Legal

Privacy Policy

Effective Date: April 14, 2026 · Last Updated: April 14, 2026

This Privacy Policy describes how Exotic Puppy Mart LLC ("Company," "we," "us," or "our") collects, uses, stores, and protects personal data of users ("you") who access our website exoticpuppymart.com (the "Site") or interact with our services.

1.Data Controller

The data controller responsible for processing your personal data is:

Exotic Puppy Mart LLC
1200 Brickell Avenue, Suite 500
Miami, FL 33131, USA
Email: info@exoticpuppymart.com
Data Protection Contact: privacy@exoticpuppymart.com

2.Personal Data We Collect

2.1 Data you provide directly when submitting an order inquiry:

  • Full name
  • Email address
  • Telephone number
  • Optional: free-text notes or questions you include with your inquiry

2.2 Data collected automatically when you visit the Site:

  • IP address (anonymized after 90 days)
  • Browser type and version
  • Operating system
  • Referring URL and pages visited
  • Date and time of access
  • Device type (desktop, mobile, tablet)
  • Approximate geographic location (country and city level, derived from IP)

2.3 Data from local storage:

Shopping cart contents are stored locally in your browser's localStorage. This data resides only on your device and is not transmitted to or stored on our servers unless you submit an order inquiry.

3.Purposes of Processing and Legal Basis

Purpose Data Used Legal Basis
Processing and responding to order inquiriesName, email, phone, cart contentsContractual necessity (Art. 6(1)(b) GDPR / equivalent)
Site analytics and performance monitoringIP address, browser data, pages visitedLegitimate interest — improving our service
Security monitoring and fraud preventionIP address, access logsLegitimate interest — protecting the platform
Compliance with legal obligationsAs required by applicable lawLegal obligation
Sending transactional emails related to your order inquiryName, email addressContractual necessity / consent

4.Third-Party Sharing

4.1 We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4.2 We may share your data with the following categories of third parties, strictly for the purposes described:

  • Email service providers — to transmit order confirmation communications
  • Analytics providers (Google Analytics) — to understand Site usage in aggregated, anonymized form
  • Law enforcement or regulatory authorities — when required by applicable law, court order, or to protect the rights and safety of the Company or third parties

4.3 All third-party service providers are contractually bound to process personal data only on our instructions and in compliance with applicable data protection laws.

5.International Data Transfers

5.1 Our primary operations are based in the United States. If you access the Site from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, your personal data may be transferred to and processed in the United States.

5.2 For transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission or equivalent mechanisms to ensure adequate protection of your data.

6.Data Retention

We retain your personal data for the following periods:

  • Order inquiry data (name, email, phone, cart contents): retained for 3 years from the date of inquiry, after which it is permanently deleted or irreversibly anonymized.
  • Server access logs (IP address, access timestamps): retained for 90 days, after which IP addresses are anonymized.
  • Analytics data: retained by Google Analytics for 26 months in accordance with Google's data retention policies.
  • Legal compliance records: retained for the period required by applicable law, typically 7 years.

7.Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data, subject to applicable legal obligations.
Right to Restriction of Processing
Request that we limit how we use your data in certain circumstances.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Object
Object to processing based on legitimate interests, including profiling.

To exercise any of these rights, submit a written request to privacy@exoticpuppymart.com. We will respond within 30 days. We may request verification of your identity before processing your request.

8.Data Security

8.1 We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted transmission via HTTPS (TLS 1.2+), access controls, and regular security reviews.

8.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable law.

9.Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that personal data from a minor has been collected without appropriate parental consent, we will delete that data promptly. If you believe we have inadvertently collected data from a child, please contact us at privacy@exoticpuppymart.com.

10.Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. For material changes, we will provide notice by email or a prominent announcement on the Site at least 14 days before the change takes effect. We encourage you to review this policy periodically.

11.How to Complain

If you believe we have not complied with applicable data protection laws, you have the right to lodge a complaint with your local data protection supervisory authority. For EEA residents, this is the data protection authority in your country of residence. For US residents, relevant complaints may be directed to the Federal Trade Commission (FTC) or applicable state authorities.