Privacy Policy

Information We Collect

Depending on how you use K9-Rx, we may collect information you provide such as:

Name
Email address
Telephone number
Shipping and billing address
Account information
Order and purchase history
Autoship preferences
Marketing email preferences and consent records
Communications you send to K9-Rx

When you sign up for, confirm or unsubscribe from K9-Rx marketing emails, we keep a record of your email address, the wording you agreed to, where you signed up (at checkout or through our newsletter form), the date and time, and the IP address and browser information associated with that action.

Our website may also receive technical information associated with your visit, such as IP address, browser/device information and website activity necessary for operation, security and performance.

If you choose to allow advertising measurement (see "Advertising Measurement and Meta"), we also collect the identifiers and activity described in that section.

Payment Information

Payment transactions are processed by our payment provider. K9-Rx does not need to store your full payment-card number in its own application database in order to process your order.

Our systems may retain payment-related references or tokens supplied by the payment processor where necessary to manage orders, refunds and Autoship.

How We Use Information

We may use personal information to:

Process and fulfill orders
Arrange shipping and delivery
Operate and manage Autoship
Maintain customer accounts
Send transactional communications about orders, payments, shipments and subscriptions
Send marketing emails about K9-Rx news, tips and special offers, only if you have opted in
Respond to customer-service requests
Prevent fraud and protect the security of the website
Maintain and improve our services
Comply with legal obligations

Email Communications

Transactional emails. We send emails needed to provide our services, such as order confirmations, secure sign-in links and notices about your Autoship (including changes, renewal reminders and renewal results). These are not marketing emails and are sent whether or not you subscribe to marketing emails.

Consent-verification emails. When you sign up through our newsletter form, we send a single email asking you to confirm that you requested the signup. Its only purpose is to verify your consent; it is not a marketing email, and if you do not confirm, you will not be subscribed.

Marketing emails are optional. We send marketing emails only to people who have opted in, in either of two ways:

At checkout, by ticking the optional box (it is never pre-ticked) that says "Email me K9-Rx news, tips and special offers." Your consent is recorded when you place your order.
Through our newsletter signup form. Newsletter signups use double opt-in: we email you a confirmation link, and you are subscribed only after you confirm. Unused confirmation links expire after 7 days.

Leaving the checkout box unticked, or not confirming a newsletter signup, does not affect your order or account. Creating an account or placing an order does not, by itself, subscribe you to marketing emails.

You can withdraw your consent to marketing emails at any time by using the unsubscribe link in any K9-Rx marketing email, or by contacting [email protected].

Unsubscribing stops marketing emails. You will still receive transactional emails about your orders, account and Autoship. We keep a record of your unsubscribe so that we can honor it, and you will be subscribed again only if you opt in again.

Service Providers

We may provide information to service providers when necessary to operate K9-Rx, including providers involved in payment processing, shipping, hosting, email and website infrastructure.

These providers receive information as necessary to perform services on our behalf or as otherwise permitted by law.

We use Resend to deliver K9-Rx emails. Resend receives the recipient's email address and the content of each message in order to deliver it.

Customer Accounts and Order History

K9-Rx previously operated its online store on a different platform. When we moved to our current website, we transferred existing customer account information (such as name, email address, telephone number and addresses) and order history, so that we can continue to provide customer service, manage existing Autoship orders and keep accurate order records.

Passwords and full payment-card numbers were not transferred. Where an existing Autoship needed it, the payment processor's reference for the saved payment method was retained so the Autoship could continue. Marketing email preferences were not carried over: former customers receive K9-Rx marketing emails only if they opt in on the current website.

Signing in to your account uses a secure one-time link sent to your email address rather than a password.

Advertising Measurement and Meta

K9-Rx advertises on Facebook and Instagram, which are operated by Meta Platforms, Inc. ("Meta"). If you allow it, we use the Meta Pixel in your browser and Meta's Conversions API from our servers to measure whether our ads lead to visits and purchases, to improve our ads, and to show our ads to people who may be interested. This is optional. It is off unless you choose "Allow" in the advertising choices banner or on the Your Privacy Choices page, and nothing is sent to Meta before that.

What is shared with Meta, only if you allow it:

Website activity: pages and products you view, items you add to your cart, when you start checkout, and your completed purchase (order value, currency, items and quantities).
Identifiers set by Meta's technology: the Meta cookies _fbp and _fbc (_fbc is set only if you arrive from a Meta ad), plus your IP address and browser (user agent) details.
For a completed purchase, contact details from your order, sent to Meta only after being cryptographically hashed (converted into a scrambled code): email address, telephone number, first and last name, city, state, ZIP code and country, and an internal customer ID. Hashed identifiers can still be personal information, because Meta can create the same hash from the details it holds about its own users and use it to match them to an account.

We do not send payment-card numbers, passwords, health information about you or your dog, or the text of anything you type into the site.

Meta receives this information as an independent advertising partner and uses it under its own terms and privacy policy (https://www.facebook.com/privacy/policy/), including to match it to Meta accounts and for its own purposes. We do not control how Meta uses it. Under California and some other state laws, sharing information with an advertising partner for this kind of advertising may be considered "sharing" for cross-context behavioral advertising or targeted advertising, which is why we ask for your permission first.

