Last Updated: August 14, 2026

FloofRiot respects your privacy and is committed to handling personal information responsibly, transparently, and securely.

This Privacy Policy explains how FloofRiot collects, uses, stores, shares, transfers, and protects personal information when you visit our website, create an account, place an order, communicate with us, request support, or otherwise use our services.

It also explains the privacy rights that may be available to you under applicable laws, including the Saudi Personal Data Protection Law (PDPL), the European Union General Data Protection Regulation (GDPR), applicable United Kingdom data-protection law, and certain United States privacy laws.

1. Who We Are

FloofRiot is an online retail store operated by Nazmul Hasan Ridoy, based in Riyadh, Saudi Arabia.

Website: floofriot.com
Privacy Contact: support@floofriot.com

For purposes of applicable data-protection laws, FloofRiot generally determines the purposes and means for which personal information collected through our store is processed and therefore acts as the relevant controller or equivalent responsible entity where applicable.

2. Personal Information We Collect

The information we collect depends on how you interact with FloofRiot.

Account and Identity Information

We may collect:

• name;

• email address;

• username;

• account credentials;

• account preferences; and

• other information associated with your customer account.

Order and Transaction Information

When you place or attempt to place an order, we may collect:

• products ordered;

• order number;

• order history;

• billing address;

• shipping address;

• telephone number;

• email address;

• selected payment method;

• transaction status;

• refund information;

• cancellation information; and

• information necessary to resolve payment or order disputes.

WooCommerce stores information necessary to manage ecommerce transactions and customer accounts.

Technical and Usage Information

Depending on your settings and consent choices, we may collect or receive:

• IP address;

• browser type;

• device type;

• operating system;

• approximate geographic location;

• referring website or source;

• pages viewed;

• website interactions;

• session information;

• cookie identifiers;

• consent preferences;

• security information; and

• analytics information.

Communications and Support Information

When you contact us, we may collect:

• your name;

• email address;

• order number;

• message content;

• return or refund information;

• photographs or videos you provide;

• customer-service correspondence; and

• other information you voluntarily submit.

3. Whether Providing Information Is Mandatory

Certain personal information is necessary for us to provide particular services.

For example, we generally need information such as your name, shipping address, contact details, order information, and payment-related information to process and deliver an order.

If you do not provide information that is necessary for a transaction or legal requirement, we may be unable to:

• complete your purchase;

• deliver your order;

• create or maintain your account;

• process a refund;

• respond to certain requests; or

• provide another requested service.

Information used only for optional analytics, preferences, or similar non-essential purposes may be optional where applicable law requires a choice.

4. How We Use Personal Information

We may process personal information to:

• process purchases;

• fulfill and ship orders;

• communicate about orders;

• create and manage customer accounts;

• process payments and refunds;

• investigate payment disputes and chargebacks;

• provide customer support;

• administer returns and refunds;

• prevent fraud and abuse;

• detect spam or malicious activity;

• maintain website security;

• operate shopping-cart functionality;

• improve website usability and performance;

• analyze traffic and visitor activity where permitted;

• maintain business and transaction records;

• comply with tax, accounting, customs, consumer-protection, and regulatory requirements;

• establish, exercise, or defend legal claims; and

• protect FloofRiot, our customers, service providers, and others.

We do not intentionally use personal information for purposes incompatible with those described in this Privacy Policy unless permitted or required by applicable law.

5. Legal Bases for Processing

The applicable legal basis depends on the processing activity and the law that applies.

Where GDPR, UK data-protection law, Saudi PDPL, or similar rules require a legal basis, our processing may rely on one or more of the following:

Performance of a Contract

We process information where reasonably necessary to:

• process your order;

• arrange delivery;

• manage your account;

• provide requested customer service; or

• administer a return, refund, or cancellation.

Legal Obligations

We may process information where necessary to comply with:

• tax requirements;

• accounting obligations;

• customs rules;

• consumer-protection obligations;

• regulatory requirements;

• lawful government requests; or

• other applicable legal obligations.

Legitimate Interests

Where legally available, we may rely on legitimate interests such as:

• preventing fraud;

• securing our website;

• preventing abuse;

• providing customer service;

• maintaining business records;

• improving our services; and

• protecting or enforcing legal rights.

