Privacy policy

Last updated: 24 October 2026

This policy explains how The Cuddly Cub, operated by Aashan Shoukat as an individual sole trader in Pakistan, collects and uses personal information when you visit this website, place an order or contact us.

1. Who controls your information

The data controller is:

Use the contact details above for privacy questions or requests.

2. Information we collect

We may collect your name, billing and delivery addresses, email address, telephone number, order and return history, correspondence, account information, IP address, device/browser data, cookie identifiers and fraud-prevention signals. Payment providers process full card or wallet credentials; we normally receive only transaction status and limited payment references.

3. Why we use it

• to accept payment, fulfil and deliver orders, provide support and handle returns;
• to create and secure customer accounts where requested;
• to meet tax, accounting, consumer-protection and other legal obligations;
• to prevent fraud, abuse and security incidents;
• to operate, measure and improve the website; and
• to send marketing only where permitted and with any consent required by law.

4. Legal bases

Depending on where you live, we rely on performance of a contract, compliance with legal obligations, our legitimate interests in running and securing the store, and consent where required. You may withdraw consent at any time without affecting earlier lawful processing.

5. Who receives information

We share only what is reasonably necessary with WooCommerce/hosting providers, payment processors, delivery carriers, customer-support and email providers, accountants, professional advisers, fraud-prevention providers and public authorities where legally required. Their own privacy notices may also apply.

6. International transfers

Some providers may process information outside your country. Where data-protection law requires it, we use an approved transfer mechanism and appropriate safeguards. Contact us for further information about relevant safeguards.

7. Retention

We keep order and tax records for the period required by applicable law, correspondence for as long as needed to resolve an issue, and account information while the account remains active or as necessary for legal claims and security. We then delete or anonymise it where reasonably possible.

8. Your rights

Depending on local law, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. We may need to verify your identity. You may also complain to the data-protection authority where you live or where an issue occurred.

9. Cookies and analytics

Necessary cookies support basket, checkout, security and account functions. Non-essential analytics or advertising technologies should not run until any consent required in your location has been obtained. See our Cookie policy for more detail.

10. Children

This store is intended for purchases by adults. We do not knowingly ask children to create accounts or submit personal information without appropriate authority.

11. Security and changes

We use proportionate technical and organisational measures, but no online service is completely risk-free. We may update this policy to reflect legal, technical or business changes and will post the revised date here.