Privacy notice

Pretty Pooches Ltd is a company registered in England & Wales (company number [[ COMPANY NUMBER ]]), registered office [[ REGISTERED OFFICE ADDRESS ]]. We are registered with the UK Information Commissioner's Office (ICO) under registration number [[ ICO REGISTRATION NUMBER ]]. Questions about this notice or your data can go to our data-protection contact [[ DPO / DATA-PROTECTION LEAD NAME ]] at privacy@prettypooches.app.

Pretty Pooches wears two hats. For the personal data of operators and their platform usage (your name, your business account, billing and how you use the product) we are the data controller. For the personal data of your customers (pet parents) and their pets that flows through your bookings, we are your data processor: the grooming business is the controller of that data and we process it only on your documented instructions, under our Data Processing Agreement. Your customers should also be shown the booking-site privacy notice (we ship a template you can edit).

When you sign up and run your business on Pretty Pooches we collect: your business name and details; your name, email address and phone number; login and authentication data (magic-link and refresh-token identifiers — never stored card numbers); the Stripe account identifier we use to route your payouts; your plan and billing history; push-notification tokens for the office app; and product usage, device, IP and diagnostic data needed to run, secure and support the service.

To run a booking on your behalf we process, on your instructions: the pet parent's name, email and phone; their postal address and geolocation / latitude-longitude (only for collect-and-return or mobile bookings, to plan travel); pet records (name, breed, size, coat, temperament, vaccination status, photos and care notes); booking history; marketing preferences; and reminder logs (email, SMS and — where enabled — WhatsApp sends and delivery receipts). We do not use this data for our own purposes and we do not market to your customers on our own behalf.

All card data is collected and stored by Stripe, a PCI-DSS Level 1 service provider. Pretty Pooches never sees or stores card numbers. Customer payments and deposits flow through Stripe Connect to your own Stripe account; we never hold customer funds on our balance.

For operator and platform data we rely on: performance of a contract (creating and running your account, taking your plan payments); legitimate interests (running, securing, improving and supporting the platform, and service communications such as billing and incident notices), balanced against your rights; and consent (any marketing email you opt into, and non-essential cookies / analytics, which are off by default). You can withdraw consent at any time.

Our primary hosting and customer-data storage is in the UK (AWS region eu-west-2, London). Some sub-processors (for example Stripe, Twilio, Meta and Sentry) may process limited personal data outside the UK. Where they do, the transfer is protected by an appropriate safeguard — UK adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

We keep operator account data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and dispute obligations. Booking records are anonymised and retained for around 7 years to satisfy UK tax and dispute-resolution requirements; once anonymised they no longer identify a person. Other personal data is hard-deleted when an account is deleted. Login tokens are kept only while valid; notification logs are kept for delivery troubleshooting and usage metering.

Under UK data-protection law you have the right to: access a copy of your data; rectify inaccurate data; erase your data; restrict or object to processing; and data portability. Operators can export their business + customer records from the back-office and delete their account at any time (we anonymise the booking + tax trail and hard-delete everything else). Pet parents can export their own data (GET /v1/me/export) and delete their account (DELETE /v1/me) from the customer app or booking site. To exercise a right, contact us — or, for booking data, the salon as controller.

Our sites use strictly-necessary cookies to keep your session signed in and the booking flow working. Any analytics cookies are off by default and set only if you opt in via the cookie banner; you can change your choice at any time.

If you have a concern we couldn't resolve, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.

For any data-protection question, contact privacy@prettypooches.app. Operators can review our Data Processing Agreement and Terms of Service.