Privacy Policy

1. Who is responsible

The controller of your personal data is [Company legal name] (company number [Company registration number]), [Registered address]. Data protection requests: [Privacy / data requests email]. [Whether a data protection officer must be appointed, and who]

Providers who receive your booking details also handle them for their own purposes (for example to serve you) and are responsible for that use.

2. What we collect

• Account: name, email address, preferred language, a password hash (we never store your password) and, if you use Google sign-in, your Google account ID, name and picture.
• Contact: the phone number you give when you book or list a service.
• Bookings: dates, the animal's name, species, size and notes, the selected extras, the calculated price, the status and the provider's message to you.
• Providers: listing text, prices, address and map location, photos (location and camera data are removed from photos when uploaded), languages, opening hours, accepted animals.
• Reviews: rating, comment, the animal's species and your name shown as first name plus initial.
• Technical data: for each sign-in session a record with a hashed session token, browser/device description, IP address and times; and ordinary server logs. Cookies are described in the Cookie Notice.
• Location: only if you press "near me", your browser gives us your position. It is rounded to about 100 metres and used in the page address to filter search results. It is not saved to your account.
• Favorites: the listings you save, linked to your account (providers only see how many accounts saved a listing, not who).
• Messages: emails we send you (verification, password reset, booking updates) and what you write to support.
• Live chat: the messages you write in the chat, the name and email you choose to give there, the page you started from, the help topic you were reading in the assistant and the time of each message. A cookie keeps your conversation together; our team reads and answers the messages, and if you left your email (or are signed in) we may email you the answer.

3. Why we use it

• To provide the service (contract): accounts, sign-in, booking requests, notifications, reviews, listing management.
• To keep the service safe (legitimate interest): preventing fraud and abuse, rate limiting, moderation, fixing errors.
• To meet legal duties: accounting, tax and answering authorities.
• With your consent: location for "near me" and any optional emails. [Newsletter and marketing: decide whether and how they are offered]

We do not sell your data and do not use it for advertising.

4. Who receives it

• The provider you send a request to sees your name, email, phone number, the animal's details and notes for that request.
• Everyone can see public listings and reviews (with first name and initial).
• Service providers that work for us: hosting [hosting provider and country], email delivery [email provider], map tiles [map tile provider], and Google if you use Google sign-in.
• Authorities, when the law requires it.

[Whether data is transferred outside Georgia and the safeguards used]

5. How long we keep it

• Account data: until you delete the account. Deleting it (account page) removes your profile, sign-in sessions and reviews. Bookings you made stay with the providers for their records but without your name, phone, animal's name and notes; your listings without bookings are deleted and the others are hidden and no longer linked to you. You cannot delete the account while you have open bookings.
• Sign-in sessions: 30 days after they start, or until you sign out.
• Bookings and reviews: [retention period, e.g. years required for accounting and disputes]
• Server logs: [retention period]
• Live chat conversations: [retention period, and whether old chats are deleted automatically]

6. Your rights

You can ask to see your data, correct it, delete it, restrict or object to its use, receive it in a portable form and withdraw consent. Write to [Privacy / data requests email]; we answer within [response time under Georgian law, e.g. 10 working days]. You can already correct your details and delete your account on the account page; other requests are handled by hand at the moment.

You may complain to the Personal Data Protection Service of Georgia if you think your rights were violated.

7. Security

Passwords are stored as salted hashes, sessions use protected cookies that scripts cannot read, and access to the data is limited. No system is perfectly secure; tell us if you notice a problem. [Security measures to confirm before launch: HTTPS, backups, access control]

8. Children

The service is not meant for people under 18 and we do not knowingly collect their data.

9. Changes and contact

We will announce important changes on the website or by email. Questions: [Privacy / data requests email].