Privacy policy

Last updated 17 September 2026

Who controls your personal information

Hypora Inc., trading through the Loyal Nook brand, is the controller of the personal information covered by this policy.

Contact details:

Hypora Inc.
735-3105 Promenade du Quartier Saint-Martin
Laval, Quebec H7T 0N7
Canada
contact@loyalnook.co.uk

This policy explains how we use personal information when you visit loyalnook.co.uk, contact us or place an order.

Information we collect

Depending on how you use the store, we may collect:

• identity and contact details, including your name, billing address, delivery address, email address and telephone number if you provide one;
• order and transaction details, including products, price, payment status, refunds and delivery information;
• account details and preferences if you create or use a customer account;
• messages, support requests, reviews and other information you send us;
• device, browser, IP address, cookie, usage and security information; and
• marketing preferences and records of consent.

Payment providers process your payment details. We normally receive confirmation and limited transaction information rather than your full payment card number.

How we use information and our legal bases

We use personal information only when we have a lawful basis under UK data protection law.

• Contract: to take payment, process and deliver orders, provide order updates, handle cancellations, returns and refunds, and respond to service requests connected with a purchase.
• Legal obligation: to keep records, meet tax and accounting duties, respond to lawful requests, protect consumer rights and comply with other legal requirements.
• Legitimate interests: to secure the store, prevent fraud, manage the business, improve customer service, diagnose technical problems and establish or defend legal claims. We balance these interests against your rights.
• Consent: to send optional electronic marketing and to use non-essential analytics or advertising cookies where consent is required. You may withdraw consent at any time.

If we ask for information needed to fulfil an order and you do not provide it, we may be unable to accept or complete the order.

How we share information

We share personal information only as needed for the purposes above. Recipients may include:

• Shopify, which hosts the store and supports ecommerce functions;
• payment processors and fraud-prevention providers;
• suppliers, fulfilment partners and delivery carriers that need information to prepare or deliver an order;
• email, customer support, IT, security, analytics and professional service providers;
• advertising or marketing providers where you have consented or another lawful basis applies; and
• regulators, courts, law enforcement or other parties when disclosure is required by law or needed to protect legal rights.

Shopify also processes certain information as an independent controller for its own platform services, as described in its Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers. Rights relating to that processing can also be exercised through Shopify's privacy portal at https://privacy.shopify.com. We do not sell personal information for money.

International transfers

Hypora Inc. is based in Canada. Shopify and other providers may process information in Canada, the United States and other countries. The delivery details needed to fulfil an order may also be sent to suppliers or carriers in China or another dispatch country.

The applicable legal protection depends on the recipient and destination. UK adequacy regulations apply only where their conditions are met; other restricted transfers require appropriate safeguards or another permitted legal basis. Contact contact@loyalnook.co.uk for details about recipients and the transfer arrangements relevant to your information. This notice does not mean that every destination provides the same protection as the UK.

Retention

Retention depends on the type of information and why it is needed. We assess the time necessary to fulfil orders and resolve support issues, applicable accounting and tax recordkeeping periods, fraud risks and legal claim periods. Information needed for a dispute or legal obligation may be retained until that matter ends. Marketing information is retained while the relevant permission applies, with a limited suppression record after an opt-out so that we can respect your choice. Ask us for the retention criteria applicable to your information or to request deletion; legal retention duties may prevent immediate deletion of some records.

Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• access your personal information;
• correct inaccurate or incomplete information;
• ask for deletion;
• restrict processing;
• object to processing based on legitimate interests or to direct marketing;
• receive information you provided in a portable format; and
• withdraw consent at any time, without affecting earlier lawful processing.

To exercise a right, email contact@loyalnook.co.uk. We may ask for information needed to verify your identity. We normally respond within one month. Some rights have legal conditions or exceptions.

You may complain to the United Kingdom Information Commissioner's Office at ico.org.uk at any time. You do not have to complain to us first.

Children

The store is intended for adults purchasing pet products. We do not knowingly collect personal information directly from children.

Security and changes

We use reasonable administrative, technical and organisational measures to protect personal information. No online service can guarantee absolute security.

We may update this policy when our practices or legal obligations change. We will post the current version with its effective date.