We consider whether those interests are overridden by applicable rights and freedoms where the relevant law requires such an assessment.

Consent

Where consent is required, we may rely on your consent for activities such as:

• non-essential cookies;

• certain analytics technologies;

• optional tracking technologies; or

• other processing that legally requires consent.

Where processing is based on consent, you may withdraw that consent as described in this policy.

6. WooCommerce and WordPress

FloofRiot operates using WordPress and WooCommerce.

These systems help us manage:

• products;

• shopping carts;

• checkout;

• customer accounts;

• orders;

• shipping;

• refunds;

• transaction records; and

• ecommerce administration.

Information entered during account creation, checkout, or order management may therefore be stored within our WordPress/WooCommerce environment.

7. Payments and PayPal

FloofRiot uses PayPal and PayPal-supported payment services to process eligible transactions.

Depending on the payment method, PayPal may receive information including:

• your name;

• email address;

• billing information;

• shipping information;

• order details;

• transaction value;

• payment information; and

• fraud-prevention information.

Where card information is entered directly into a PayPal-controlled payment interface, FloofRiot generally does not need to receive or store your complete payment-card number.

For relevant payment-processing activities, FloofRiot and PayPal may act as independent controllers of the personal information each party processes.

PayPal determines its own purposes and methods for certain payment, fraud-prevention, regulatory, and account-processing activities and processes personal information under its own privacy terms.

Customers should also review the applicable PayPal Privacy Statement for information about PayPal’s processing activities.

8. CJ Dropshipping and Order Fulfillment

FloofRiot uses third-party fulfillment providers, including CJ Dropshipping, to source, prepare, ship, and deliver certain orders.

To fulfill an order, we may disclose information reasonably necessary for fulfillment, including:

• customer name;

• shipping address;

• telephone number;

• email address where operationally required;

• ordered products;

• variation information;

• order information; and

• shipping instructions.

CJ Dropshipping may process this information as part of its fulfillment and logistics services and under its own applicable privacy terms.

9. Shipping, Carriers, and Logistics Providers

Our fulfillment partners may provide information to:

• postal services;

• couriers;

• freight or logistics companies;

• last-mile delivery providers;

• customs agents; and

• other organizations involved in transporting or clearing an order.

These parties may receive information necessary for delivery, such as:

• recipient name;

• delivery address;

• telephone number;

• tracking details;

• shipment information; and

• customs-related information.

10. Google Analytics and Google Site Kit

FloofRiot uses Google Analytics, including through Google’s Site Kit integration, to understand website usage and performance.

Depending on configuration and your consent choices, Google Analytics may process information such as:

• device information;

• browser information;

• approximate geographic information;

• referral source;

• pages viewed;

• interactions;

• session information; and

• IP-related technical information.

Where consent is legally required, analytics technologies are controlled through our consent-management system and should not be activated until the required consent has been obtained.

You can review or change applicable cookie preferences through our website’s consent controls.

11. Google reCAPTCHA

FloofRiot may use Google reCAPTCHA to protect forms, customer accounts, login functions, and other website features from:

• automated spam;

• bots;

• fraudulent activity;

• malicious traffic; and

• security abuse.

Google may process technical information relating to your device, browser, IP address, and interactions to evaluate whether activity appears to originate from a legitimate visitor or automated system.

Google processes such information under its applicable privacy and service terms.

12. Contact Forms

Our website may use tools such as Forminator to process forms.

If you contact us through a website form, we may collect:

• name;

• email address;

• message;

• order number;

• uploaded files where permitted; and

• other information you choose to provide.

We use this information to respond to inquiries, provide support, manage disputes, and maintain appropriate records.

13. Cookies and Similar Technologies

FloofRiot uses cookies and similar technologies for purposes including:

• essential website functions;

• shopping-cart operations;

• customer accounts;

• login sessions;

• website security;

• preference storage;

• analytics;

• performance; and

• other technologies implemented on the site.

We use Complianz to help manage cookie consent and visitor choices.

Where required by applicable law, non-essential cookies are blocked until the necessary consent has been obtained.

Visitors can use the cookie banner or available consent-management controls to:

• accept applicable cookies;

• reject optional cookies; and

• change previously selected preferences.

For more detailed information about individual cookie categories and services, please see our separate Cookie Policy (EU).

