Privacy Policy

1. Who We Are

UrPetPals is operated by Defonseka Ltd, a company registered in England and Wales with company number 13156487. Our registered office is at Unit 6, Whitworth Court, Manor Farm Road, Runcorn, WA7 1WA.

For any privacy-related queries, please contact us at: hello@urpetpals.com

2. What Data We Collect

We collect the following types of personal data:

• Account Information: Name, email address, phone number, and password when you register.
• Profile Information: Profile photo, address, and pet details (names, breeds, special requirements).
• Payment Information: Card details processed securely via Stripe (we never store full card numbers).
• Service Data: Booking history, messages between users, GPS tracking data during walks, and reviews.
• Technical Data: IP address, device type, browser information, and app usage analytics.
• Verification Data: ID documents and background check information for providers.

3. How We Use Your Data

We use your personal data to:

• Provide and manage our pet care services
• Process payments and handle disputes
• Verify the identity of providers
• Enable GPS tracking during walks for safety
• Send service-related notifications and updates
• Improve our platform and user experience
• Comply with legal obligations
• Prevent fraud and ensure platform security

4. Legal Basis for Processing

Under UK GDPR, we process your data based on the following legal grounds:

• Contract: Processing necessary to fulfil our service agreement with you.
• Legitimate Interests: Platform security, fraud prevention, and service improvement.
• Consent: Marketing communications (you can withdraw consent anytime).
• Legal Obligation: Compliance with tax, accounting, and regulatory requirements.

5. Data Sharing

We only share your data with:

• Other Users: Limited profile information shared between pet owners and providers to facilitate bookings.
• Service Providers: Stripe (payments), Supabase (database hosting), AWS (infrastructure), and analytics providers.
• Legal Authorities: When required by law or to protect our rights.
• Insurance Partners: In the event of an incident requiring insurance claim processing.

We never sell your personal data to third parties.

6. GPS Tracking Data

Our platform includes live GPS tracking during dog walks. This data:

• Is only collected during active walks with your consent
• Is visible in real-time to the pet owner
• Is stored for 90 days after the walk completes
• Is automatically deleted after the retention period
• Is used for safety verification and dispute resolution

7. Data Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and multi-factor authentication
• Employee training on data protection
• Incident response procedures

8. Data Retention

We retain your data for the following periods:

• Active accounts: While your account remains active
• Deleted accounts: Up to 7 years for legal/tax purposes
• GPS tracking: 90 days after walk completion
• Payment records: 7 years (HMRC requirement)
• Marketing data: Until you unsubscribe or delete your account

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to certain types of processing
• Withdraw Consent: For marketing communications

To exercise these rights, email us at: hello@urpetpals.com

10. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyse usage, and deliver personalised content. You can manage cookie preferences through your browser settings.

Types of cookies we use:

• Essential: Required for the platform to function
• Analytics: Help us understand how users interact with our platform
• Marketing: Used to deliver relevant advertisements (with consent)

11. International Transfers

Some of our service providers (e.g., AWS, Stripe) may process data outside the UK. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions where applicable.

12. Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through the platform. The updated policy will be posted on this page with a revised date.

14. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO Website: www.ico.org.uk

15. Contact Us

For any privacy-related questions or to exercise your rights, please contact: