PAWIDOLS™

Privacy Policy

Effective Date: April 27, 2026 — Last Updated: April 27, 2026

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. 1 WHO WE ARE

Data Controller

LIMI SOLVISE - FZCO
A1 Dubai Digital Park
Dubai Silicon Oasis, UAE
Email: contact@pawidols.com

LIMI SOLVISE - FZCO is the data controller responsible for your personal information. Our Data Protection Officer can be reached at the address above or by email at contact@pawidols.com.

1. 2 SCOPE

This Policy covers personal information we collect when you:

• visit, register, or participate in contests on pawidols.com;
• submit a lead through our Typeform on shop.pawidols.com or a related landing page;
• place an order on shop.pawidols.com;
• subscribe to our email or SMS / text-message program;
• contact our support team or interact with our social media accounts.

This Policy does not cover third-party websites or services we link to. Third parties have their own privacy policies, which we encourage you to review.

1. 3 INFORMATION WE COLLECT

3.1 Information you give us

• Account & profile data: name, email address, password, country, language preference, and (optionally) profile photo.
• Contest entries: photos of pets that you upload, captions, and any voluntary biographical details (e.g., pet name, age, breed).
• Shop lead / order data: name, pet’s name, pet photo, shipping address, billing address, telephone number, and any custom personalization details you submit through Typeform or at checkout.
• Payment data: card details, billing address, and payment confirmation tokens. Card numbers are handled directly by our payment processors (Stripe and PayPal) and are not stored on our servers.
• Communications: the content of emails, support tickets, chat sessions, and survey responses you send us.
• SMS opt-in data: mobile phone number, the consent text you saw, the date/time of consent, and the page or flow where consent occurred (see Section 7).

3.2 Information we collect automatically

• Device & log data: IP address, browser type, operating system, device identifiers, referring URL, pages viewed, timestamps, and crash logs.
• Cookies & similar technologies: see Section 8.
• Engagement data: which contests, entries, products, and emails you interacted with; vote bundles purchased; share actions; achievement unlocks.
• Approximate location: derived from IP address (used for fraud prevention and to comply with regional restrictions).

3.3 Information from third parties

• Social-login providers (e.g., Facebook): if you sign in with a social account, we receive the basic profile fields you authorize (name, email, profile picture).
• Payment processors: transaction status, fraud signals, and dispute information from Stripe and PayPal.
• Shipping & fulfillment partners: delivery status updates for Shop orders.
• Advertising platforms: aggregated campaign-performance data from Meta (Facebook/Instagram) Ads.

1. 4 HOW WE USE PERSONAL INFORMATION

We use personal information to:

1. Operate the Services — create and authenticate your account, run contests, count votes, calculate leaderboards, award prizes, fulfill Shop orders, and provide customer support.
2. Process payments — through Stripe and PayPal, including fraud detection and chargeback handling.
3. Communicate with you — send transactional emails (order confirmations, vote receipts, prize-claim instructions, password resets), event-driven contest updates, and — with your consent — marketing emails and SMS.
4. Personalize your experience — show you relevant contests, recommend products in the Shop, and pre-fill forms with information you’ve previously provided.
5. Improve and secure the Services — monitor performance, debug, prevent fraud, detect VPN/proxy abuse, enforce contest rules, and protect against unauthorized access.
6. Comply with law — meet our tax, accounting, anti-fraud, anti-money-laundering, and consumer-protection obligations.
7. Enforce our Terms — investigate violations, resolve disputes, and protect our rights and the rights of other users.

1. 5 LEGAL BASES FOR PROCESSING (EEA / UK USERS)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): to register your account, run the contest you enter, fulfill an order you place, and provide support.
• Consent (Art. 6(1)(a)): for marketing emails, marketing SMS, non-essential cookies, and any optional analytics.
• Legitimate interests (Art. 6(1)(f)): to secure the Services, prevent fraud, develop and improve features, and run aggregate analytics. We balance these interests against your privacy rights.
• Legal obligation (Art. 6(1)(c)): to retain financial records, respond to lawful requests from authorities, and meet consumer-protection requirements.

1. 6 HOW WE SHARE PERSONAL INFORMATION

We share personal information only with the categories of recipients below. We do not sell your personal information.

6.1 Service providers (processors)

We use carefully selected vendors that process data on our behalf under written contracts:

Purpose	Provider
Payment processing	Stripe, PayPal
Shop platform & checkout	Shopify
Lead capture	Typeform
Email (list management & broadcast)	Mailchimp
Email (transactional / automated)	Mandrill
SMS — Shop marketing (toll-free)	Klaviyo
SMS — contest & transactional (10DLC)	Twilio
Push notifications	OneSignal
Customer chat	Tawk.to
Support tickets	Freshdesk
Social-media moderation	NapoleonCat
Hosting & infrastructure	Cloud hosting providers
Invoicing & accounting	EasyBill, DATEV (via our external tax firm)

These providers may only use your data to perform the services we’ve contracted them for.

