Data Security – Purrbobbin Co.

Effective Date: September 6, 2026

Purrbobbin Co. takes the privacy and security of our customers seriously. This Data Security page explains the measures we use to help protect personal information when you visit www.purrbobbin.com (the “Site”), place an order, create an account where available, or contact us.

Purrbobbin Co. is an independent creative business specializing in handmade cat toys and accessories featuring original artwork and designs.

Operating an ecommerce business requires us to use certain customer information to process payments, prepare orders, ship purchases, provide customer service, maintain business records, prevent fraud, and operate our website.

We take reasonable precautions to safeguard information entrusted to us. However, no website, computer system, electronic transmission, database, or method of electronic storage can be guaranteed to be completely secure.

How We Protect Your Information

Purrbobbin Co. uses reasonable technical, administrative, and organizational measures intended to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Depending on the information and systems involved, these measures may include:

  • Secure website connections using SSL/TLS encryption

  • Secure ecommerce and checkout technology

  • Reputable third-party payment processors

  • Password-protected administrative systems

  • Limited access to customer information

  • Website security and fraud-prevention tools

  • Secure hosting infrastructure

  • Software and system updates

  • Access controls for administrative functions

  • Use of established third-party providers for services involving customer information

  • Monitoring or protective measures intended to identify suspicious or unauthorized activity

  • Reasonable backup and recovery measures

  • Limiting the collection and use of personal information to legitimate business purposes

The particular technologies and service providers used by Purrbobbin Co. may change as the Site and business develop.

Secure Website Connections

www.purrbobbin.com uses secure website technology intended to encrypt information transmitted between your browser and the Site.

When properly configured and supported by your browser, HTTPS and SSL/TLS technology help protect information while it is being transmitted over the internet.

You should normally see your browser indicate that the connection to www.purrbobbin.com is secure.

Although encryption significantly improves the security of information transmitted online, no internet transmission method can be guaranteed to eliminate every possible security risk.

Payment Security

Payments made through www.purrbobbin.com are processed using secure third-party payment services.

Purrbobbin Co. does not directly store your complete credit or debit card number.

When you provide payment information during checkout, the applicable payment provider processes the financial information necessary to complete the transaction.

Purrbobbin Co. may receive information such as:

  • Confirmation that payment was successful

  • Transaction identifiers

  • Payment status

  • Payment method type

  • Limited payment information necessary for transaction records

  • Information necessary to process a refund when applicable

  • Fraud or payment-verification information made available by the payment provider

We do not ordinarily receive or maintain your complete card number, card security code, online banking password, or other complete payment credentials.

Third-Party Payment Providers

Payment processors maintain their own security systems, privacy policies, terms, and legal obligations.

Depending on the payment methods available on www.purrbobbin.com, payment transactions may involve independent payment providers.

Those providers are responsible for securing payment information processed through their systems according to their own practices and applicable requirements.

Purrbobbin Co. does not control the internal security systems of independent payment providers.

Information We May Maintain

Purrbobbin Co. collects and maintains information reasonably necessary to operate the business and provide products and services.

Depending on how you interact with the Site, this may include:

  • Name

  • Email address

  • Billing address

  • Shipping address

  • Telephone number when reasonably required for an order or delivery

  • Order history

  • Products purchased

  • Product options selected

  • Transaction information

  • Shipping and tracking information

  • Customer service communications

  • Return information

  • Refund information

  • Replacement information

  • Photographs submitted for damage, defect, or product-safety concerns

  • Account information, when customer accounts are available

  • Technical information associated with Site usage

  • Information reasonably necessary to investigate fraud, misuse, payment disputes, or security incidents

  • Information reasonably necessary to document product-related concerns or safety reports

We do not intentionally collect more personal information than we reasonably need for our business operations.

Handmade Order Information

Because Purrbobbin Co. makes physical products by hand, certain order information may be used internally to prepare and fulfill your purchase.

This may include:

  • Your order number

  • Products ordered

  • Fabric or design selections

  • Selected product features

  • Catnip selections

  • Bell selections

  • Crinkle selections

  • Quantity

  • Shipping information

  • Customer notes associated with an order

  • Other information reasonably necessary to correctly prepare the products you purchased

We use this information for legitimate order preparation, fulfillment, customer service, recordkeeping, and related business purposes.

Shipping Carriers

When a physical product is shipped, information necessary to complete delivery may be provided to the applicable shipping carrier or shipping-service provider.

This may include:

  • Your name

  • Delivery address

  • Package information

  • Tracking information

  • Other information reasonably necessary to transport and deliver your order

Once information has been transmitted to an independent shipping carrier, that carrier handles the information according to its own systems, policies, and legal obligations.

Purrbobbin Co. does not control the internal computer systems, databases, employees, or security practices of USPS, UPS, FedEx, or other independent shipping carriers.

Customer Accounts

If www.purrbobbin.com offers customer account functionality, customers are responsible for maintaining the confidentiality and security of their account credentials.

You should:

  • Use a strong and unique password

  • Avoid sharing your password with other people

  • Avoid reusing the same password across multiple websites

  • Protect access to the email account associated with your Purrbobbin Co. account

  • Log out when using a shared or public device

  • Keep your device reasonably secure

  • Notify us if you reasonably believe your Purrbobbin Co. account has been accessed without authorization

Purrbobbin Co. will never need you to send us your complete credit card number, card security code, or account password by ordinary email for customer-service purposes.

Password Security

If customer accounts are available, you are responsible for choosing and maintaining a secure password.

We recommend that customers:

  • Use a password that is difficult for others to guess

  • Avoid using names or obvious personal information

  • Avoid using passwords that have already been exposed in another data breach

  • Avoid sharing passwords

  • Use different passwords for different online services

  • Change a password if there is reason to believe it has been compromised

If someone gains access to your email account, they may also be able to attempt password resets for other accounts associated with that email address.

For this reason, protecting your email account is an important part of protecting your Purrbobbin Co. account.

Email Security

Email is a convenient method of communication, but ordinary email should not be treated as a completely secure method of transmitting highly sensitive information.

When contacting legal@purrbobbin.com, please do not send:

  • Complete credit or debit card numbers

  • Card security codes

  • Online banking passwords

  • Account passwords

  • Social Security numbers

  • Government identification numbers unless specifically and lawfully required

  • Other highly sensitive information that is unnecessary for us to resolve your request

For ordinary order support, your name, order information, email address, photographs when relevant, and a description of the issue are generally sufficient.

If additional information is reasonably necessary, we will let you know.

Photographs Submitted for Product Concerns

Purrbobbin Co. may request photographs when a customer reports a damaged, defective, incorrect, or potentially unsafe product.

Photographs submitted for these purposes may be retained when reasonably necessary to:

  • Evaluate the concern

  • Determine whether a construction issue may exist

  • Evaluate a damaged or defective product claim

  • Process a return, refund, or replacement where applicable

  • Investigate possible fraud or misuse

  • Resolve a dispute

  • Document a product-safety concern

  • Identify recurring product or construction issues

  • Improve product safety or quality-control practices

  • Establish, exercise, or defend legal claims

  • Maintain appropriate business records

Please avoid including unrelated personal or sensitive information in photographs submitted to Purrbobbin Co.

Before submitting a photograph, customers are encouraged to check the background of the image and avoid unintentionally including personal documents, payment cards, prescription information, computer screens, mail, identification documents, children, or other unrelated private information.

Product-Safety Communications

Because Purrbobbin Co. sells products intended for pets, we may retain communications relating to reported product-safety concerns.

This may include information concerning:

  • The product involved

  • Order information

  • Date of purchase

  • Product options selected

  • Description of the reported concern

  • Photographs provided by the customer

  • Communications concerning the product

  • Information concerning how the matter was handled

  • Other information reasonably necessary to investigate or document the report

This information may be retained when reasonably necessary for product safety, quality control, customer service, dispute resolution, insurance, legal compliance, or establishment or defense of legal claims.

Customers should not send unnecessary veterinary records or other sensitive information unless specifically requested and reasonably necessary.

If a pet is experiencing a medical emergency, contact a veterinarian or emergency veterinary provider rather than sending medical information to Purrbobbin Co. and waiting for a response.

Website Security

We may use security technologies and services intended to help protect www.purrbobbin.com from:

  • Unauthorized access

  • Malicious traffic

  • Fraudulent transactions

  • Account abuse

  • Automated attacks

  • Spam

  • Malware

  • Attempts to interfere with Site functionality

  • Attempts to gain unauthorized administrative access

  • Other suspicious or harmful activity

These security systems may process technical information such as IP addresses, browser information, device information, request activity, login activity, or other information reasonably necessary to identify and respond to potential threats.

Administrative Security

Access to administrative portions of www.purrbobbin.com and related business systems is intended to be restricted to authorized persons who reasonably require access for business purposes.

