Privacy Policy

Effective Date: August 29, 2026

This Privacy Policy explains how RIZMOS LIMITED, a company registered in Hong Kong, doing business as meowlyco (“we,” “us,” or “our”), collects, uses, and shares personal information when you visit our website, place an order, or contact our support team. It applies to our website and our customer communications. It does not apply to third-party sites we may link to.

We wrote this policy to satisfy the California Consumer Privacy Act as amended by the CPRA, along with the privacy laws of Colorado, Virginia, Connecticut, Utah, Texas, and other states. meowlyco is operated by RIZMOS LIMITED, a Hong Kong company, and sells only into the United States: we ship pet toys, treats, and everyday supplies to customers in the 48 contiguous United States, and we do not sell to customers outside the US. Because our team and our fulfillment partners are outside the United States, your personal information leaves the country when you place an order – the International Data Transfers section below explains exactly where it goes.

Information We Collect – Notice at Collection

The table below lists the categories of personal information we collect, where each category comes from, why we collect it, who we share it with, and how long we keep it. We have collected these categories within the last 12 months, and we do not collect sensitive personal information beyond what appears below.

Category of personal information	Examples	Source	Business purpose	Third parties we share it with	Retention period
Identifiers	Name, email address, phone number, billing and shipping addresses	You, when you place an order, create an account, or contact us	Processing and delivering orders, account management, customer service	Shopify (our e-commerce platform), fulfillment partners (shipping), payment processors (billing verification)	As long as your account is active, plus up to 7 years for order records required for tax and accounting
Commercial information	Order history, items purchased, returns, refunds	You, generated when you shop with us	Fulfilling orders, processing returns and refunds, fraud prevention, required record keeping	Shopify, fulfillment partners, payment processors (for refunds and disputes)	Up to 7 years for tax and accounting records
Payment data	Payment method type, transaction confirmation, last four digits of a card. Full card numbers are handled by our payment processors – we never see or store them	You, entered directly into checkout forms operated by our payment processor	Processing payments and refunds, preventing fraud	Stripe and Shopify Payments	Transaction records kept up to 7 years; full card data is never stored by us
Internet activity	Pages viewed, device and browser type, IP address, cookies, analytics data collected through our store platform	Automatically, from your browser and our analytics tools	Keeping the site secure, measuring site performance, improving navigation and content	Shopify, as our platform and analytics provider	Analytics data kept in aggregate or deleted per our provider’s schedule, typically no longer than 26 months
Customer service communications	Emails, order inquiries, complaint details	You, when you contact support	Answering questions, resolving order issues, improving service quality	None beyond our email and hosting providers acting as service providers	Up to 3 years after the matter is closed
Marketing preferences	Newsletter opt-in status and email engagement (opens, clicks), if you subscribe	You, when you opt in to our newsletter	Sending our email newsletter to subscribers who asked for it	Shopify Email, our email newsletter service	Until you unsubscribe, then suppressed to honor your opt-out

How We Use Information

We use the personal information above to:

Process, ship, and deliver your orders, and send order and shipping confirmations;
Process payments, refunds, and returns;
Respond to your questions and support requests;
Send our email newsletter, but only if you opted in;
Keep our website secure and detect fraud;
Measure and improve how the site works, using analytics; and
Meet legal obligations, such as tax and accounting record keeping.

We do not send marketing text messages. We do not use personal information for automated decisions that produce legal or similarly significant effects.

Legal Bases for Processing

In plain terms, we process your information on three bases:

Contract performance: we need your name, addresses, and payment confirmation to fulfill the order you placed.
Legitimate business operations: we keep records, prevent fraud, secure the site, and analyze site performance so the store runs properly.
Consent: we send marketing emails only if you opt in, and you can withdraw consent at any time by unsubscribing.

Cookies

We use two kinds of cookies:

Essential cookies keep your cart working, keep you signed in, and protect checkout. The site cannot function without them.
Analytics cookies help us understand which pages people visit so we can improve the store.

You can control cookies in your browser settings. Most browsers let you block or delete cookies for specific sites or all sites. Look under “Privacy” or “Site settings” in Chrome, Firefox, Safari, or Edge. Blocking essential cookies may prevent checkout from working.

Global Privacy Control (GPC)

We honor Global Privacy Control signals automatically. If your browser or browser extension sends a GPC signal, we treat it as a valid request to opt out of the “sharing” of your personal information for that browser, with no further action needed from you. Learn more on our Do Not Sell or Share My Personal Information page.

How We Share Information

We do not sell your personal information for money. We share personal information only as needed to run the store:

Store platform: Shopify hosts this store, processes orders, and provides our analytics.
Fulfillment partners: we send your name and shipping address to our fulfillment partners’ warehouses in mainland China, who pack and dispatch your order, and to the US carriers (USPS or UPS) that deliver it to your door.
Payment processor: our payment processors handle your payments. They handle full card data; we never see or store full card numbers.
Email service: Shopify Email sends our newsletter to subscribers who opted in.
Legal reasons: we may disclose information when the law requires it, such as responding to a lawful subpoena.