Your choices. You can allow or decline advertising measurement, and change your mind at any time, using the "Your Privacy Choices" link at the bottom of every page. If you decline or withdraw: we stop sending browser activity to Meta, we remove the Meta cookies (_fbp and _fbc) from your browser, and we do not send your purchase to Meta. If you withdraw after placing an order that has not yet been reported, we do not report it. Information already received by Meta before you withdrew is governed by Meta's policies; you can also manage ad settings in your Facebook and Instagram accounts.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of advertising measurement and sharing: we will not enable it, even if you previously allowed it on this browser. The GPC signal applies to the browser or device that sends it.

Your choice is remembered using our session cookie, which lasts up to 14 days from when it is first set and is not extended when you return, or until you clear your cookies. After that, or if the advertising terms in this policy change, we ask again. Each choice is also recorded, without your name, email address or IP address, so that we can show when and how choices were made and honor them.

K9-Rx does not sell personal information for money.

We do not share personal information for cross-context behavioral advertising or targeted advertising unless you allow advertising measurement as described in "Advertising Measurement and Meta." We do not knowingly sell or share the personal information of anyone under 16.

You can opt out, or withdraw your permission, at any time through the "Your Privacy Choices" link at the bottom of every page, or by sending a Global Privacy Control signal. You may also contact [email protected].

Cookies and Similar Technologies

K9-Rx uses cookies and similar technologies necessary for website functionality, account sessions, shopping-cart operation, security and related website functions. These are set whether or not you allow advertising measurement. They include our session cookie, which also stores your advertising choice for up to 14 days.

Advertising cookies. Only if you allow advertising measurement, Meta's technology may set the cookies _fbp (identifies your browser for Meta measurement) and _fbc (records that you arrived from a Meta ad). These last up to about 90 days unless you remove them. If you decline or withdraw, we remove them from this site's domain. You can also delete cookies in your browser settings.

Other third parties. Our contact and newsletter forms use Cloudflare Turnstile, an anti-bot check that may use a cookie or similar technology to tell people from automated programs. Our website is served through Cloudflare, which may measure traffic with Cloudflare Web Analytics; Cloudflare describes this as not using cookies or tracking people across sites. When you pay, you are taken to Stripe's hosted checkout page, which has its own privacy policy and cookies. Apart from Meta (and only if you allow it), we do not intentionally add third-party advertising cookies to this site.

Data Retention

We retain information for as long as reasonably necessary for the purposes for which it was collected, including order fulfillment, customer service, accounting, fraud prevention, legal compliance and legitimate business recordkeeping.

Records of marketing consent and unsubscribe requests are kept so that we can show when and how consent was given and continue to honor opt-outs.

Advertising measurement data: Your IP address, browser (user agent) details and Meta cookie identifiers used to report a purchase to Meta are removed from the order record when the purchase report is prepared, and otherwise by an automated clean-up once the order is about 7 days old. The prepared report is stripped of your contact details and device identifiers as soon as it is sent or closed, and otherwise by the automated clean-up within about a day; a report that cannot be delivered within 8 days is closed without being sent. This clean-up runs automatically every few minutes as part of a scheduled job. If that job is interrupted, these removals are delayed until it runs again. We keep a limited delivery log (order number, order value and the outcome, without your contact or device details) for up to 400 days. Records of your advertising choices (choice, date and policy version, without your name, email or IP address) are kept to show that your choices were honored. Meta keeps information it receives under its own policies.

Security

We use reasonable administrative and technical safeguards intended to protect customer information. No internet or electronic storage system can be guaranteed to be completely secure.

Your Privacy Rights

Depending on where you live, applicable law may provide rights concerning your personal information, including rights to request access, correction or deletion of certain information.

California residents. Under the California Consumer Privacy Act, you have the right to: know what personal information we collect, use, disclose and share, and the categories of sources and recipients; request a copy of the personal information we hold about you; request deletion of personal information we collected from you, subject to legal exceptions; request correction of inaccurate personal information; opt out of the sale or sharing of your personal information; limit the use of sensitive personal information (we do not use it for purposes that would require this); and not be discriminated against for exercising these rights.

In the past 12 months, the categories of personal information we collected include identifiers (name, email, telephone number, address, IP address, online identifiers), commercial information (orders and purchases), internet or other electronic network activity (pages and products viewed, only for advertising measurement if you allow it), and customer records. Only if you allow advertising measurement, we disclosed identifiers, commercial information and internet activity to Meta for cross-context behavioral advertising measurement, as described above. We have not sold personal information for money.

To exercise a right, contact [email protected] or use the "Your Privacy Choices" link to opt out of sharing. We will confirm receipt within 10 business days and respond within 45 days (we may extend once by another 45 days and will tell you). We may need to verify your identity. You may use an authorized agent; we may ask for proof of the agent's authority. If we decline a request, we will explain why.

Residents of other states with privacy laws (for example Colorado, Connecticut, Virginia and Texas) may have similar rights, including to opt out of targeted advertising and to appeal a decision we make on a request. To appeal, reply to our response or write to [email protected] with "Appeal" in the subject; we will respond within the time your state's law requires.

To make a privacy request, contact [email protected]. We may need to verify your identity before completing a request.

Children's Privacy

The K9-Rx website is intended for adults purchasing products for their dogs and is not directed to children under 13. We do not knowingly seek to collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy periodically. The current version and effective date will appear on this page.

Contact

Privacy questions or requests may be sent to [email protected].