Privacy
Privacy Policy
Last updated: 30 October 2026
Plucky Pet operates this website (“Plucky Pet”, “we”, “us”); the company behind it is named in our legal notice. We respect your privacy and collect as little as we can. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the rights you have. We follow Québec’s Act respecting the protection of personal information in the private sector (“Law 25”) and Canada’s PIPEDA; for visitors in the EU and UK we also honour the GDPR.
Who is responsible
As Law 25 requires, we have designated a person responsible for the protection of personal information. For any question, to exercise one of your rights, or to make a complaint, contact them at hello@pluckypet.com.
What we collect
- What you give us. If you sign up: your email address, to send you the newsletter you asked for. Some earlier forms also asked for your first name, your cat’s name and a “gotcha day”; if you gave them, we keep them with your subscription and delete them if you ask.
- If you suggest a shelter through our Facebook or Instagram form. Your email address and the shelter you suggest. We use your email only to tell you which shelter we chose, unless you also tick the box to receive our newsletter (then the double opt-in below applies). Meta runs the form and holds the answers for us; we download them and delete them after October 31, 2026, except the addresses of people who asked for our newsletter.
- If you used our earlier opening-offer pop-up. Our pop-up now invites you to the newsletter only. It offers no discount code, and it works like any newsletter sign-up. If you asked for the code when the pop-up offered it, we keep your email address. We also keep the date, the source and the version of the wording you saw. Signing up for the code subscribed you to the Plucky Pet newsletter and offers. We use your address to send you the discount code you asked for, the newsletter, and offers from Plucky Pet. The code and offers come from Plucky Pet <hello@orangecatletters.com>, an address on a separate domain we use for offers and discount codes; our email service provider, Brevo (Sendinblue SAS, France), sends them for us and acts as our processor. The newsletter is sent from [email protected] by Beehiiv, our newsletter provider, on our behalf.
- If you place an order. Your name, email address, shipping address and phone number, the items you order, and the coat, size, frame and line of text you choose for the print (for example your cat’s name). You enter these on the secure checkout run by Shopify, our store platform, and Shopify also asks for the billing details it needs. We ask for a phone number because the carrier needs it to deliver. We never see your card number: you give it to Shopify and its payment provider, who process it. If you accepted advertising cookies, we also keep with your order the ad-click and browser references (the Meta identifiers described under Cookies and tracking).
- What is collected automatically. Standard technical data — IP address, device and browser type, and the pages you view — through cookies and similar technologies (see Cookies and tracking).
We do not see or keep your payment card details: you enter them on Shopify’s secure checkout, and Shopify and its payment provider hold and process them. Everything else you give us when you order, we keep and use as described on this page.
Why we use it
We use your uploaded cat photo only to create your cat's illustrated portraits, never for ads or to train AI, and share it only with the AI services that paint it for us. The one other place it can appear is the session replay described below, and only if you accept cookies.
If you choose to enter an email address in the planner (it is optional), we send that address to QuickEmailVerification to check whether it can receive email and whether it is disposable. We save the address after verification succeeds. This check does not subscribe you to marketing emails.
- To send the emails you asked for, and to reply when you contact us.
- To send the discount code you asked for through our earlier opening-offer pop-up. Signing up there also subscribed you to the Plucky Pet newsletter and offers.
- To make, print and ship your order, send you order and shipping updates, and handle a damage or misprint claim.
- To keep the records the law requires, such as tax and accounting records.
- To understand and improve how the site is used.
- To measure our advertising and show you relevant ads on Facebook and Instagram — with your consent, or by default for visitors in the United States (outside the states named under Your privacy choices) until October 31, 2026, with an easy opt-out (see Cookies and tracking and Your privacy choices). Purchases you make on our store are also reported to Meta from our server for this purpose, whether or not you accepted cookies (see Cookies and tracking).
We do not make automated decisions that produce legal or similarly significant effects about you.
