Last updated: 11 October 2026
Who is responsible for your information?
Shuman Bah International Ltd, trading as Naughty Pets. Company number: 15391320. Registered address: Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London E14 9NN, United Kingdom. We are the controller of personal information collected through Naughty Pets. For questions or requests, email info@naughtypets.co.uk or write to our registered address. This notice covers naughtypets.co.uk, customer support, launch notifications, welcome rewards and hotel enquiries.
Information we collect
Depending on the service you use, we collect your name, email, contact details, account identifier and sign-in information; order and delivery details when ordering is available; messages and support history; and optional pet name and product interests. Hotel enquiries and nominations include hotel contact details, the information submitted and reward delivery details where needed.
Welcome rewards include your account, confirmed email, prize, personal code and claim status. Optional marketing records include your email, the consent wording and version, the time of your choice and confirmation, and withdrawal history. Technical service providers may process IP addresses, browser/device details and security logs to operate and protect the service.
Why we use it and our lawful bases
- Contract or steps requested before a contract: maintaining your account, handling enquiries, processing orders, delivery, returns and subscriptions when available.
- Consent: the launch notification you request and, separately, optional marketing emails. Non-essential tracking also requires consent where applicable.
- Legitimate interests: service security, preventing duplicate or fraudulent reward claims, managing hotel partnerships and nominations, responding to support requests and keeping appropriate operational records. We balance these purposes against your rights.
- Legal obligations: required accounting, tax, product safety and data protection records.
Providing an email for an account or reward does not automatically subscribe you to marketing. We do not sell your personal information or use it for automated decisions producing legal or similarly significant effects. The welcome wheel selects a discount using the published weighted probabilities.
Launch notifications and optional marketing
The launch list requests one notification about the product launch. General product news and offers require a separate, initially unticked marketing consent box. For the welcome offer, this consent is activated after email confirmation and completion of the claim. Leaving the marketing box unticked does not affect the reward.
You can withdraw marketing consent through your account, an unsubscribe link in a marketing email or by contacting info@naughtypets.co.uk. You can also ask us to remove you from the launch list by email. Withdrawal does not affect earlier lawful processing or stop necessary account, order and security messages. Marketing campaigns are not currently active; a suitable sending service and unsubscribe arrangements must be in place before they begin.
Who receives your information?
We share only what is needed with service providers: Lovable Cloud for hosting, accounts and data storage; our email delivery services for account and service messages; Stripe for personal reward codes and payments when activated; and Royal Mail for delivery when orders open. If you choose Google sign-in, Google processes sign-in data under its own notice. Our external font service may receive technical connection information when fonts load.
Authorised staff can access information needed for support and fulfilment. Professional advisers, regulators or authorities may receive information where legally required or necessary to protect legal rights. A future business transfer would require appropriate safeguards and notice. Sharing corporate ownership with ITSY Pets does not give permission to send you marketing from that brand.
Cookies and browser storage
We use cookies or similar browser storage to maintain sign-in, remember basket preferences and hotel attribution, and remember welcome-offer progress or dismissal. These are used for the functions you request or the operation of the service, not as permission to claim a prize. Clearing storage can remove preferences or require you to sign in again.
This notice does not grant consent for analytics, advertising pixels or other non-essential tracking. Before introducing such technologies, we must describe them and obtain any consent required under UK rules. You can clear or block browser storage through your browser settings; some requested functions may then stop working.
International transfers
Service providers may process information outside the UK. Where required, transfers must rely on an applicable adequacy regulation or approved safeguards, such as the UK International Data Transfer Agreement or UK Addendum, with the necessary assessment. Contact us for details of the applicable safeguards. Our provider locations and transfer arrangements must be confirmed in the final pre-launch review; we do not claim they have already been verified.
Security and retention
We restrict access and use reasonable technical and organisational measures, but no internet service can guarantee perfect security. Please do not email passwords or full payment-card details.
We keep information only for as long as necessary for the purpose described: account data while the account is required; launch-list information until notification or withdrawal and any necessary delivery record; marketing data until withdrawal or it is no longer needed; and order, tax, complaint and consent evidence for applicable legal or dispute periods. We review retention and minimise retained records. Category-specific retention periods and backup deletion times must be finalised before checkout and marketing campaigns launch.
When an erasure request is actioned, personal account and reward identifiers are removed or anonymised, subject to lawful retention requirements. An unused personal welcome code is disabled. A non-identifying reserved code record remains so the same code is not issued or redeemed again; it is not a retained personal prize history.
Your UK data protection rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability; object to processing based on legitimate interests; and withdraw consent. You can object to direct marketing at any time. Contact info@naughtypets.co.uk. We may need proportionate proof of identity and normally respond within one month; if a lawful extension is needed, we will explain it. Exercising your rights does not disadvantage you.
You may complain to the Information Commissioner's Office. You do not need to contact us first.
Children, third-party links and changes
Our account and purchasing services are intended for adults. If a child has provided personal information, contact us so we can investigate and remove it as appropriate. External websites and social networks have their own privacy practices. We update this notice when our practices change and will provide further notice where required.