Privacy Policy

Version 2026-08-08.1 · Effective 2026-08-08

What personal and pet information we collect, why we hold it, how long we keep it, and the rights you have over it.

Draft — pending review by qualified counsel

This document is a structurally complete draft written by the development team so the acceptance and versioning machinery could be built and tested. It has not been reviewed by a lawyer and must not be relied on as legal advice. Passages marked [OWNER: …] or [COUNSEL: …] require a decision before publication.

Who we are

This policy covers the website and booking system operated by [OWNER: registered legal entity name] ("we", "us"). Contact details for privacy questions are published on our contact page and are the same address used for data-rights requests.

Information we collect

Account details (name, email address, phone number, password — stored only as a salted hash). Pet profiles (name, breed, approximate age and weight, free-text care notes). Documents you upload, which typically include vaccination records and may include veterinary correspondence. Booking history, including dates, services and the amounts charged. Payment references returned by our payment processor — we never receive or store your full card number. Reviews you choose to submit. Newsletter subscription status. Server logs containing IP address, request path and timestamp.

Why we hold it

To take and fulfil bookings (contractual necessity); to meet animal-care obligations such as confirming vaccination status (legal obligation and legitimate interest in animal welfare); to take payment and keep financial records (contractual and legal obligation); to send you service messages about your own bookings (contractual necessity); and, only where you have separately opted in, to send marketing email (consent).

What we never do

We do not sell personal information. We do not use your pet documents for any purpose other than the care and admission of your animal. We do not send marketing email to anyone who has not separately opted in.

Processors

We share the minimum necessary data with: our hosting provider, our managed database provider, our object-storage provider (uploaded documents), our payment processor, and our transactional email provider. [OWNER: confirm the named list in docs/PRIVACY-INVENTORY.md matches the vendors actually in use, and that a data-processing agreement is in place with each.]

How long we keep it

Account and booking records are retained while your account is open and for [OWNER: retention period — commonly 6–7 years for financial records under applicable tax law] after your last booking. Uploaded pet documents are deleted when you delete the document or the pet, or [OWNER: retention period] after your last booking, whichever is sooner. Server logs are retained for 30 days.

Your rights

You can view and edit your profile and pet records at any time from your account. Under "My Data" you can download a machine-readable copy of everything we hold about you, sign out other devices, and delete your account. Deleting removes your profile, pets and uploaded documents; bookings you have already paid for are financial records we must keep, and your name, contact details, pet names and messages are erased from them so nothing links them back to you. Both actions ask you to re-enter your password first. Depending on where you live you may have additional rights — including access, correction, deletion, portability, and the right to object to or restrict certain processing — under the GDPR, the CCPA/CPRA, or another state privacy law. [OWNER + COUNSEL: confirm which regimes apply to this business and complete the response-time commitments.]

Children

This service is not directed at children and we do not knowingly create accounts for anyone under 16. [COUNSEL: confirm the correct age threshold for the applicable jurisdiction.]

Cookies and analytics

See our Cookie and Analytics Notice.

Changes

We publish the version and effective date of this policy at the top of the page. Material changes are notified to account holders by email.