Consent
Email sign-up is double opt-in: you give an address and we send one email asking you to confirm. We keep a record of that consent — when and from where it was given. Every email has a working unsubscribe, and unsubscribing is immediate and permanent. You may withdraw consent at any time. The pop-up works the same way. It invites you to the newsletter only, with no discount code: you tick the box, then confirm your email. Our earlier opening-offer pop-up gave a code. Getting it subscribed you to the Plucky Pet newsletter and offers. That pop-up said so next to its button. You can unsubscribe at any time.
If you choose to receive our emails (at checkout or through our forms), we use your email address only for that; you can unsubscribe at any time.
Cookies and tracking
The planner uses an essential, secure session cookie to recover your uploaded photo, existing preview and choices on this browser for up to 30 days. The cookie holds a random identifier, not your photo or email. Your photo and generated preview are stored on our server; entering an email alone cannot open another person's draft. You can replace or remove your photo in the planner. An email is optional: you can see your preview without giving one, and our secure checkout (Shopify) asks for one only when you order. If you give one, sending the preview to it and receiving offers are recorded separately. Offers are optional and are not required to continue. Unordered image files are normally deleted 30 days after upload; files linked to a started checkout may be kept for up to 120 days, and ordered files until 60 days after delivery.
Like most sites, we use cookies and similar technologies for two purposes:
- Analytics — privacy-preserving, cookieless measurement of how the site is used. It counts pages, not people, and does not build profiles. It loads only after you accept in the cookie banner.
- Analytics and session replay — On planner pages, PostHog always measures page visits, which button or link was clicked (never the words on it or anything you typed), planner steps, error codes, campaign labels, which version of the planner page you saw and, when the site already knows it from your cart, the country whose prices you see (United States, Canada or the United Kingdom). This uses no analytics cookie and no lasting visitor identifier, including in the United States and after October 31, 2026, whether you accept or decline cookies. If you accept cookies, PostHog also records a replay of your visit to planner pages (how the page moved, where you clicked and scrolled, and the images on the page, including a photo you upload and the previews made from it) and keeps it for 30 days; everything you type, your cat’s name, and your contact details are hidden in it. The replay sets no cookie and stops when you decline or withdraw your consent. We never send your planner email, contact ID, draft or private preview link to PostHog. Functional email delivery and recovery of your planner are separate services. The following PostHog cookie and recording rules apply to the rest of the store. PostHog (PostHog Inc., a service hosted in the United States) records which pages are viewed and the main steps of a visit (a product viewed, a coat picked, an item added to the cart, the checkout button clicked) and can replay a visit as a screen recording. If you are in the United States, outside the states named under Your privacy choices, until October 31, 2026 it is on by default, with cookies and screen recording, unless you opt out: choose Decline in the cookie banner or “Your privacy choices” at the bottom of any page, and it stops recording, stops sending, and removes its cookie from your browser; if your browser sends the Global Privacy Control signal, we treat it as an opt-out. If you are in Canada, in one of those states, or anywhere else, or we cannot tell where you are or which state you are in, and for everyone after October 31, 2026, it loads with cookies and recording only after you accept in the cookie banner. Everything you type into a field, including your email, is masked and never recorded; page text is not masked. We do not identify you by your email or contact ID in PostHog. Recordings are kept up to 30 days. On product pages it also notes how long the page stays open, how far it is scrolled, and which images, sizes, frames and questions are opened. The one exception to the masking: if you accepted, and you answer our short question about what held you back, PostHog receives your answer, and any note you choose to type there as you wrote it. Please leave out personal details. Visitors in the United States who have not accepted are shown the one-tap choices only, with no box to type in. Until October 31, 2026 we also measure visits to this site anonymously, without cookies and without a lasting identifier, whether or not you accept cookies: the pages and product steps viewed, the time and scroll depth on a product or story page, and the one-tap answer to that short question (never a typed note). We also record which of our ads or links brought you here, as a campaign label that is the same for everyone who used that link. Advertising measurement (Meta) follows the separate rule under Advertising below. If something on the site breaks, for example the hand-off to checkout fails, the same measurement also receives a technical error report: the error message, where in our code it happened, the page address, and your browser and device type. We do not add anything you typed, your cart contents, your name or your email to it. You can stop it at any time with the cookie settings below.
