Privacy policy
Last updated: 11 November 2026
In short
- We only use your data to manage your account, your orders and whatever you agree to.
- We don't sell your data to anyone.
- Your card details are handled by the payment gateway: we never see them.
- You decide: download your data or delete your account in My account › Privacy.
At DOS DOG S.L. we handle your data with care and only for what is necessary. Here we explain clearly what data we use, why, for how long and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
1. Data controller
- Controller: DOS DOG S.L., Tax ID (CIF) B10565042
- Address: Rúa Nicolás Taboada Leal, E1, 3.º, 27003 Lugo (Spain)
- Privacy contact: info@dosdog.es
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your customer account | Name, e-mail, password (encrypted), phone number, addresses | Performance of a contract (Art. 6(1)(b) GDPR) | For as long as you keep your account. You can delete it whenever you like. |
| Processing your orders, payments, shipments and returns | Contact and delivery details, products, amounts, tax ID and company name if you buy as a business | Performance of a contract (Art. 6(1)(b)) | During the relationship and the warranty and claim periods |
| Invoicing and accounting and tax obligations | Billing and order data | Legal obligation (Art. 6(1)(c)) | 6 years (Art. 30 of the Spanish Commercial Code, Código de Comercio) and the applicable tax periods |
| Recurring delivery subscriptions | Product, frequency, address and payment method (stored by the payment gateway, not by us) | Performance of a contract (Art. 6(1)(b)) | While the subscription is active and afterwards for the legal periods |
| Your pets' profiles and recommendations | Your pet's name, species, breed, weight, age and allergies | Consent (Art. 6(1)(a)), which you give when creating the profile | Until you delete the profile or your account |
| Lusco & Fusco Card points programme | Points balance and transactions | Performance of a contract (Art. 6(1)(b)) | For as long as you keep your account |
| Business accounts (B2B) | Company details and contact person details | Performance of a contract (Art. 6(1)(b)) | For the duration of the business relationship and the legal periods |
| Answering your enquiries | The data you give us in your message | Consent or performance of a contract | As long as needed to reply to you |
| Newsletter and marketing communications | E-mail address and, if you give it to us, your name | Consent with double opt-in (Art. 6(1)(a)). For customers, about products similar to those purchased: legitimate interest (Art. 21.2 LSSI-CE) | Until you unsubscribe (every e-mail includes a link to do so) |
| Knowing whether you open our marketing emails and which links you click, so we can improve them | Date and number of opens of each email (via an invisible image) and links clicked | Legitimate interest (art. 6.1.f) in improving our communications. You can object by writing to us or unsubscribing; if you block images in your email client, opens are not recorded. Not used in your order emails. | While you keep your account. Deleted when you delete it. |
| Statistics and advertising through cookies | Browsing data | Consent (Art. 6(1)(a)) | See the cookie policy |
| Website security and fraud prevention | IP address, technical logs | Legitimate interest (Art. 6(1)(f)) | Up to 12 months |
| Record of your privacy choices | Cookie preferences, date, consent identifier and partially anonymised IP address | Legal obligation to be able to demonstrate consent (Art. 7(1) GDPR) | Up to 3 years from each choice |
We do not make automated decisions that produce legal effects concerning you. Product recommendations based on your pet are only suggestions: you decide what to buy.
3. Who receives your data
We do not sell your data. We only share it with those who help us provide the service, under contracts that require them to protect it and to use it only on our instructions:
- Payment gateways, such as Stripe or PayPal, to charge orders and subscriptions and prevent fraud. Your card details are handled directly by the gateway; we never see or store them.
- Transport and courier companies, to deliver your orders (delivery name, address and phone number).
- Invoicing and accounting tools, such as Holded, to issue invoices.
- Technology providers for web hosting, e-mail and maintenance.
- Google (Tag Manager, Analytics and Ads), only if you accept statistics or advertising cookies.
- Public authorities, judges and courts, where required by law.
4. International transfers
Some providers (for example Stripe, PayPal or Google) may process data outside the European Economic Area, mainly in the United States. In such cases the transfer is covered by the EU-US Data Privacy Framework (adequacy decision of the European Commission) or by the standard contractual clauses approved by the Commission.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent without affecting processing carried out beforehand.
- From your account, in My account › Privacy: download a copy of your data, change your cookie preferences or delete your account.
- By e-mail to info@dosdog.es, stating which right you are exercising. If we cannot identify you with certainty, we will ask you to prove your identity.
We will reply within one month at the latest. If you delete your account, we erase or anonymise your data, except for data we are legally required to keep (for example, invoices), which is blocked and used only to meet that obligation.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).
6. Minors
You must be at least 14 years old to create an account or make a purchase (Art. 7 LOPDGDD). If we detect data from a minor under that age without the authorisation of their parents or guardians, we will delete it.
7. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), encrypted passwords, sensitive data encrypted in the database and access restricted to the staff who need it.
8. Changes to this policy
If we change this policy, we will publish the new version here with its date. If the change is significant, we will let you know.
Any questions? Write to us at info@dosdog.es and we'll help you.