Privacy Policy

We may collect and process the following categories of data:

• Identity and contact data: name, phone number, email address, WhatsApp number, billing or correspondence address where relevant.
• Booking and pet data: service type, dates, notes you provide, pet name, species/breed, weight, age, medical conditions, medication notes and similar information needed to care for your animal safely.
• Technical data: IP address, browser type, device identifiers, approximate location derived from IP, and security telemetry (for example Cloudflare Turnstile verification results) when you submit forms or browse our site.
• Communication records: emails, messages and call logs where retained for service quality, dispute resolution or legal obligations.

We use personal data for the following purposes and on these legal bases under GDPR:

• Performance of a contract (Art. 6(1)(b)): to respond to enquiries, manage bookings, deliver boarding, training, grooming and transport services, and communicate about your reservation.
• Legitimate interests (Art. 6(1)(f)): to secure our website and systems, prevent fraud and abuse, improve our services, send operational messages, and maintain internal records— balanced against your rights.
• Legal obligation (Art. 6(1)(c)): where we must retain records for tax, accounting, regulatory or law-enforcement purposes.
• Consent (Art. 6(1)(a)): where we rely on consent (for example certain marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

We use Supabase, a hosted backend platform, to store booking, owner and pet records and related operational data. Data is typically processed within the European Economic Area or subject to appropriate safeguards (such as Standard Contractual Clauses) where processors or subprocessors operate outside the EEA. Supabase acts as a processor under our instructions; we remain responsible for your personal data.

We implement access controls, strong credentials and least-privilege principles. Database access for administration is limited to authorised personnel.

We use Resend, Inc. to send transactional emails (for example booking acknowledgements, confirmations and service updates). Resend processes recipient addresses, message content and delivery metadata on our behalf. Their processing may involve infrastructure outside the EU where permitted under GDPR using appropriate safeguards.

Where enabled, booking summaries may be sent to a private Telegram workspace operated by Vico Kennel to coordinate approvals. Telegram International GmbH (and related group companies) processes such messages under their own terms and privacy policy. Do not include unnecessary sensitive data in free-text fields.

We do not sell your personal data. We may share data with processors (such as Supabase, Resend, Cloudflare, Google Calendar where used, and messaging providers) strictly for providing our services, and with professional advisers, insurers or authorities where required by law or to protect vital interests.

Where data is transferred outside the EEA, we ensure a lawful transfer mechanism under Chapter V GDPR (including adequacy decisions or Standard Contractual Clauses combined with supplementary measures where appropriate).

Subject to conditions in GDPR, you have the right to:

• Access your personal data and obtain certain information about processing;
• Rectify inaccurate data or complete incomplete data;
• Erase data in certain circumstances ("right to be forgotten");
• Restrict processing in certain circumstances;
• Data portability for data you provided, where processing is based on consent or contract and automated;
• Object to processing based on legitimate interests or for direct marketing;
• Withdraw consent where processing is consent-based;
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) or your local supervisory authority.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding. We aim to respond within one month, extendable where permitted by law.