- Advertising — the Meta (Facebook) Pixel, to measure our ads and show you relevant ads on Facebook and Instagram. This shares limited information with Meta, a third party, for that purpose. We do not sell your personal information for money; see Your privacy choices for how this use is treated under some US state laws. If you are in the United States, outside the states named under Your privacy choices, the Meta Pixel is on by default until October 31, 2026, and you can turn it off at any time. If you are in Canada, in one of those states, or anywhere else, or we cannot tell where you are or which state you are in, it loads only if you accept. After October 31, 2026 it loads only if you accept, wherever you are. To decide which rule applies we use only a two-letter country code and, in the United States, the state code, read when a page loads; we do not read or keep your IP address for that. When you arrive from a Facebook or Instagram ad, we keep the ad-click reference in this browser tab (it is sent nowhere) until you choose. If you accept advertising cookies, it is shared with Meta and saved with your order; if you decline, it is deleted. Where the pixel is on by default, it is shared with Meta like the pixel’s other information, but it is saved with your order only if you accept.
Outside the United States (in the United States, in the states named under Your privacy choices, and after October 31, 2026, or if you opt out), non-essential cookies stay off until you agree. We ask in a banner, and you can at any time (also “Your privacy choices” at the bottom of every page). Declining or withdrawing also deletes the ad-click reference and the Meta advertising cookies (_fbp, _fbc) from this browser. You can also manage your Meta ad preferences or block cookies in your browser.
Purchases are reported separately from cookies. The cookies and the Meta Pixel in your browser wait for your agreement, as described above. The record of a purchase you make is different: when you place an order, we may report it to Meta from our own server, whether or not you accepted cookies, to measure which ads lead to sales and to help Meta show our ads to people likely to be interested. The report contains the order number, value, currency and items, plus your email address, phone number, first and last name, city, postal code, country and customer ID, each scrambled (hashed) before it is sent, and the IP address the order was placed from, which is sent as it is. If you accepted advertising cookies, the report also includes the ad-click and browser references saved with your order (Meta’s click and browser identifiers, not scrambled). Shopify’s own Facebook & Instagram app also shares checkout events with Meta. For questions or requests about this information, see Your rights below.
Your privacy choices (do not sell or share)
If you are in the United States, in a state other than those named below: until October 31, 2026 the Meta Pixel is on by default for you, to measure our ads and show you relevant ads on Facebook and Instagram. We do not sell your personal information for money, but sharing limited information with Meta for advertising may count as “sharing” or targeted advertising under some US state privacy laws. You can opt out at any time: choose Decline in the cookie banner, or use (also at the bottom of every page) to reopen it. The same choice turns off our analytics and screen recording (PostHog) outside planner pages, which are also on by default for you until October 31, 2026; what you type into a field is masked and never recorded. If your browser sends the Global Privacy Control signal, we treat it as an opt-out request and the pixel and the recording do not load. We keep your choice on this device for 180 days and then ask again. You can also manage your Meta ad preferences.
If you are in Canada or anywhere else: the Meta Pixel loads only if you accept, and you can change your mind with the same button at any time.
If you are in California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Missouri, Montana, Nevada, New Hampshire, Oregon, Pennsylvania and Washington, or we cannot tell which US state you are in: we ask first, as in Canada. Some of these states require everyone in a conversation to agree before it is recorded, so the Meta Pixel and our analytics and screen recording (PostHog, outside planner pages) load only if you accept in the cookie banner, and you can change your mind with the same button at any time.
The choices on this page apply to cookies and the Meta Pixel in your browser. They do not apply to the report of a purchase you make, described under Cookies and tracking; for questions or requests about it, see Your rights below.
