Privacy policy

This privacy notice explains how MyPetTag handles personal data when you visit the website, create an account, order a pet tag or set up a pet page. It applies together with the Terms and Conditions and the Cookie policy.

1. Who is responsible for your data

The data controller is the business that operates MyPetTag. Its name, registered seat and contact details are on the Company details page, which is also where you reach us with any question about your data. We process personal data in line with Regulation (EU) 2016/679 (GDPR) and the Hungarian Act CXII of 2011 on informational self-determination and freedom of information.

2. What we collect, why, and on what basis

Your account

• What: your email address (also your login), phone number and password (stored only as a salted hash, never in readable form) and, if you add them, a display name, nickname, profile picture and extra email addresses or phone numbers. We also keep when the account was created and your choices about what your pet pages show.
• Why: to create and secure your account, let you manage your pets and orders, and contact you about them.
• Basis: performance of a contract (GDPR Art. 6(1)(b)).

Orders and delivery

• What: your name, delivery address, phone number and email address, the items ordered, prices, the delivery option and its fee, any coupon used, the order status, and the time you accepted the Terms together with the version you accepted.
• Why: to process, deliver and invoice your order, to handle complaints and warranty claims, and to be able to show what was agreed.
• Basis: performance of a contract (Art. 6(1)(b)); legal obligation for the accounting and tax records we must keep (Art. 6(1)(c)); and our legitimate interest in dealing with claims (Art. 6(1)(f)).

Tags and pet pages

• What: the tag codes linked to your account and the details you enter about a pet: name, type, age, sex, colour, weight, medical notes, temperament, description, photos, and whether it is currently lost.
• The public page: every pet has a page that anyone can open by scanning its tag or following its link. Everything you enter there is visible to every visitor, together with the contact details you choose to show in your profile settings (name, nickname, email addresses and phone numbers, optionally only while the pet is marked lost). Please do not put anything on a pet page that you do not want strangers to read, and upload only photos you are entitled to use. Photos are re-encoded when uploaded and their embedded metadata, such as GPS location, is removed.
• Why: so that a lost pet can be returned to you.
• Basis: your consent, given when you create the page (Art. 6(1)(a)). You can withdraw it at any time by changing what your profile shows, editing the page or deleting the pet. Withdrawing does not affect what happened before.

Contact form, email and replies

• What: your name, email address and message, and the emails we send you: order confirmations, account and password emails, and replies to you.
• Why: to answer you and to provide the service.
• Basis: our legitimate interest in answering enquiries (Art. 6(1)(f)), or performance of a contract where the message is about an order.

Reviews

• What: the name you give, your rating and your text, linked to your account. A review can be shown publicly on the website.
• Basis: your consent, given by submitting it (Art. 6(1)(a)).

Technical and security data

• What: server logs (the page requested, the time, error details) and your IP address, which is used to limit abuse such as repeated sign-in attempts. After several failed sign-ins an account is locked for a short while.
• Why: to keep the service secure and to fix faults.
• Basis: our legitimate interest in running a secure service (Art. 6(1)(f)).

Cookies

Only cookies the site needs in order to work are used today. They are listed in the Cookie policy.

3. Who receives your data

• Hosting and database: Railway, which stores the website and its database on our behalf. The Company details page names our hosting provider.
• Email delivery: Resend, which sends the emails described above.
• Delivery: the delivery company you choose at checkout receives your name, delivery address and phone number so that it can deliver your parcel.
• Accounting and invoicing: any accountant or invoicing service we use receives the order and invoice data needed to meet our legal obligations.
• Authorities, courts and other bodies, where the law requires or allows it.

Providers that process data on our behalf do so only on our instructions. We do not sell personal data, we do not use it for advertising, and the site has no analytics or advertising trackers. Some providers are established outside the EU/EEA; where data is transferred there, we rely on the safeguards the GDPR provides, such as an adequacy decision or standard contractual clauses.

4. How long we keep it

• Account data: until you delete your account.
• Tags and pet pages: until you delete the pet or your account.
• Orders and the data on them: eight years from the order, because Hungarian accounting and tax law requires it. After that the personal details are removed from the order.
• Contact messages: one year.
• Records of emails sent: the stored message for 90 days, the record itself (recipient, subject and time) for one year.
• Reviews: until you ask us to remove them or you delete your account.
• Server logs: 30 days.
• Your cookie choice: one year.

5. How we protect it

Connections to the site are encrypted (HTTPS). Passwords are stored as salted hashes. The admin area is restricted to authorised staff, sign-in attempts are rate-limited, and uploaded photos are stripped of metadata. If a personal data breach is likely to put you at risk, we will notify the data protection authority within 72 hours and, where the law requires it, tell you without undue delay.

6. Your rights

• Access (Art. 15): ask for a copy of your data and for information about how we use it.
• Rectification (Art. 16): have inaccurate data corrected. You can edit your profile and pets yourself.
• Erasure (Art. 17): ask us to delete your data.
• Restriction (Art. 18) and objection (Art. 21): ask us to limit the processing, or object to processing that rests on our legitimate interest.
• Portability (Art. 20): receive the data you gave us in a machine-readable format.
• Withdrawal of consent (Art. 7): at any time.

How to use them: you can download a copy of your data or delete your account yourself under Account, then Personal data. For anything else, use the contact details on the Company details page. We answer within one month of receiving your request. For complex requests this can be extended by up to two more months, and we will tell you if so. It is free of charge unless a request is clearly unfounded or excessive.

What erasure does: we delete everything we are not required to keep. Orders and the tag codes sold to you must be kept for the accounting period, so they remain, but they are no longer linked to a working account of yours.

We do not make decisions about you by purely automated means.

7. Complaints and remedies

If you think we have handled your data unlawfully, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or go to court, where you may choose the court of your place of residence.

8. Children

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

9. Changes

We update this notice when what we do changes. The version number and date are shown at the bottom of this page.