Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains what personal information Nibby collects when you visit trynibby.com, buy from us or contact us, why we use it, who we share it with and what rights you have. We've written it to meet the requirements of the EU and UK General Data Protection Regulation (GDPR), US state privacy laws including California's (CCPA/CPRA), Canada's PIPEDA and Australia's Privacy Act.

1. Who is responsible for your data

The controller of your personal data is ZANEL ENTERPRISE LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA, a Wyoming limited liability company doing business as Nibby ("Nibby", "we", "us").

  • Privacy questions: support@trynibby.com
  • We have not appointed a data protection officer; for any privacy question, contact support@trynibby.com.

2. What we collect

Information you give us

  • Order details: name, shipping and billing address, email, phone number (if given), products ordered and order history.
  • Account details: login email, saved addresses and subscription settings.
  • Subscription details: plan, delivery frequency, billing dates, skips, pauses and cancellations.
  • Payment details: handled directly by our payment providers. We see only limited information, such as card type, last four digits and payment status. We never store full card numbers.
  • Messages: what you tell us when you email us, claim a refund or leave a review, including photos you send.
  • About your dog (optional): details such as size or age you choose to enter, for example to see a suggested daily amount.
  • Marketing preferences: whether you've signed up for emails or text messages.

Information collected automatically

  • Device and usage data: IP address, browser and device type, pages viewed, items added to cart, referring website and approximate location.
  • Cookies and similar technologies: see section 9.

Information from others

  • Payment providers (for example, fraud checks), carriers (delivery status) and advertising or social media platforms (for example, if you click one of our ads).

3. Why we use it and our legal bases (GDPR)

  • To process and deliver your order, manage your account and subscription, and handle refunds: necessary to perform our contract with you.
  • To answer your questions and provide customer service: contract, or our legitimate interest in helping you.
  • To send order, shipping and subscription emails (including renewal reminders): contract and legal obligations.
  • To send marketing emails and text messages: your consent, or, where the law allows, our legitimate interest in emailing existing customers about similar products. You can unsubscribe at any time.
  • To show you relevant ads and measure them (for example, through pixels): your consent where required.
  • To understand how our site is used and improve it: consent for non-essential analytics cookies; otherwise our legitimate interest.
  • To prevent fraud and keep our site secure: our legitimate interest and legal obligations.
  • To publish reviews and photos you share: your consent.
  • To keep accounting and tax records: legal obligation.

We don't use your data to make decisions that have legal or similarly significant effects on you based solely on automated processing.

4. Who we share it with

We don't sell your personal information for money. We share it only as needed with service providers that process it for us, under contract:

  • Shopify (store platform, checkout and Shopify Payments).
  • Loop Subscriptions (subscription management).
  • Payment providers, such as Shopify Payments and the other payment methods shown at checkout.
  • Shipping carriers and fulfillment partners to deliver your order.
  • Email and text message providers that send our order, subscription and marketing messages.
  • Analytics and advertising, such as analytics tools and advertising platforms (for example Meta and Google).
  • Reviews providers that collect and show product reviews.
  • Customer service tools that help us answer your questions.
  • Professional advisers such as accountants and lawyers, and authorities when the law requires it.
  • A buyer or successor if our business is sold or merged.

5. International transfers

We're based in the United States. Some of our service providers, including Shopify, store or access data in other countries such as the United States and Canada. When data leaves the European Economic Area or the UK, we use protections approved under GDPR, such as adequacy decisions (including the EU-US Data Privacy Framework and its UK extension, for certified companies) or Standard Contractual Clauses. You can ask us for more information about these safeguards.

6. How long we keep it

  • Orders and invoices: as long as tax and accounting laws require (generally 7 years).
  • Account and subscription data: while your account or subscription is active, then for 3 years in case of questions or claims.
  • Customer service messages: 3 years after the last contact.
  • Marketing data: until you unsubscribe or withdraw consent, then a record of your opt-out so we respect it.
  • Cookies: as set out in our cookie banner.

7. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and get a copy;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to how we use it, including objecting to direct marketing at any time;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting earlier processing;
  • opt out of targeted advertising and the "sale" or "sharing" of personal information.

To use your rights, email support@trynibby.com. We may need to confirm your identity. We'll reply within one month (GDPR), 45 days (US state laws) or 30 days (Canada), and tell you if we need more time. Using your rights is free and we won't treat you differently for using them. You may use an authorized agent where the law allows.

8. Market-specific information

If you live in the UK or the European Union

You have all of the rights listed in section 7. You can also complain to a data protection authority, in particular in the country where you live or work. In the UK, you can contact the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to help you first.

California residents (and other US states)

This section is our notice at collection under the California Consumer Privacy Act as amended by the CPRA, and also covers residents of other states with similar laws (such as Colorado, Connecticut, Virginia and Texas).

  • Categories we collect: identifiers (name, email, address, IP address); customer records (address, phone, limited payment details); commercial information (orders, subscriptions); internet activity (browsing and interaction with our site and ads); approximate geolocation; and inferences (product preferences). We don't intentionally collect sensitive personal information.
  • Sources and purposes: as described in sections 2 and 3.
  • Disclosure: we disclose these categories to the service providers listed in section 4 for business purposes.
  • "Sale" and "sharing": we don't sell personal information for money. If we use advertising pixels or cookies (for example from Meta, Google or TikTok), this may count as "sharing" for cross-context behavioral advertising, or a "sale", under California law. We haven't sold or shared the personal information of anyone we know to be under 16.
  • Do Not Sell or Share My Personal Information: you can opt out using the "Your privacy choices" link in our footer, or by emailing support@trynibby.com. We honor Global Privacy Control (GPC) signals sent by your browser as an opt-out.
  • Your rights: to know, access, correct and delete your data; to opt out of sale/sharing; to limit use of sensitive personal information (which we don't use); and not to be discriminated against for using these rights.
  • Retention: see section 6.
  • Shine the Light: we don't share personal information with third parties for their own direct marketing.

If your request is denied in a state that provides an appeal right, you can appeal by replying to our decision or emailing support@trynibby.com with "Privacy appeal" in the subject line.

Canada

We handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec's privacy law. We collect, use and share it only with your consent (express or implied, as appropriate) and for the purposes described here. Your data may be processed outside Canada by our service providers, where it may be accessible to authorities under local law. You can access and correct your data, withdraw consent and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial commissioner. Our privacy contact is support@trynibby.com.

Australia

We aim to handle your personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You can ask to access or correct your information and opt out of marketing. Your information may be disclosed to service providers overseas, including in the United States, Canada, the Netherlands and other EU countries. If you have a complaint, please contact us first at support@trynibby.com; we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

9. Cookies and tracking

We use cookies and similar technologies to run our store (for example, to remember your cart and keep checkout secure), to understand how our site is used and, with your consent where required, to show you relevant ads.

  • Strictly necessary: always on, because the store can't work without them.
  • Analytics and preferences: only with your consent where required.
  • Marketing: only with your consent where required, or until you opt out in the US.

You can change your choices at any time through the cookie banner or the "Your privacy choices" link in our footer, and through your browser settings. Shopify's use of cookies is described at shopify.com/legal/cookies.

10. Children

Our store is for adults buying for their dogs. We don't knowingly collect personal information from children under 16. If you believe a child has given us their data, contact us and we'll delete it.

11. Security

We use reasonable technical and organizational measures to protect your data, such as encrypted connections and access controls, and we choose service providers that do the same. No system is completely secure. If a data breach affects you, we'll notify you and the authorities where the law requires.

12. Changes to this policy

We may update this policy from time to time. We'll post the new version here with a new "Last updated" date and, if the changes are significant, tell you by email or a notice on our site.

13. Contact us

ZANEL ENTERPRISE LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA
Email: support@trynibby.com
Phone: +1 (616) 300-2594