Reasonable measures may include:

  • Password protection

  • Account permissions

  • Limited administrative access

  • Authentication measures

  • Software updates

  • Security monitoring

  • Restricting access to sensitive business functions

  • Removing or changing access when it is no longer reasonably required

No administrative security measure can guarantee that unauthorized access will never occur.

Fraud Prevention

Purrbobbin Co. reserves the right to use transaction, order, account, shipping, technical, photographic, and communication information reasonably necessary to identify or investigate suspected fraud or abuse.

This may include suspected:

  • Fraudulent purchases

  • Use of stolen payment information

  • Chargeback abuse

  • False damage or defect claims

  • Manipulated photographic evidence

  • Repeated refund or replacement abuse

  • Account misuse

  • Attempts to circumvent Site security

  • Unauthorized use of Purrbobbin Co. artwork or intellectual property

  • Other deceptive or unlawful conduct

Where reasonably necessary, relevant information may be shared with payment processors, financial institutions, security providers, insurers, professional advisers, law enforcement, courts, or other appropriate authorities.

Chargebacks and Payment Disputes

If a payment dispute or chargeback is initiated, Purrbobbin Co. may provide relevant information to the applicable payment processor, bank, card network, or financial institution.

This may include:

  • Order information

  • Transaction records

  • Customer communications

  • Shipping information

  • Tracking information

  • Delivery confirmation

  • Product information

  • Photographs

  • Return or refund information

  • Applicable policies

  • Other information reasonably necessary to respond to the dispute

We do not provide more personal information than we reasonably believe is necessary to document and respond to the matter.

Cookies and Similar Technologies

www.purrbobbin.com may use cookies and similar technologies for Site functionality, security, ecommerce operations, analytics, and fraud prevention.

These technologies may help:

  • Maintain shopping carts

  • Support checkout

  • Maintain customer sessions

  • Remember preferences

  • Identify suspicious activity

  • Understand general Site usage

  • Improve website performance

  • Protect accounts and transactions

Additional information about these technologies is available in our Cookie Policy.

Third-Party Services

Purrbobbin Co. relies on third-party services to operate portions of the Site and business.

These may include:

  • Payment processors

  • Website hosting providers

  • Ecommerce software

  • Shipping carriers

  • Shipping or logistics services

  • Website security services

  • Fraud-prevention services

  • Analytics providers

  • Email and transactional communication services

  • Backup or storage services

  • Other business technology providers

These companies maintain their own systems, security practices, privacy policies, and legal obligations.

While we aim to use established and appropriate service providers, Purrbobbin Co. cannot guarantee or control the security of independent third-party systems.

Information Shared With Service Providers

Purrbobbin Co. may provide service providers with personal information when reasonably necessary for them to perform services on our behalf or support the operation of the business.

For example:

  • Payment information may be processed by a payment provider.

  • Shipping information may be provided to a carrier.

  • Order information may be processed through ecommerce software.

  • Email addresses may be processed through transactional email systems.

  • Technical information may be processed by hosting, analytics, security, or fraud-prevention providers.

We do not disclose customer information to third-party service providers merely for curiosity or unrelated purposes.

Additional information about how personal information may be disclosed is available in our Privacy Policy.

Access to Personal Information

Access to customer information under Purrbobbin Co.'s direct control is intended to be limited to information reasonably necessary to operate the business.

Personal information should not be accessed merely out of curiosity or for purposes unrelated to legitimate business operations.

Authorized access may be necessary for activities including:

  • Preparing orders

  • Shipping purchases

  • Providing customer service

  • Processing returns or refunds

  • Responding to product concerns

  • Maintaining financial records

  • Preventing fraud

  • Maintaining the Site

  • Responding to privacy requests

  • Addressing security incidents

  • Complying with legal obligations

Where third-party services are involved, their personnel and systems may process information according to their own access controls and contractual or legal responsibilities.

Data Minimization

Where reasonably practical, Purrbobbin Co. seeks to collect and maintain only information that serves a legitimate business, transactional, security, safety, or legal purpose.

We do not need or want customers to provide unnecessary highly sensitive information.

Please do not send sensitive personal information simply because you believe it may be helpful.

If we need additional information to resolve a particular matter, we will request information reasonably related to that purpose.

Data Retention

Personal information may be retained for as long as reasonably necessary for the purpose for which it was collected and for legitimate business or legal purposes.

