Privacy
What we collect, why we collect it, and who else sees it. Written from what the site actually does rather than from a template.
This page covers Nooki Pets, the shop you are reading. It was last checked against the site's own code on 1 September 2026, and it describes what happens today — not what we might do later.
What we collect, and when
Nothing at all until you do something. Browsing the shop is anonymous: no account, no tracking script, and on a first visit no cookies are set.
- When you buy: your name, delivery address, email address and phone number. We need all of it to send you a parcel and tell you it is coming.
- When you create an account: your email address, your name if you give one, and a password we never see in readable form.
- When you message us on live chat: your name, your email address, what you wrote, and which page you were on. If you had a basket, its total is attached so we can answer without asking you to describe it.
- When you apply to the affiliate programme: what you type into that form.
- When you sign up for the newsletter: your email address, which of our forms you used, and the date. Nothing else — not your name, not your IP address.
We never see your card number. It goes straight from your browser to Stripe, who take the payment. What comes back to us is whether it worked, the last four digits, and the card type.
Cookies
Four, and every one of them exists to make something you asked for work. There is no advertising cookie and no analytics cookie on this site, so there is nothing here to opt out of:
- Your basket: remembers what you put in it, so it is still there when you come back.
- Your sign-in: keeps you signed in between pages. Set only if you have an account and use it.
- Signing up: holds your place for a moment during registration, then goes.
- Your region: remembers the country and currency you chose, so you are not asked twice.
Clearing them empties your basket and signs you out. Nothing else breaks, and nothing follows you to another website.
Who else sees your information
Only companies that do a specific job for us, and only the part they need for it. None of them may use your details for their own purposes:
- Stripe takes the payment. They receive your card details directly and your billing address.
- Resend sends our emails — order confirmations, password resets. They receive your email address and what the message says.
- Railway and Supabase host the shop and its database. Your order lives there.
- Our own admin system holds live chat conversations and affiliate applications, so the person answering can see what you wrote.
We do not sell your information, and we do not share it with advertisers. If that ever changes, this page changes first.
Where it is stored
The shop's database is in the United States, and our admin system is in Japan. Both are run by companies operating under standard contractual protections. If you are ordering from the UK or the EU, that means your details leave your country — which is normal for online shopping, and worth saying plainly rather than burying.
How long we keep it
- Orders: kept for as long as tax and consumer law require, which in Australia is five years.
- Accounts: kept until you ask us to close yours.
- Live chat conversations: kept so we can pick up where we left off if you write again.
- Baskets that were never ordered: cleared as they expire.
- Newsletter signups: kept until you unsubscribe, then kept as a record that you did, so we do not add you back by mistake.
What you can ask us to do
Email us and we will do it. You do not need to give a reason, and it costs nothing:
- Tell you what we hold about you.
- Correct anything that is wrong.
- Delete it, except the parts we are legally required to keep — an order we have to hold for tax purposes, for instance.
- Send you a copy in a form you can take elsewhere.
If you are in the UK or the EU you can also complain to your national data protection authority, and in Australia to the Office of the Australian Information Commissioner. We would rather you told us first, but the route exists either way.
Common questions
Do you track me across other websites?
No. There is no advertising pixel and no analytics script on this site. If we add one — and we may, in order to know whether our own pages are working — we will ask you first, and this page will say so before it happens.
Do I have to make an account to buy something?
No. You can check out as a guest. An account saves your addresses and lets you see past orders; it is a convenience, not a requirement.
What happens to my live chat message?
It lands in the same inbox the team uses for every other channel, with your name and email so we can reply. Your IP address is not stored: it is scrambled into a value we cannot reverse, which lets us stop somebody flooding the chat without keeping a list of who visited.
Who do I write to?
Use the contact page. Anything about your own information gets answered by a person, not a form.