6.2 Other recipients

• Advertising platforms (Meta) — we share hashed identifiers (e.g., hashed email) with Meta for ad targeting and campaign measurement. You can opt out via your Meta privacy settings or by adjusting your cookie preferences.
• Legal & safety — we may disclose information when required by law, in response to lawful requests by public authorities, or to protect the rights, property, or safety of LIMI SOLVISE - FZCO, our users, or others.
• Corporate transactions — if LIMI SOLVISE - FZCO is involved in a merger, acquisition, asset sale, or financing, your information may be transferred to the counterparty under confidentiality obligations. We will notify you as required by law.

6.3 What we never do

• We do not sell your personal information.
• We do not share, sell, rent, or otherwise disclose mobile phone numbers, SMS opt-in data, or SMS consent records to third parties or affiliates for their marketing, promotional, or advertising purposes. This information is used solely to operate our Text Program, comply with applicable law, and meet carrier requirements (see Section 7).

1. 7 SMS / TEXT MESSAGING PROGRAM

This section describes our text-messaging programs (collectively, the “Text Program”). It applies to all SMS and MMS messages we send across two channels:

• Twilio (10DLC long-code numbers) — used for contest-related and transactional messages on pawidols.com (e.g., vote-purchase confirmations, deal-day alerts, prize-claim instructions, account-security notices).
• Klaviyo (toll-free numbers) — used for Shop messages on shop.pawidols.com (e.g., lead-capture follow-ups after Typeform submission, order confirmations, shipping updates, abandoned-cart reminders, marketing and promotional offers).

The disclosures below — including consent, message types, frequency, STOP/HELP, rates, and the prohibition on sharing mobile information with third parties for marketing — apply equally to both channels and both number types.

7.1 How you opt in

You may opt in to receive text messages from us in any of the following ways:

• Shop lead form (Typeform): when you submit your pet’s photo on shop.pawidols.com or a linked landing page, you may check a box agreeing to receive SMS notifications about whether your pet was selected and follow-up offers.
• Checkout (Shopify): when you place an order on shop.pawidols.com, you may consent to order, shipping, and marketing texts.
• Account settings (pawidols.com): when you register or update your profile, you may consent to contest-related notifications.
• Keyword opt-in: by texting a designated keyword (e.g., JOIN, PAW) to our short or toll-free number.

In every case, consent is express and is not a condition of purchase or contest entry. You will see the program description, message frequency, “Msg & data rates may apply,” and a link to this Privacy Policy and to our Terms of Use before you confirm consent. We retain a record of your consent (the language you saw, the timestamp, and the source).

7.2 What messages you’ll receive

Depending on the program(s) you opt into, messages may include:

• Shop transactional & lead notifications (e.g., order confirmations, shipping updates, abandoned-cart reminders).
• Contest transactional (e.g., vote-purchase confirmations, deal-day alerts for contests you’ve entered, prize-claim instructions, account-security notices).
• Marketing & promotions (e.g., new contest launches, flash-sale “Deal Day” reminders, new Shop product launches, exclusive offers).

Sample message:
PawIdols: Hi Alex! Your pet has been selected. See your custom calendar here: https://shop.pawidols.com/p/abc123. Reply STOP to unsubscribe, HELP for help. Msg & data rates may apply.

7.3 Message frequency

Message frequency varies by program but typically does not exceed 8 messages per month for the marketing program and is event-driven (sent only when relevant) for the transactional and contest programs.

7.4 Opting out — STOP

You can cancel the Text Program at any time. Reply STOP to any message you receive from us. After you reply STOP, you will receive one final message confirming you’ve been unsubscribed; after that, you will not receive additional texts from that program. If you want to rejoin, sign up as you did the first time.

7.5 Help — HELP

If you need help, reply HELP to any message, or contact us at contact@pawidols.com. You can also visit our help center linked from the Services.

7.6 Carriers and rates

Message and data rates may apply. Your wireless carrier’s standard rates apply to all SMS/MMS messages sent or received. LIMI SOLVISE - FZCO is not responsible for any carrier charges you incur.

Carrier disclaimer: Carriers (including but not limited to AT&T, T-Mobile, Verizon, Sprint, U.S. Cellular, and other wireless carriers) are not liable for delayed or undelivered messages.

