Privacy policy
Last updated: 6 August 2026
Who we are
Two Feet Four Paws (“we”, “us”) operates 2feetfourpaws.com. For the purposes of UK GDPR we are the data controller.
Contact: hello@2feetfourpaws.com
Postal address: Virginia Water, Surrey, GU25 4RA
We are not required to appoint a Data Protection Officer and have not appointed one. Data protection enquiries are handled by the business owner at the address above.
What we collect
We keep collection to a minimum. Nothing is sold on this website, so we never collect payment details, delivery addresses or order histories.
Data you give us
- Email address and first name, if you subscribe to our newsletter or request a downloadable guide.
- Name, email address and message content, if you use the contact form or email us directly.
Data collected automatically
- Basic, aggregated analytics via Cloudflare Web Analytics. This is measured without cookies and without tracking you across other websites.
- Server and security logs, including IP addresses, processed by our hosting provider to serve pages, prevent abuse and protect the site from attack. These are not used to build a profile of you.
- Email engagement data, if you subscribe. Our email provider records whether an email was delivered, opened and whether links were clicked. We use this to see which content is useful and to remove inactive subscribers.
We do not collect special category data, we do not carry out profiling that produces legal effects, and we do not sell personal data.
Why we collect it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Sending the newsletter and the download you asked for | Consent, Article 6(1)(a) |
| Replying to a contact form message or email | Legitimate interests, Article 6(1)(f) |
| Understanding which guides are read, in aggregate | Legitimate interests, Article 6(1)(f) |
| Keeping the site secure and working | Legitimate interests, Article 6(1)(f) |
| Measuring whether our emails are useful | Legitimate interests, Article 6(1)(f) |
Where we rely on legitimate interests we have considered whether our interest is overridden by your rights, and concluded it is not, because the data involved is limited, the processing is what a visitor would reasonably expect, and you can object at any time. Ask us if you want a copy of that assessment.
Who we share it with
Each of the following acts as our processor, under contract, and may only use the data on our instructions.
| Provider | What they do | What they receive |
|---|---|---|
| MailerLite | Newsletter delivery and list management | First name, email address, engagement data |
| Formspree | Delivering contact form messages to us | Name, email address, message content |
| Cloudflare | Hosting, content delivery, security, cookieless analytics | Technical data including IP address |
We may also disclose personal data where required by law, by a court or by a regulator, or where necessary to establish, exercise or defend legal claims.
We do not sell personal data, and we do not share it for advertising.
International transfers
Some of our providers are based outside the United Kingdom or store data on servers outside it. Where personal data is transferred out of the UK we rely on one of the safeguards required by Chapter V of the UK GDPR:
- UK adequacy regulations, where the destination country has been recognised by the UK Government as offering an adequate level of protection; or
- the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, where adequacy does not apply.
Email us if you would like details of the safeguard applied to a specific provider.
Email marketing
We only send marketing emails to people who have asked for them. In line with the Privacy and Electronic Communications Regulations 2003:
- Sign-up is always an active opt-in. We never use pre-ticked boxes, and we never add you to the newsletter simply because you contacted us.
- Where you subscribe to receive a free download, we tell you at the point of sign-up that you are also joining the newsletter. If you would rather have the download alone, email us and we will send it and remove you.
- Every email contains a one-click unsubscribe link and identifies us as the sender.
- Unsubscribing takes effect immediately.
How long we keep it
| Data | Retention |
|---|---|
| Newsletter subscribers | Until you unsubscribe, or after 24 months of no engagement, whichever is sooner |
| Unsubscribe records | Held indefinitely, so we do not email you again |
| Contact form messages and correspondence | 12 months from your last message, unless needed longer for a dispute |
| Aggregated analytics | Held in aggregate only. No individual record exists. |
| Server and security logs | As set by our hosting provider, typically no more than 30 days |
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, transfer it to another provider, or object to us using it. You can withdraw consent to marketing at any time using the unsubscribe link in any email. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.
To exercise any of these rights, email hello@2feetfourpaws.com. We will respond within one month. If a request is complex we may extend that by up to two further months, and we will tell you if we do. There is no charge. We may ask you to confirm your identity first, so that we do not disclose your data to somebody else.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the regulator:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. ico.org.uk
Cookies and analytics
This site sets strictly necessary cookies only. These are the cookies needed to serve pages, keep the site secure, and run the newsletter and contact forms. Regulation 6 of the Privacy and Electronic Communications Regulations 2003, as amended by the Data (Use and Access) Act 2025, exempts strictly necessary storage and access from the consent requirement, which is why you will not see a cookie banner here.
We do not use advertising cookies, cross-site or social media tracking pixels, Google Analytics, or fingerprinting.
Cloudflare Web Analytics, which counts page views, does not set a cookie and stores nothing on your device. It does transmit your IP address and browser user-agent to Cloudflare so that a visit can be attributed to a rough location and device type. That is a processing of personal data, so we set it out here rather than leave it unsaid. It is not used to identify you, build a profile, or follow you to another website.
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site working.
If we later add a tool that sets tracking cookies, we will update this section and add a consent banner before any such cookie is set.
Affiliate links and Amazon
Our guides contain affiliate links to Amazon.co.uk. When you click one you leave this website, and Amazon may set its own cookies to record that the visit came from us. That processing is carried out by Amazon as a separate controller under its own privacy notice. We never receive your name, your Amazon account details, or a list of what you bought. We see anonymous, aggregated commission reporting only. Our full commercial position is set out in our affiliate and editorial disclosure.
Security
This site is served over HTTPS. We choose providers that maintain recognised security standards, limit access to personal data, and use strong authentication on the accounts that hold it. No system is perfectly secure and we cannot guarantee that data sent over the internet is completely safe in transit. If a personal data breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner’s Office within 72 hours and, where the risk is high, tell you directly.
Children
This website is intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has given us their data, email us and we will delete it.
Changes
We review this policy at least once a year and whenever we change the tools we use. We will post any changes on this page and update the date at the top. Where a change is significant we will say so on the website and, if you are a subscriber, by email.