PRIVACY POLICY
Last updated: March 7, 2026
1. WHO WE ARE
Cape & Whiskers (“we”, “our”, “us”) operates this website and acts as the data controller for the personal data described in this policy. Our website is pets.pipefin.com. If you have questions about how we handle your data, contact us at support@pets.pipefin.com.
2. DATA WE COLLECT
| Data Type | Details |
|---|---|
| Account info | Email address, name (if provided) |
| Order info | Shipping address, order history, purchase details |
| Pet photos | Images you upload to generate your AI pet portrait |
| Payment data | Processed by Stripe; we never see or store your card details |
| Usage data | Pages visited, IP address, browser type, device info |
| Marketing data | Ad interaction data via Meta Pixel (only with your consent) |
3. HOW WE USE YOUR DATA
| Purpose | Legal Basis (GDPR) |
|---|---|
| Fulfilling your order (AI generation, printing, shipping) | Contract performance (Art. 6(1)(b)) |
| Processing payment | Contract performance (Art. 6(1)(b)) |
| Generating your AI pet portrait from uploaded photos | Contract performance (Art. 6(1)(b)) |
| Sending order updates and transactional emails | Contract performance (Art. 6(1)(b)) |
| Fraud prevention (via Stripe) | Legitimate interest (Art. 6(1)(f)) |
| Advertising measurement (Meta Pixel) | Consent (Art. 6(1)(a)) |
4. PET PHOTOS & AI GENERATION
Photos you upload are used solely to generate your custom AI artwork. Specifically:
- Your photos are sent to our AI provider (Replicate) solely to generate your portrait
- We do not use your pet photos to train AI models
- We do not share your photos with third parties beyond what is necessary to fulfill your order
- Uploaded source images are retained for a limited period to allow order support and re-generation, then deleted
5. THIRD-PARTY SERVICE PROVIDERS
We share data with the following processors to operate our service:
- Stripe – Payment processing and fraud prevention. Stripe may collect device and behavioural data for fraud detection. Stripe Privacy Policy
- Prodigi – Print fulfillment and shipping. Receives your shipping address and order details. Prodigi Privacy Policy
- Replicate – AI image generation. Receives your uploaded pet photos to produce artwork. Replicate Privacy Policy
- Meta (Facebook) – Advertising measurement via Meta Pixel. Only activated with your consent. Meta Privacy Policy
- Resend – Transactional email delivery. Receives your email address for order notifications.
For users in the EU/UK: international transfers to US-based processors are made under Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.
6. YOUR RIGHTS
Under GDPR and applicable data protection laws, you have the right to:
- Access – Request a copy of the personal data we hold about you
- Rectification – Correct any inaccurate or incomplete data
- Erasure – Request deletion of your personal data (“right to be forgotten”)
- Restriction – Request that we limit processing of your data
- Portability – Receive your data in a portable, machine-readable format
- Objection – Object to processing based on legitimate interest
- Withdraw consent – Revoke marketing consent at any time via our cookie settings or by contacting us
To exercise any of these rights, email us at support@pets.pipefin.com. We will respond within 30 days.
7. DATA RETENTION
- Order and account data: Retained for up to 7 years for tax and accounting obligations
- Uploaded pet photos: Retained for a limited period after order completion to allow support and re-generation, then deleted
- Generated artwork: Retained as long as your account is active
- Marketing consent records: Retained as long as consent is valid, plus a reasonable buffer
8. COOKIES & TRACKING
We use cookies and similar technologies for site functionality and, with your consent, for advertising measurement. For full details, see our Cookie Policy.
EU/UK users: marketing cookies require your explicit opt-in consent. You can change your cookie preferences at any time using the cookie settings link in our website footer.
9. CALIFORNIA RESIDENTS (CCPA)
We do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA). California residents may contact us to request information about our data practices. You can also use the “Do Not Sell or Share My Personal Information” link in our footer at any time.
10. CHILDREN'S PRIVACY
Our service is not directed at children under 16 (EU/UK) or 13 (US). We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure cloud storage, and access controls. However, no method of transmission over the internet is 100% secure.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.
13. CONTACT & COMPLAINTS
For any privacy-related questions or to exercise your rights, email us at support@pets.pipefin.com.
EU/UK users have the right to lodge a complaint with their national data protection supervisory authority if they are unsatisfied with how we handle their data.