Privacy Policy

We collect information you provide directly to us when you create an account, complete your profile, make a booking enquiry, or contact our support team. This includes your name, email address, phone number, location (city, neighbourhood), profile photos, and any other information you choose to provide in your sitter or owner profile. For pet sitters, this also includes your service descriptions, rates, availability, home details, and optional verification documents you choose to submit, such as police-check or insurance evidence.

Site statistics are optional and require your consent. They record page paths without URL queries or fragments, approximate country, device category, referring website domain and limited action counts, without linking them to your account. Your IP address is used momentarily for country lookup and a salted daily visitor count, then discarded; it is not stored in analytics. Separately, Optional analytics can link approved campaign labels to a new account and its signup and software-use milestones. Raw search terms, email-confirmation parameters and advertising click identifiers are not collected. Essential security and account operations are separate from both optional categories. To show relevant location guides, we may also use your IP address momentarily for an approximate city lookup against a local database. This does not require GPS or send your IP to a geolocation provider. We do not store the IP or the inferred city for this feature. If a reliable supported-city match is unavailable, we show the worldwide directory. This functional lookup is separate from optional analytics.

An account may be created when you confirm a booking request. Unconfirmed request details expire after 24 hours and are deleted by our scheduled cleanup; limited hashed abuse-prevention records are retained for seven days.

Where city matching is available, it includes GeoLite data created by MaxMind.

We use your personal information to provide and improve the Service, including to create and manage your account, display your sitter or owner profile, facilitate communications between pet owners and sitters, process booking enquiries, send you service-related notifications and updates, personalise your experience, and provide customer support. The legal basis for this processing is the performance of our contract with you and our legitimate interests in operating and improving the Service.

We send essential account and service emails, plus one welcome email when a new account is verified. Marketing campaigns, onboarding email sequences, review-request campaigns and promotional reminders are disabled. We use aggregated and anonymised data for service improvement, subject to the analytics choices described below.

We share certain profile information publicly as part of the Service. If you are a pet sitter, your profile name, bio, services, rates, availability, reviews, and approximate location are visible to pet owners using the platform. If you are a pet owner, your name and profile information are shared with sitters you contact.

We may share your information with third-party service providers who assist us in operating the Service, such as hosting providers (Digital Ocean), email delivery services (Resend), payment processors (Stripe), and mapping services (Mapbox). These providers are contractually obligated to protect your data and may only use it to provide services to us. If you enable push notifications, each notification is delivered through the push service built into your browser or device (operated by Google, Mozilla or Apple depending on what you use), which necessarily receives the notification content. We do not use third-party analytics or advertising services — our own analytics are first-party and are not shared with anyone — although the Mapbox map library collects its own usage data on pages that display a map. We may also disclose your information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets.

The Pet Sitter software is free. We do not collect subscription payments for current access. Stripe may retain records of earlier subscriptions, invoices, refunds and tax transactions under its privacy policy (stripe.com/privacy). We retain the billing records needed for legal obligations and to resolve earlier transactions; we do not store full card details.

Owners pay sitters directly through arrangements sitters choose. Booking payments do not pass through The Pet Sitter. Payment instructions sitters provide, such as bank details, are encrypted at rest and shared only with authorised parties in the relevant booking and invoice workflow. These instructions do not let us collect or verify a booking payment.

We use cookies and similar technologies to provide, secure, and improve the Service. Essential cookies are necessary for the Service to function and cannot be disabled. These include cookies for authentication, session management, and security. Functional cookies remember your preferences, such as language and locale settings, to personalise your experience.

The Cookie preferences notice offers Accept all and Advanced. Advanced opens a separate settings screen with Required always on and independent Site statistics and Optional analytics switches. For new visitors, both analytics switches start on as an unsaved proposal; collection only starts after Accept all or Accept choices. To use required cookies only, turn both analytics switches off and select Accept choices. Existing saved choices are retained, and disabling either analytics category does not restrict the service. Change your choices through Cookie preferences in the footer or this policy. A necessary preference cookie remembers them for 180 days and is not a tracking identifier. Only with campaign/account consent may approved campaign labels remain in this tab’s session storage for up to 30 minutes and link to a new account for up to 90 days to measure email verification, sitter signup, business setup and use of the software. Site-statistics consent alone never authorizes this account linkage. We do not install Google conversion tags or send this measurement data to Google. Do Not Track and Global Privacy Control override both optional choices. When you select Accept choices, any categories you turned off stop measuring in this browser immediately; withdrawing campaign/account consent removes the account’s campaign linkage when the server receives the request. Retry if saving fails. Expired linkage is excluded immediately and cleared on schedule. Previously consented site-visit statistics and unlinked business totals may remain under the applicable retention rules.

AI features are disabled. Profile and verification-document reviews, message review, support and dispute decisions are handled by people. We do not send new content to AI providers for these features while they are disabled.

Where earlier AI features were used, providers included Anthropic and OpenAI. Records of earlier reviews or support interactions may include AI-generated material. They remain subject to our access controls and applicable retention obligations. If we introduce AI processing again, we will update this policy and provide any information or choices required before that processing begins. Contact [email protected] to ask about your data or request human review.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (TLS/SSL), secure hosting infrastructure, access controls, and regular security assessments.

While we take reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections and promptly addressing any security incidents in accordance with GDPR breach notification requirements and the Notifiable Data Breaches scheme under the Australian Privacy Act.

Your data is stored on managed database and hosting infrastructure provided by Digital Ocean. File uploads (such as profile photos and verification documents) are stored on Digital Ocean Spaces (S3-compatible cloud storage). Our infrastructure may be located in regions outside your country of residence.

Where your data is transferred outside the European Economic Area or Australia, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission and compliance with the APPs regarding cross-border disclosure of personal information. We take reasonable steps to ensure that overseas recipients handle your data in accordance with applicable privacy laws.

Under the GDPR, you have the right to access your personal data, rectify inaccurate data, request erasure of your data ("right to be forgotten"), restrict or object to processing of your data, receive your data in a portable format, and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at [email protected].

You may complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données). To request account deletion, contact [email protected]. We normally respond to data-rights requests within one month and will explain any lawful extension. Deletion is subject to applicable record-retention duties and the protection of legal claims; we explain any records that must be retained. Complete or cancel active bookings before closing your account.

If you are located in Australia, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You have the right to access and correct your personal information held by us. If you believe we have breached the APPs, you may lodge a complaint with us at [email protected], and we will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. We will not use or disclose your personal information for the purpose of direct marketing unless you have consented or it is impracticable to obtain your consent, and we will always provide you with a simple means to opt out.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you an email notification.

The "Last updated" date at the top of this policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

For questions, concerns or requests about this policy or your personal data, contact [email protected]. We will route your request to the person responsible for data protection.

The Pet Sitter BV is the data controller responsible for your personal information. We are registered in Belgium and subject to the supervision of the Belgian Data Protection Authority. For formal data protection enquiries, you may also write to us at our registered address.