7.7 No third-party sharing of mobile information

Mobile phone numbers, SMS consent records, and SMS opt-in data — including any information collected during opt-in such as the page or flow where consent occurred — will not be shared, sold, rented, or otherwise disclosed to third parties or affiliates for their own marketing, promotional, advertising, or data-monetization purposes.

We share this information only with our messaging service providers — Twilio (10DLC) and Klaviyo (toll-free) — and with the wireless carriers that route and deliver the messages, strictly to operate the Text Program and to comply with applicable law and carrier policy. These providers are bound by contract to use the data only to deliver our messages and may not use it for their own marketing purposes.

7.8 Eligibility

The Text Program is available to U.S. residents aged 18 or older. By opting in, you represent that you are 18+ and that the mobile number you provided is one you are authorized to use.

7.9 Changes to the Text Program

We may modify or terminate the Text Program at any time. Material changes will be posted on this page with an updated effective date. For the full SMS terms, see our Terms of Use.

1. 8 COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, and SDKs to:

• keep you signed in,
• remember your preferences,
• measure how the Services are used,
• run and measure advertising on Meta and other platforms,
• detect fraud and abuse.

You can manage cookies through your browser settings or our cookie banner (where required). Disabling some cookies may affect site functionality.

For users in the EEA, UK, and other jurisdictions that require it, non-essential cookies are set only after you give consent.

1. 9 INTERNATIONAL DATA TRANSFERS

LIMI SOLVISE - FZCO is based in Dubai, UAE. Several of our service providers are located in the United States or other countries. When we transfer personal data, we rely on appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission;
• adequacy decisions where applicable; and
• supplementary technical and organizational measures.

You can request a copy of the safeguards in place by emailing contact@pawidols.com.

1. 10 DATA RETENTION

We keep personal information only as long as necessary for the purposes for which it was collected:

• Account & contest data: for the life of your account, plus up to 36 months after closure (for fraud, dispute, and compliance reasons).
• Order & invoicing data: for the period required by German tax and commercial law (generally 10 years).
• SMS consent records & messaging metadata: while your subscription is active and for up to 36 months after your last message, unless a longer retention period is required by law.
• Marketing email lists: until you unsubscribe or are otherwise removed for inactivity.
• Support communications: up to 36 months after the ticket is closed.

When we no longer need personal information, we delete or anonymize it.

1. 11 YOUR RIGHTS

Depending on where you live, you may have the following rights regarding your personal information:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — ask us to delete your data, subject to legal-retention exceptions.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling and direct marketing.
• Withdraw consent — at any time, with no effect on processing already carried out.
• Lodge a complaint — with your local data-protection authority.

California residents have additional rights under the CCPA/CPRA, including:

• the right to know what personal information we collect, use, and disclose;
• the right to delete personal information we hold about you;
• the right to correct inaccurate personal information;
• the right to limit the use and disclosure of sensitive personal information;
• the right to opt out of “sales” and “sharing” of personal information; and
• the right to non-discrimination for exercising any of the above.

As stated in this Policy, we do not sell your personal information and we do not share mobile phone numbers, SMS opt-in data, or SMS consent records with third parties for cross-context behavioral advertising.

California’s “Shine the Light” law (Civil Code §1798.83) also lets California residents request information about our disclosure of personal information to third parties for their direct-marketing purposes. To make such a request, email contact@pawidols.com.

To exercise any of these rights, email contact@pawidols.com. We will respond within the time required by applicable law (generally 30 days under GDPR; 45 days under CCPA). An authorized agent may submit a request on your behalf if you provide written authorization.

1. 12 CHILDREN’S PRIVACY

The Services are not directed to children under 13 (or the minimum age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without proper consent, contact contact@pawidols.com and we will promptly delete it.

1. 13 SECURITY

We use administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity, including TLS encryption in transit, access controls, logging, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.

If we become aware of a personal-data breach that creates a high risk to your rights, we will notify you and the relevant supervisory authority as required by law.

1. 14 THIRD-PARTY LINKS

The Services may contain links to third-party websites and services. This Policy does not apply to those third parties. Please review their privacy policies before providing them with personal information.

1. 15 CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will:

• post the updated Policy on this page with a new “Last Updated” date, and
• where required, notify you by email or through the Services.

Continued use of the Services after the changes take effect means you accept the updated Policy.

1. 16 CONTACT US

Questions, concerns, or requests regarding this Policy or your personal information may be directed to our Data Protection Officer:

LIMI SOLVISE - FZCO
A1 Dubai Digital Park
Dubai Silicon Oasis, UAE
Email: contact@pawidols.com

You also have the right to lodge a complaint with a supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement.

This Privacy Policy is provided in English. If you read it in another language and notice a discrepancy, the English version controls.