Privacy Policy

---

PRIVACY POLICY - BARKING ORDERS

Last updated: 10th January 2026
Who we are: Barking Orders
Contact: info@barkingorders.net · +357 97463634 · 18 Patch Crescent, Akrotiri, Cyprus 4640
 

We respect your privacy. This Policy explains what personal data we collect, how we use it, and your rights under applicable data protection laws, including the EU/UK GDPR.

This Policy applies when you:

• Visit our website or social pages
• Place an order (online, by phone, or in person)
• Create an account or subscribe to emails/SMS
• Use “Click & Collect” or Local Delivery
• Contact us for support, wholesale, or events
• Enter promotions, reviews, or surveys

• Identity & contact: name, email, phone, billing/delivery address
• Order details: products purchased, preferences, notes for delivery
• Account details: username, password (hashed), profile info
• Communications: messages, support requests, reviews, survey responses
• Marketing choices: opt‑in/opt‑out preferences
• Wholesale/partner info (if applicable): business name, VAT, role
• Event participation: RSVP details, dietary/allergen notes you choose to share

• Device & usage data: IP address, browser type, pages viewed, timestamps, referral URLs
• Cookies & similar tech: for essential site functions, analytics, preferences, and (if consented) marketing.

• Payment processors: payment status, last 4 digits/brand of card (we do not receive full card numbers)
• Delivery partners: delivery confirmations/attempts
• Social/advertising platforms: campaign performance, anonymized audience metrics
• Fraud prevention & security tools: signals to detect abusive or fraudulent activity

We process personal data only when we have a valid legal basis:

We use:

• Essential cookies (site functionality, cart, checkout)
• Analytics cookies (site performance, aggregated statistics)
• Preference cookies (remember choices)
• Marketing cookies (only if consented)

Manage cookies via our Cookie Banner/Settings and your browser. See our Cookie Notice for details ([link]).

Payments are processed securely bysumup, revolut. We do not store full card numbers on our servers. The processor acts as an independent controller or processor (see their privacy notice).

We share data only as needed with:

• Service providers (processors): website host, ecommerce platform, email/SMS tools, analytics, delivery couriers, IT/security
• Payment processors: to take payments and prevent fraud
• Professional advisors: accountants, legal counsel
• Authorities: where legally required (e.g., tax, safety recalls, court orders)
• Business transfers: if we sell or reorganize our business; your data may transfer under the same protections

We do not sell your personal data.

Where data is transferred outside the EEA/UK, we use lawful safeguards (e.g., EU/UK Standard Contractual Clauses, adequacy decisions). You can request details of applicable safeguards.

We keep data only as long as necessary for the purposes above, including:

• Orders & invoicing: usually 6–10 years to meet tax/accounting laws
• Customer accounts: while active, then deleted or anonymized after [X months] of inactivity
• Marketing: until you opt out or after [X years] without engagement
• Support/complaints: for [X years] after resolution
• CCTV/event photos (if used): retained for [X days/months] unless required longer for incidents

We will securely delete or anonymize data when retention ends.

Subject to legal limits, you can:

• Access your data and get a copy
• Correct inaccurate or incomplete data
• Delete data (right to erasure)
• Restrict or object to certain processing (including direct marketing)
• Data portability (receive your data in a usable format)
• Withdraw consent for marketing/cookies at any time

To exercise rights, contact [privacy email]. We may need to verify your identity.
If you’re not satisfied, you can complain to your local authority (e.g., Cyprus Commissioner for Personal Data Protection) or your national data protection authority.

We use appropriate technical and organizational measures such as encryption in transit, access controls, secure passwords, data minimization, staff training, and vendor due diligence. No system is perfectly secure; we will notify authorities and, where required, affected individuals of data breaches in line with law.

Our services are not directed to children under 16 (or the age set by your country’s law). We do not knowingly collect data from children. If you believe a child has provided data, contact us to remove it.

• For Local Delivery, we use your name, address, phone, and delivery notes to schedule and complete deliveries and to contact you about timing or access.
• If you request safe‑place delivery, you acknowledge the associated risks; we may record delivery photos/time stamps to confirm completion.
• For Click & Collect, we may verify identity/order number at pickup.

• We send marketing only with your consent where required (e.g., email/SMS sign‑ups).
• You can opt out via unsubscribe links, STOP for SMS, or by contacting us.
• We may still send service messages (order confirmations, delivery updates, policy changes).

If you tag us or submit reviews/photos, you grant us permission to display them (with attribution where feasible). Do not post others’ personal data without consent. You can request removal at any time.

Our website may link to external sites we do not control. Their privacy practices apply when you use them.

We may update this Policy from time to time. The “Last updated” date shows the latest version. Significant changes will be communicated via our website or email.

Questions, requests, or complaints about privacy?
Email: info@barkingorders.net
Address: 18 Patch Crescent, Akrotiri, Cyprus 4640
Phone: +357 97463634