Information may be retained to:

  • Fulfill orders

  • Maintain transaction records

  • Provide customer support

  • Process returns, refunds, or replacements

  • Maintain accounting records

  • Comply with tax requirements

  • Resolve disputes

  • Respond to chargebacks

  • Prevent fraud and policy abuse

  • Document product-safety concerns

  • Maintain quality-control records

  • Protect Purrbobbin Co.'s intellectual property

  • Enforce agreements and policies

  • Establish, exercise, or defend legal claims

  • Address insurance matters

  • Comply with legal obligations

Different types of information may be retained for different periods.

We do not promise immediate deletion of information when a transaction is completed because certain records may need to be retained for legitimate business or legal reasons.

Data Backups

Information maintained through Purrbobbin Co.'s website or third-party systems may be included in system backups or recovery processes.

Backup systems are intended to protect against accidental data loss, system failure, malicious activity, or other technical problems.

Information contained in backups may remain for a period after information has been removed from an active system, depending on the applicable backup and retention process.

Deleting information from an active customer-facing system does not necessarily result in immediate deletion from every backup copy.

Your Role in Data Security

Security is also affected by how customers protect their own devices, accounts, and information.

Customers are responsible for taking reasonable steps to protect:

  • Their computers, phones, and tablets

  • Email accounts

  • Passwords

  • Customer account credentials

  • Saved order records

  • Payment accounts

  • Home or public network connections

  • Information downloaded or saved from the Site

Purrbobbin Co. cannot protect information after it has been downloaded to, stored on, or exposed through a device or account controlled by the customer.

Shared and Public Devices

If you use www.purrbobbin.com from a shared or public device, take appropriate precautions.

These may include:

  • Logging out of your account after use

  • Avoiding saving passwords in a shared browser

  • Avoiding saving payment information on a public device

  • Closing the browser when finished

  • Clearing browsing information where appropriate

  • Ensuring another person cannot access your email account

Purrbobbin Co. cannot control access to devices used by customers.

Protect Yourself From Impersonation and Phishing

Customers should be cautious of emails, messages, websites, advertisements, or social media accounts falsely claiming to represent Purrbobbin Co.

Purrbobbin Co. will not ask you by ordinary email to provide:

  • Your complete credit card number

  • Your card security code

  • Your online banking password

  • Your Purrbobbin Co. account password

  • Your Social Security number for ordinary customer service

Be cautious of communications that:

  • Demand immediate payment through an unusual method

  • Ask for passwords

  • Ask for complete payment-card information

  • Contain suspicious attachments

  • Direct you to unfamiliar websites

  • Claim you must urgently “verify” financial information

  • Appear inconsistent with an order you actually placed

If you receive a suspicious communication claiming to be from Purrbobbin Co., do not provide sensitive information or click suspicious links.

You may contact legal@purrbobbin.com to ask whether a communication is legitimate.

Links to Third-Party Websites

The Site may contain links to websites or services operated by third parties.

Purrbobbin Co. does not control the security, privacy practices, content, or operation of independent websites.

If you leave www.purrbobbin.com and visit another website, the security and privacy practices of that website will apply.

Customers should use appropriate caution before submitting personal or financial information to any third-party website.

No System Is Completely Secure

Although we take reasonable precautions, no method of internet transmission, electronic storage, website security, computer security, or data-processing system is completely risk-free.

Security threats and technologies continually change.

It is therefore impossible for Purrbobbin Co. or any other online business to guarantee that unauthorized access, data loss, cyberattack, malware, technical failure, human error, third-party breach, or another security incident will never occur.

Our commitment is to use reasonable safeguards appropriate to our operations, not to promise absolute security that no online system can guarantee.

Security Incidents

If Purrbobbin Co. becomes aware of a security incident involving personal information under our control, we may investigate the incident and take reasonable steps appropriate to the circumstances.

Depending on the nature and scope of an incident, these steps may include:

  • Investigating what occurred

  • Identifying potentially affected information

  • Securing affected systems

  • Working with relevant service providers

  • Changing credentials or access controls

  • Installing updates or security fixes

  • Preserving relevant records

  • Taking steps intended to reduce additional risk

  • Consulting appropriate technical, legal, insurance, or other professional advisers

  • Providing notices when required by applicable law

  • Cooperating with authorities where appropriate or required

The specific response will depend on the circumstances of the incident.

Security Incident Notifications

Not every technical problem constitutes a legally reportable data breach.

If an incident occurs, Purrbobbin Co. will evaluate the circumstances and any applicable notification requirements.

Where applicable law requires notification to affected individuals, regulators, authorities, or other parties, we will endeavor to provide such notification as required.

Third-Party Data Breaches

Because Purrbobbin Co. uses independent service providers, a security incident could potentially occur within a third party's systems rather than within systems controlled directly by Purrbobbin Co.