Who we share it with
We share personal information only with the service providers that help us run Plucky Pet, and only for that purpose:
- Shopify (our store and checkout platform) and its payment provider, to take your order and payment;
- our print partner, a Québec company, which prints your order in the United States and packs it, and to which we send your name, shipping address, phone number, the items and the line of text to print;
- the carriers that deliver your order, who receive your name, address and phone number to deliver it;
- our email / newsletter provider, to deliver the emails you asked for;
- Brevo (Sendinblue SAS, France), our email provider for offers and the earlier pop-up’s discount code, as our processor;
- Beehiiv Inc. (United States), which sends our newsletter for us, as our processor;
- PostHog Inc. (United States), for anonymous cookieless analytics on planner pages, and for a replay of your visit to planner pages only if you accept cookies; elsewhere, for analytics and session replay if you consent, or by default for visitors in the United States (outside the states named under Your privacy choices) until October 31, 2026 unless they opt out;
- Meta Platforms (Facebook and Instagram), through the Meta Pixel — if you consent, or by default for visitors in the United States (outside the states named under Your privacy choices) until October 31, 2026 unless they opt out;
- Meta Platforms, from our own server, which receives a record of the purchases made on our store (see Cookies and tracking), whether or not you accepted cookies;
- Meta Platforms, which runs the Facebook and Instagram forms you choose to fill in;
- our website hosting and infrastructure provider.
We do not sell your personal information for money, and we do not share it for anyone else’s independent marketing. The uses that some US state laws treat as “sharing” for advertising are the Meta Pixel and the purchase reports to Meta described under Cookies and tracking; see Your privacy choices.
Where it is processed
Some of our providers — including Meta, PostHog (a service hosted in the United States) and our infrastructure — process information outside Québec and Canada, including in the United States. When personal information is handled outside Québec, we take reasonable steps to see that it receives comparable protection. By using the site and giving consent, you understand that information may be processed in those locations.
Some service providers that run our online store and checkout (Shopify), our email (Brevo, Beehiiv) and our analytics (PostHog) may process your information outside Québec; we take reasonable steps to see that it receives comparable protection. Your order is printed by our print partner, a Québec company, which prints your order in the United States; the information needed to print and ship it (your name, shipping address and personal line) is therefore processed in the United States.
How long we keep it
We keep your personal information only as long as we need it for the purposes above, or as the law requires, and then we delete or anonymise it. You can ask us to delete your information sooner at any time.
Contacts from our earlier opening-offer pop-up. Signing up for the code subscribed you to the newsletter and offers. We keep your contact until you unsubscribe.
Order records. We keep the records of an order (name, shipping address, phone number, items and the line you chose) for 7 years, to deliver it, deal with a claim or return, and meet our tax and accounting duties, and then we delete or anonymise them. Shopify keeps its own records under its own policies.
Print files. The print file we prepare for your order (with your cat’s name and personal line) is kept for 90 days after delivery, so we can reprint if your order arrives damaged, and then it is deleted.
Your rights
Under Law 25 and PIPEDA (and the GDPR where it applies) you can:
- access the personal information we hold about you;
- have it corrected if it is wrong;
- withdraw your consent, or unsubscribe, at any time;
- ask us to delete it;
- ask for a copy in a structured, commonly used format (portability).
To exercise any of these, email hello@pluckypet.com and a person will handle it, at no charge, within the timelines the law sets.
Complaints
If you are not satisfied with how we have handled your personal information, please tell us first so we can put it right. You also have the right to complain to the Commission d’accès à l’information du Québec (the CAI) or, elsewhere in Canada, the Office of the Privacy Commissioner of Canada.
How we protect it
We use reasonable technical and organisational measures to protect your information, and we keep the amount we hold small on purpose. No method of storage or transmission is perfectly secure, but we treat your information as if it were our own.
Children
Plucky Pet is not directed at children, and we do not knowingly collect personal information from anyone under the age of 14. If you believe a child has given us their information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will change the “last updated” date above, and for any significant change we will let subscribers know by email.
Contact
Questions about this policy or your information? Email hello@pluckypet.com — Plucky Pet.