Privacy policy
Last Updated: August 14, 2026
1. Introduction
This Privacy Policy explains how Kandy For Equity Holdings LLC, doing business as It's Pawssible ("It's Pawssible," "we," "our," or "us"), collects, uses, discloses, and protects information about you when you visit itspawssible.org, including any sub-domains, affiliated websites, landing pages, checkout funnels, and mobile applications (collectively, the "Website"), place an order, enroll in a recurring contribution program, or otherwise interact with us.
By using the Website, you agree to the practices described in this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms and Conditions.
If you do not agree with this Privacy Policy, please do not use the Website.
2. Information We Collect
2.1 Information You Provide Directly
- Identity and contact information: name, email address, shipping address, billing address, and phone number.
- Order and account information: order history, contribution history, subscription/enrollment status, account login credentials, and customer support correspondence.
- Payment information: payment card details are collected and processed securely by our third-party payment processors. We do not store full payment card numbers on our systems. We may retain a token, the card brand, the last four digits, and the expiration date.
- Marketing preferences: email and SMS opt-in status and communication preferences.
- User-generated content: reviews, testimonials, photographs, survey responses, and comments you choose to submit.
2.2 Information Collected Automatically
When you visit the Website, we and our service providers automatically collect certain technical information, including:
- IP address and approximate location derived from it;
- Browser type and version, operating system, and device identifiers;
- Referring and exit URLs, pages viewed, time spent, and clickstream data;
- Session recordings and heatmap data (see Section 3);
- Cookie identifiers and advertising identifiers.
2.3 Information From Third Parties
We may receive information about you from advertising platforms, analytics providers, payment processors, shipping carriers, fraud-prevention services, and marketing partners, and we may combine that information with information we already hold about you.
2.4 Children's Information
The Website is not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen (13). If you believe a child has provided us with personal information, contact us at info@itspawssible.org and we will delete it.
3. Cookies and Tracking Technologies
We use cookies, pixels, tags, SDKs, and similar technologies to operate the Website, remember your preferences, understand usage, measure and optimize advertising, and detect fraud.
Providers we currently work with include, among others:
- Analytics and behavior: Google Analytics, Microsoft Clarity, TripleWhale
- Advertising and attribution: Google, Meta (Facebook/Instagram), AppLovin, TikTok
- Operations: checkout, subscription/recurring billing, payment, email and SMS platforms
You can manage or disable cookies through your browser settings. Disabling cookies may affect Website functionality. Where required by law, we present a consent banner allowing you to accept or reject non-essential cookies, and we honor recognized opt-out preference signals such as Global Privacy Control (GPC) where legally required.
4. How We Use Your Information
We use personal information to:
- Process, fulfill, and ship your orders;
- Administer recurring contribution programs, including billing, renewal, receipts, and cancellation;
- Provide customer support and respond to your inquiries;
- Send transactional communications (order confirmations, shipping updates, contribution receipts, billing notices);
- Send marketing communications by email or SMS, where you have opted in;
- Personalize your experience and show you relevant advertising;
- Measure the performance of our marketing and improve the Website and our products;
- Detect, investigate, and prevent fraud, abuse, chargebacks, and security incidents;
- Comply with legal, tax, accounting, and regulatory obligations, and enforce our Terms and Conditions.
Legal bases (EEA/UK): where the GDPR applies, we rely on: performance of a contract (order and enrollment processing), legitimate interests (fraud prevention, service improvement, direct marketing where permitted), consent (non-essential cookies, marketing where required), and legal obligation (tax and record-keeping).
5. How We Share Your Information
We do not sell your personal information for money. We share personal information as follows:
- Service providers: ecommerce and checkout platforms, subscription and recurring-billing providers, payment processors, fulfillment centers and shipping carriers, email and SMS providers, customer support tools, cloud hosting, and fraud-prevention services — each only to the extent needed to perform services for us.
- Analytics and advertising partners: the providers named in Section 3, for measurement, attribution, audience building, and targeted advertising. Under some U.S. state privacy laws, this activity may be considered "sharing" or a "sale" of personal information for cross-context behavioral advertising. See Section 8 for your opt-out rights.
- Beneficiary or partner organizations: where you expressly consent to have your name or contact information shared with an organization we support.
- Legal and safety: where required by law, subpoena, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, property, or the safety of others.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this Privacy Policy, or as required by law. Order, contribution, and tax records are typically retained for at least seven (7) years to satisfy financial and legal record-keeping requirements. Marketing data is retained until you opt out or become inactive.
7. International Transfers
We are based in the United States, and we may process and store your information in the United States or in other countries that may not provide the same level of data protection as your country of residence. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for transfers of personal data out of the EEA, UK, or Switzerland.
8. Your Privacy Rights
8.1 All Users
You may, at any time:
- Request access to the personal information we hold about you;
- Request correction of inaccurate information;
- Request deletion of your personal information;
- Opt out of marketing emails using the unsubscribe link in any marketing email;
- Opt out of SMS by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT.
To exercise these rights, email info@itspawssible.org. We may need to verify your identity before acting on a request.
8.2 EEA, UK, and Swiss Residents (GDPR)
You additionally have rights to data portability, restriction of processing, objection to processing (including profiling for direct marketing), and withdrawal of consent at any time (without affecting the lawfulness of prior processing). You have the right to lodge a complaint with your local supervisory authority.
8.3 California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, use, disclose, and share; the right to delete; the right to correct; the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising; the right to limit use of sensitive personal information; and the right not to be discriminated against for exercising these rights.
To opt out of sharing for advertising, email info@itspawssible.org with the subject line "Do Not Sell or Share My Personal Information," use any opt-out link provided on the Website, or enable Global Privacy Control in your browser.
We do not knowingly sell or share the personal information of consumers under sixteen (16).
8.4 Other U.S. State Residents
Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, among others) have comparable rights of access, correction, deletion, portability, and opt-out of targeted advertising and profiling. Submit requests to info@itspawssible.org. You may appeal a denied request by replying to our decision with the subject line "Privacy Request Appeal."
9. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and use of PCI-DSS compliant payment processors. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
10. Third-Party Websites and Social Media
The Website may contain links to third-party websites and social media platforms that we do not control. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing any information to them.
11. Do Not Track
Some browsers offer a "Do Not Track" signal. Because no common industry standard for Do Not Track has been adopted, we do not currently respond to Do Not Track browser signals. We do honor Global Privacy Control signals where required by applicable law.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. If changes are material, we will provide notice through the Website or by email where required. Your continued use of the Website after changes take effect constitutes acceptance.
13. Contact Us
For questions, concerns, or to exercise your privacy rights:
Kandy For Equity Holdings LLC (d/b/a It's Pawssible) Attn: Privacy 254 Chapman Rd, Newark, Delaware 19702 US Email: info@itspawssible.org