14. Who We Share Personal Information With

We may disclose personal information to organizations that help us operate FloofRiot.

These may include:

• PayPal and payment-processing providers;

• CJ Dropshipping and other fulfillment providers;

• carriers and logistics companies;

• customs and import-related service providers;

• website hosting and infrastructure providers;

• WordPress and WooCommerce-related services;

• Google Analytics;

• Google Site Kit;

• Google reCAPTCHA;

• contact-form providers;

• transactional-email providers;

• security and anti-spam providers;

• professional advisers;

• insurers where applicable;

• tax or accounting providers where applicable; and

• government agencies, courts, regulators, or law-enforcement authorities where legally required.

We limit disclosures to information reasonably necessary for the relevant purpose.

15. Sale and Sharing of Personal Information

FloofRiot does not sell personal information for money.

If our use of advertising, analytics, or other technologies in the future constitutes a legally defined “sale,” “sharing,” or targeted-advertising activity under an applicable U.S. state privacy law, we will provide any notices and choices required by that law.

Our cookie controls may also allow visitors to reject certain optional tracking technologies.

16. International Processing and Transfers

FloofRiot operates from Saudi Arabia and serves customers internationally.

As a result, personal information may be processed or made accessible in countries other than the country where the customer lives.

Depending on the transaction and service provider, information may be processed in locations including:

• Saudi Arabia;

• European countries;

• the United Kingdom;

• the United States;

• China; and

• other countries in which our service providers or logistics partners operate.

Different countries may have different levels of data-protection regulation.

Where applicable data-protection law requires a lawful mechanism or safeguard for an international transfer, we intend to rely on the mechanism appropriate to the relevant provider and transfer, which may include:

• an adequacy decision or equivalent recognized mechanism;

• approved contractual safeguards;

• standard contractual clauses;

• binding corporate rules where applicable;

• legally recognized transfer arrangements; or

• another permitted transfer basis.

The specific mechanism may depend on the provider, destination, and applicable law.

You may contact support@floofriot.com if you have questions about safeguards relevant to your personal information.

17. Saudi Arabia Personal Data Protection Law

Because FloofRiot is operated from Saudi Arabia, our handling of personal information may be subject to the Saudi Personal Data Protection Law (PDPL) and its implementing regulations where applicable.

Under Saudi PDPL, eligible data subjects may have rights including:

• the right to be informed about how personal data is collected and processed;

• the right to access personal data;

• the right to obtain personal data in a readable and clear format where applicable;

• the right to request correction, completion, or updating of inaccurate or incomplete information;

• the right to request destruction of personal data where legally available; and

• the right to withdraw consent where processing is based on consent and withdrawal is legally permitted.

These rights may be subject to limitations or exceptions provided by law.

To exercise an applicable Saudi data-protection right, contact:

support@floofriot.com

We may verify your identity before processing a request.

18. How Long We Keep Personal Information

We retain personal information for no longer than reasonably necessary for:

• order fulfillment;

• customer support;

• accounting;

• tax compliance;

• fraud prevention;

• chargebacks;

• dispute resolution;

• legal claims;

• regulatory requirements; and

• other legitimate operational purposes.

Our current WooCommerce retention settings generally provide for:

• Inactive customer accounts: up to 24 months

• Pending orders: up to 30 days

• Failed orders: up to 30 days

• Cancelled orders: up to 12 months

• Refunded orders: up to 7 years

• Completed orders: up to 7 years

Some information may be retained longer where required or permitted by law.

When personal information is no longer required, we intend to delete, anonymize, or otherwise securely dispose of it as appropriate.

19. Your General Privacy Rights

Depending on applicable law and your location, you may have rights to:

• know whether we process your personal information;

• access your personal information;

• receive a copy of eligible information;

• correct inaccurate or incomplete information;

• request deletion or destruction;

• restrict certain processing;

• object to certain processing;

• obtain eligible information in a portable format;

• withdraw consent where processing relies on consent; and

• complain to an applicable privacy or data-protection authority.

Not every right applies in every situation.

Certain information may need to be retained despite a request where required for:

• taxation;

• accounting;

• fraud prevention;

• payment disputes;

• chargebacks;

• compliance obligations;

• establishment or defense of legal claims; or

• other lawful purposes.

