Privacy policy

Privacy & Discretion Policy

Last updated: October 17, 2026

1. The Tesoro Standard of Discretion

At Tesoro Pet Company ("TPC"), a division of Tesoro Group Global Ltd ("the Group", "we", "us", "our"), we recognize that your privacy is an extension of your domestic sanctuary. This policy outlines how we manage and safeguard your personal information across the services provided via tesoropetco.com (the "Services").

We do not merely comply with global data regulations; we embed strict data governance and security principles into all of our operations, ensuring that your interaction with our collection remains secure and discreet. For the purposes of global data protection laws (including the UK GDPR), Tesoro Group Global Ltd acts as the Data Controller.

2. Information Acquisition, Sources, Lawful Bases & Retention

To facilitate the curation and delivery of our collections, we collect personal information that varies depending on your level of engagement.

Sources of Personal Information:

Directly from you: When you fill in online forms, place an order, create an account, or contact our Concierge team.
Automated technologies: Via cookies, web beacons, and pixels when you navigate our digital gallery.
Third parties: Verified service infrastructure partners (e.g., Shopify, payment gateways, and logistics providers).

The table below details the categories of data we collect, our specific business purposes, our lawful bases under UK/EU frameworks, and category-specific retention parameters:

Category of Personal Information	Specific Elements Collected	Business Purpose	Lawful Basis (UK GDPR)	Retention Period
Identifiers	Name, email address, physical shipping address, billing address, telephone number.	To fulfil contractual obligations, process acquisitions, and manage global logistics.	Contractual Necessity	7 years post-transaction (to satisfy tax and auditing obligations).
Commercial Information	Transaction history, purchased items, product customisations, sizing details.	To maintain client history, manage orders, handle warranties, and support custom sizing.	Contractual Necessity & Legitimate Interests	Duration of active customer account plus 7 years post-transaction.
Internet & Network Activity	IP address, device specifications, browser type, and site interaction data via cookies/pixels.	To optimize digital gallery performance, refine the client experience, and manage analytical preferences.	Consent (via our cookie interface)	Up to 24 months from collection date, or until cookie consent is revoked.
Inferences & Marketing Preferences	Voluntarily shared preferences, opt-in communication profiles.	To share exclusive TPC developments and tailored collection previews.	Consent	Retained until consent is withdrawn or opt-out is exercised.

Children's Privacy: Our collections are curated strictly for adult acquisition. We do not knowingly collect, sell, or share personal information from individuals under the age of 16.

3. Cookies & Controlled Data Disclosures

Cookies & Tracking Technologies: We deploy cookies, pixels, and similar web technologies to enable core site functionality, analyse traffic, and personalize your experience. You can manage or withdraw your consent for non-essential cookies at any time using our cookie settings interface or via your browser settings.

Data Sharing & Modern US Disclosures: Tesoro Group Global Ltd does not sell your information to data brokers for traditional commercial gains. However, under modern statutory definitions (such as the California Consumer Privacy Act or CCPA/CPRA), our deployment of routine third-party operational tools, analytical cookies, and marketing pixels may be legally classified as "selling" or "sharing" data for cross-context behavioural advertising.

We disclose your data exclusively to the following entities to preserve our rigorous standards of transaction integrity:

Operational Partners: Verified cloud infrastructure (including Shopify), specialized payment processors, and global white-glove logistics providers.
Corporate Affiliates: Shared within the Tesoro Group Global Ltd structure to maintain an aligned client experience across current and future verticals.
Legal Compliance & Safeguarding: Disclosed strictly when mandated by law to protect the safety, statutory rights, or integrity of the Group and its clients.

4. International Data Architecture & Sovereignty

As a global entity, Tesoro Group Global Ltd processes data across international borders.

Cross-Border Protections (UK/EEA): For transfers out of the United Kingdom or European Economic Area, we utilize approved Standard Contractual Clauses (SCCs) and robust organizational encryption to guarantee an equivalent layer of data protection.
Australian Overseas Disclosures: In compliance with the Australian Privacy Principles (APP 8), we explicitly notify Australian residents that their personal data is routinely transferred to and processed by overseas recipients located in the United Kingdom and the United States (where our core digital architecture resides).

5. Security & Retention Principles

While no digital environment is entirely impenetrable, TPC utilizes industry-leading encryption and security protocols. We reject indefinite data retention. Your personal information is stored securely and retained strictly within the parameters defined in Section 2, after which it is anonymized or permanently purged from our active databases.

6. Global Customer Rights & Jurisdictional Controls

Regardless of your geography, TPC respects your right to govern your data. Depending on your home territory (including the UK, EEA, Australia, and various US states), you may initiate the following controls via concierge@tesoropetco.com:

Right of Access & Portability: Request a cleanly formatted inventory of the personal data we hold.
Right of Correction & Erasure: Direct us to amend inaccuracies or permanently delete your profile from our systems.
Right to Object & Opt-Out (Direct Marketing): You hold an absolute right to object to direct marketing or profiling at any time. You may also opt out of data "selling" or "sharing" for targeted advertising.
Anonymity & Pseudonymity (Australia - APP 2): Where practical and permitted by law, Australian residents have the option to interact with us anonymously or using a pseudonym when making general non-transactional inquiries.
Automated Discretion (Global Privacy Control): We natively recognize the Global Privacy Control (GPC) signal. If your browser transmits a GPC signal, our digital gallery automatically processes it as a valid, global opt-out request for targeted advertising.

7. Regulatory Recourse & Complaints

Should you believe our data practices do not align with the standard of discretion outlined here, we request that you contact our Dedicated Privacy Desk first so we can resolve the matter. However, you maintain the legal right to escalate your concern directly to your local authority:

United Kingdom: The Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Australia: The Office of the Australian Information Commissioner (OAIC), GPO Box 5288, Sydney, NSW 2001.
United States: Your state's respective Attorney General's Office (e.g., the California Privacy Protection Agency).

8. Contact Details

For inquiries regarding our privacy protocols or to exercise your rights, please contact the TGG Data Controller:

Email: concierge@tesoropetco.com

Entity: Tesoro Pet Co is a trading name of Tesoro Group Global (TGG) Ltd

Registered Office: Brewery House, High St, Twyford, Winchester, UK, SO21 1RG

Company Reg: 17068761 | VAT: 527 4134 02