Under the CPRA, some cookie-based analytics or advertising activity may count as “sharing” of personal information even when no money changes hands. You can opt out at any time on our Do Not Sell or Share My Personal Information page, or by enabling Global Privacy Control in your browser.

Data Retention

We keep personal information only as long as we need it for the purposes listed above, and then we delete or de-identify it. The retention periods in the Notice at Collection table are our standard schedule. Order and transaction records are kept up to 7 years because tax and accounting rules require it. When you ask us to delete your data, we delete everything we are not legally required to keep.

Security

We protect your information with reasonable technical and organizational measures. Our site uses HTTPS with TLS encryption. Payments are processed by third-party payment providers that maintain PCI DSS compliance, and we never store full card numbers. No method of transmission or storage is completely secure, so we cannot promise absolute security, but we work to protect your data and will notify you as required by law if a breach affects you.

Your California Privacy Rights

If you live in California, the CCPA/CPRA gives you these rights:

Right to know and access: you can ask what personal information we collect, use, and share about you, and receive a copy of it.
Right to delete: you can ask us to delete your personal information, subject to legal exceptions such as records we must keep for tax purposes.
Right to correct: you can ask us to fix inaccurate personal information.
Right to opt out of sale or sharing: we do not sell personal information for money, and you can opt out of any cookie-based “sharing” at Do Not Sell or Share My Personal Information.
Right to limit use of sensitive personal information: we do not collect sensitive personal information as defined by the CPRA beyond what is needed to process payments through our processors, and we do not use or disclose it for purposes that would require a limit option.
Right to non-discrimination: we will never deny you service, charge different prices, or reduce quality because you exercised a privacy right.

Authorized agents: you may use an authorized agent to submit a request for you. We will ask the agent for proof of your written permission, and we may ask you to verify your identity directly.

Verification: to protect your data, we verify requests by matching the information you provide (such as your name, email address, and a recent order number) against our records. We only ask for what we need to verify you. We do not require a government ID for opt-out requests.

Response time: we respond to verified requests within 45 days. If we need more time, we may take one additional 45-day extension, and we will tell you why before the first period ends.

Other State Privacy Rights

Residents of Colorado, Virginia, Connecticut, Utah, Texas, and other states with comprehensive privacy laws have similar rights, including the right to access, correct, and delete personal information, the right to data portability, and the right to opt out of targeted advertising and the sale of personal data. We extend the rights described above to all US customers, regardless of state.

Right to appeal: if we decline your privacy request, you may appeal our decision. Email support@meowlyco.com with the subject line “Privacy Appeal” and tell us why you disagree. We respond to appeals within 45 days. If you are not satisfied with our response to your appeal, you may contact your state Attorney General.

International Data Transfers

meowlyco is operated by RIZMOS LIMITED, a Hong Kong company, so your personal information is transferred outside the United States when you shop with us. Specifically:

Hong Kong – RIZMOS LIMITED manages orders, customer service, and this website from Hong Kong. Order records and support messages are accessed and stored there.
Mainland China – we send your name and shipping address to our fulfillment partners so they can pack and dispatch your parcel.
United States – carriers (USPS or UPS) receive your name and address to complete delivery, and our payment processors handle your card data.

Privacy laws in Hong Kong and in mainland China are not the same as the laws of your state, and no international framework such as the EU-US Data Privacy Framework applies to these transfers. We transfer only what is needed to fulfil your order and to provide the services described in this policy, under contracts that require each recipient to protect your information and use it only on our instructions. The rights described in this policy apply to your information wherever it is processed, and you can exercise them at any time by emailing support@meowlyco.com.

Children’s Privacy

Our site is for adults 18 and older. Our products are for pets, but our customers are adult humans. We do not knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, email support@meowlyco.com and we will delete it.

Text Messages

We do not send marketing text messages, and we do not collect phone numbers for SMS marketing.

How to Exercise Your Rights

Email support@meowlyco.com with the subject line “Privacy Request”;
Tell us which right you want to exercise (know, access, delete, correct, or opt out); and
Include the name and email address you used with us, and an order number if you have one, so we can verify your request.

We reply to emails within 24 business hours. Submitting a request is always free.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and change the Effective Date at the top. For significant changes, we will give clearer notice, such as a notice on our homepage or an email to subscribers.

Contact Us

Registered company: RIZMOS LIMITED (Hong Kong)
Registered office: Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong
Director and legal representative: Nguyen Trong Doan
Privacy contact: support@meowlyco.com (we reply within 24 business hours)