20. Exercising Your Privacy Rights

To make a privacy request, email:

support@floofriot.com

Please explain the right you wish to exercise and provide enough information for us to identify the relevant records.

We may request reasonable identity verification to protect personal information from unauthorized disclosure or deletion.

WordPress and WooCommerce include tools that can assist store administrators with exporting or erasing eligible customer information.

21. European Economic Area and GDPR Rights

Where the EU GDPR applies, eligible individuals may have rights including:

• access;

• rectification;

• erasure;

• restriction of processing;

• data portability;

• objection to certain processing;

• withdrawal of consent; and

• the right to lodge a complaint with an appropriate supervisory authority.

Where processing relies on legitimate interests, you may have the right to object based on your particular situation.

Where processing relies on consent, withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Where consent is required for non-essential cookies or analytics technologies, refusal of consent should not prevent access to the essential shopping functions of FloofRiot.

22. United Kingdom Privacy Rights

Where UK data-protection law applies, eligible individuals may have rights including:

• access;

• correction;

• erasure;

• restriction;

• portability;

• objection; and

• withdrawal of consent where applicable.

You may also have the right to complain to the competent UK supervisory authority where UK data-protection law applies.

International transfers involving UK-regulated personal information are handled subject to applicable UK transfer requirements where those requirements apply.

23. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights where the relevant law applies to FloofRiot.

Depending on the applicable state law, those rights may include:

• access;

• confirmation of processing;

• correction;

• deletion;

• portability;

• opting out of certain legally defined sales or sharing;

• opting out of certain targeted advertising; and

• other rights provided by the applicable jurisdiction.

Some U.S. privacy statutes contain business-size, revenue, data-volume, or activity thresholds. Accordingly, particular rights may apply only where FloofRiot falls within the scope of the relevant law.

Where a law applies to us, we will process valid requests in accordance with its requirements.

24. Children’s Privacy

FloofRiot sells general pet products and is not intended as a service directed specifically to children.

We do not knowingly seek to collect personal information from children in circumstances where collection would violate applicable law.

If we discover that personal information from a child was collected where legally required parental or guardian authorization was absent, we will take appropriate steps in accordance with applicable law.

25. Data Security

We use reasonable technical, organizational, and administrative measures designed to protect personal information against:

• unauthorized access;

• unauthorized disclosure;

• alteration;

• destruction;

• loss; and

• misuse.

However, no website, network, or electronic storage system can be guaranteed to be completely secure.

Customers should:

• protect their account credentials;

• use strong passwords;

• avoid sharing login information; and

• contact us if they believe their account or information has been compromised.

26. Data Accuracy

We take reasonable steps to maintain information that is relevant and accurate for its intended purpose.

Customers can help by providing accurate:

• account information;

• billing information;

• shipping information; and

• contact information.

If your information changes or you believe information we hold is inaccurate, contact us at support@floofriot.com.

27. Automated Decision-Making

FloofRiot does not currently intend to make decisions producing legal or similarly significant effects about customers solely through automated processing without human involvement.

Payment, security, fraud-prevention, or third-party services may use automated systems as part of their own services.

Where applicable law creates rights concerning automated decision-making, those rights remain unaffected.

28. Third-Party Websites and Services

FloofRiot may contain links to websites or services operated by independent third parties.

Their privacy practices are governed by their own policies.

FloofRiot is not responsible for the privacy practices of an independent third party merely because our website links to or integrates with its service.

We encourage visitors to review relevant third-party privacy information before providing personal information directly to those services.

29. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• our business operations;

• website technologies;

• service providers;

• fulfillment arrangements;

• legal requirements;

• regulatory guidance; or

• privacy practices.

When we make changes, the Last Updated date at the top of this policy will be revised.

Where applicable law requires additional notice or consent for a material change, we will provide it.

30. Complaints

If you have a concern about how FloofRiot handles personal information, please contact us first at:

support@floofriot.com

We will review your concern and respond as appropriate.

Where applicable law gives you the right to complain to a government privacy or data-protection authority, that right remains available to you.

31. Contact Us

For questions about this Privacy Policy, our privacy practices, or a privacy-rights request, contact:

FloofRiot
Operated by: Nazmul Hasan Ridoy
Riyadh, Saudi Arabia
Email: support@floofriot.com
Website: floofriot.com