We do not control the internal cybersecurity operations of independent providers.

If we become aware of a relevant third-party incident affecting Purrbobbin Co. customer information, we may take reasonable steps based on:

  • The information made available to us

  • The type of information affected

  • The scope of the incident

  • The third party's response

  • Applicable contractual obligations

  • Applicable legal requirements

Employee and Business Access

Purrbobbin Co. is operated by a small family business.

Individuals working within Purrbobbin Co. may need access to certain customer or order information in order to perform legitimate business tasks such as:

  • Preparing handmade products

  • Confirming product selections

  • Packing orders

  • Printing shipping labels

  • Responding to customers

  • Processing returns

  • Reviewing product concerns

  • Maintaining business records

  • Operating the Site

Access to customer information should be limited to legitimate business purposes.

The fact that Purrbobbin Co. is family-run does not mean customer information is intended for unrelated personal use.

Your Privacy Rights

Depending on where you live and the laws that apply to Purrbobbin Co., you may have rights concerning personal information maintained about you.

These may include rights to request:

  • Access to certain personal information

  • Correction of inaccurate information

  • Deletion of certain information

  • Information concerning how certain personal information is used or disclosed

  • Data portability where applicable

  • Opt-out rights where applicable

  • Other rights provided by applicable privacy law

Some information may need to be retained despite a deletion request when retention is permitted or required for legal, tax, accounting, fraud-prevention, dispute-resolution, transaction-recordkeeping, product-safety, insurance, or other legitimate purposes.

Privacy requests may be sent to legal@purrbobbin.com.

We may need to verify your identity before processing certain requests.

Additional information is available on our Your Privacy Rights page.

Children's Information

www.purrbobbin.com is not directed toward children under the age of 13.

We do not knowingly seek to collect personal information directly from children under 13.

If you believe that a child under 13 has provided personal information to Purrbobbin Co., please contact legal@purrbobbin.com so that we can review the situation and take appropriate action where required.

What to Do if You Believe Your Information Has Been Compromised

If you believe your Purrbobbin Co. account or information associated with Purrbobbin Co. has been accessed or used without authorization, please contact us as soon as reasonably possible.

When contacting us, provide enough information for us to understand the concern, but do not send passwords or complete financial information by email.

Depending on the circumstances, you may also need to:

  • Change your account password

  • Change the password to your associated email account

  • Contact your payment provider

  • Contact your financial institution

  • Review account or payment activity

  • Contact another relevant service provider

The appropriate steps will depend on the nature of the suspected compromise.

If You Receive a Suspicious Purrbobbin Communication

If you receive an email or other communication claiming to be from Purrbobbin Co. and believe it may be fraudulent:

  • Do not provide sensitive information.

  • Do not provide passwords.

  • Do not send complete payment information.

  • Avoid opening suspicious attachments.

  • Avoid following unfamiliar links.

  • Contact us independently at legal@purrbobbin.com if you wish to verify the communication.

When verifying a suspicious communication, use contact information obtained directly from www.purrbobbin.com rather than relying solely on contact information contained in the suspicious message.

Relationship to Our Privacy Policy

This Data Security page explains our general security practices and responsibilities associated with protecting information.

Our Privacy Policy provides additional information concerning:

  • What information Purrbobbin Co. may collect

  • How information is used

  • When information may be shared

  • Data retention

  • Cookies and technical information

  • Privacy rights

  • Third-party services

This Data Security page should be read together with our Privacy Policy, Cookie Policy, and Your Privacy Rights page.

Changes to This Data Security Page

We may update this Data Security page as Purrbobbin Co.'s website, products, services, security practices, technology providers, shipping processes, or legal requirements change.

When changes are made, the updated version may be posted on www.purrbobbin.com with a revised effective or updated date.

We encourage visitors to periodically review this page.

Contact Information

If you have questions about data security, believe there may be a security issue involving your information, or have a privacy-related concern, please contact:

Purrbobbin Co.
Email: legal@purrbobbin.com
Website: www.purrbobbin.com

Please do not include passwords, complete payment-card numbers, card security codes, Social Security numbers, or other unnecessary sensitive financial or identity information in an email.

Business and Brand Information

Purrbobbin Co. is an independent creative business specializing in handmade cat toys and accessories.

Purrbobbin Co. products may feature original artwork, illustrations, fabric designs, and other creative works made by the artists behind the business.

This Data Security page applies to www.purrbobbin.com and may be revised as the Site, business, technologies, and services change.