory authorities: When required by law, court order, or government investigation, we may disclose information to protect public safety, intellectual property, or contractual rights
All such partners are selected under a data protection by design lens and are required to safeguard your information with at least equivalent technical and organizational measures.
How We Protect Your Data
Fauna Cove treats data security as a core pillar of institutional transparency.
- Encryption: We use industry-standard encryption (e.g., TLS for data in transit and AES-256 for data at rest) to protect your information from unauthorized access.
- Payment data handling: o Financial details are processed through PCI DSS compliant or similarly certified payment gateways; we retain only last four digits of cards and transaction IDs for reconciliation, not full PANs.
- Access controls: We implement strict access controls and role-based permissions to limit who within our organization can access your data, and we regularly review these permissions.
- Regular audits and monitoring: We conduct periodic security assessments, vulnerability scans, and monitor our systems for suspicious activity to detect and respond to potential threats.
In the event of a data breach that risks your rights, we commit to notifying affected individuals and relevant authorities within the timelines required by applicable law (e.g., Kenya’s Data Protection Act or other jurisdictions where we operate).
Your Rights and Sovereignty Over Your Data
Fauna Cove respects your control over your digital footprint. Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal information we hold about you
- Rectification: Correct inaccurate or incomplete data (e.g., wrong address, outdated phone number).
- Erasure (“Right to be forgotten”): Ask us to delete your account and associated data, subject to legal retention obligations (e.g., tax records, dispute resolution).
- Portability: Receive your data in a structured, machine readable format to transfer it to another service.
- Objection / restriction: Object to certain processing (e.g., marketing emails) or ask us to suspend processing while you contest accuracy.
- Withdraw consent: Revoke consent for marketing or non essential data processing at any time, without affecting the lawfulness of prior processing.
You can exercise these rights by contacting us at covefauna@gmail.com. We will respond within 30 days or as required by local law, and may ask you to verify your identity before acting.
Cookies and Tracking
Fauna Cove uses the following categories of cookies:
- Essential cookies: Enable core functions such as login, cart storage, and checkout. Disabling these may break the site.
- Performance and analytics cookies: Help us understand how users navigate the site, which pages are popular, and where friction occurs. These are typically anonymized or aggregated.
- Marketing and targeting cookies: Used only if you expressly opt in (e.g., via consent banners); they support personalized ads and retargeting campaigns.
You can manage or disable non essential cookies via your browser settings or our cookie consent mechanism. Note that disabling certain cookies may limit your access to personalized features or loyalty rewards.
Children’s Data and Age Restriction
Fauna Cove is designed for adult customers purchasing pet gear, apparel, and accessories. We do not knowingly collect personal information from individuals under the age of 16 (or 13 where stricter local law applies) without verifiable parental consent. If we become aware that a child has provided personal data without consent, we will promptly delete it and terminate any relevant account.
If you believe a child’s data has been collected inappropriately, please contact our Privacy Team immediately.
Cross-Border Data Transfers
Some of our service providers may store or process your data in countries outside your jurisdiction. When this occurs, we take steps to ensure an adequate level of protection, such as:
- Using standard contractual clauses or equivalent mechanisms recognized under applicable data protection laws.
- Selecting vendors that comply with international privacy certifications (e.g., ISO/IEC 27001, SOC type frameworks where available).
By using Fauna Cove, you acknowledge that your data may be transferred in this manner, subject to these safeguards.
Policy Updates and Version Control
Fauna Cove may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will:
- Post the updated policy on our website with a new effective date.
- Notify existing customers of material changes via email or in-account notifications where required by law.
If you continue to use Fauna Cove after an update becomes effective, you agree to the revised terms. You may review prior versions upon request by contacting our Privacy Team.
Privacy Team
For questions, data requests, or concerns regarding your privacy, contact us.
covefauna@gmail.com