Privacy Policy

Petabook is an online platform that helps dog owners find, compare and contact dog hotels and related dog care services in Portugal.

For privacy or data protection enquiries, please contact us at:

geral@petabook.com

Petabook may collect the following personal data:

• name;
• email address;
• phone number;
• information provided in contact or booking requests;
• user account data;
• technical data such as IP address, device type, browser, pages visited and interactions with the platform.

When a user signs in via external services such as Google, we may receive basic data required for authentication, such as name, email address and account identifier.

We use personal data to:

• operate the platform;
• create and manage user accounts;
• facilitate contact or booking requests with dog hotels;
• respond to messages and support requests;
• improve the user experience;
• ensure security, fraud prevention and technical operation;
• comply with legal obligations where applicable.

When a signed-in user starts a booking request and does not send it, Petabook may email them a reminder with the hotel and dates they had chosen, two per request at most. These reminders can be switched off at any time through the link in each email or in the profile settings.

Each processing of personal data carried out by Petabook relies on one of the legal bases set out in Article 6 of the General Data Protection Regulation:

• creating and managing accounts, contact or booking requests and communication with dog hotels: performance of the contract with the user, or steps taken at the user's request before entering into it;
• service emails, such as email address confirmation and notifications about the status of a request: performance of the contract;
• reminders about booking requests that were started but not sent: Petabook's legitimate interest in helping the user complete the request they began; the user may object at any time through the link in each email or in the profile settings;
• replying to messages and support requests: steps taken before entering into a contract, or Petabook's legitimate interest in replying to those who contact it;
• security, prevention of fraud and abuse, anti-bot checks on forms and monitoring of technical errors: Petabook's legitimate interest in keeping the platform secure and working;
• aggregate usage statistics, without cookies or identifiers: Petabook's legitimate interest in understanding how the platform is used and in telling hotels how many visits their pages receive;
• analytics and marketing cookies, and statistics linked to an identifier stored on the device: the user's consent;
• compliance with legal obligations and requests from competent authorities: legal obligation.

Where processing is based on legitimate interest, the user may object to it as described in the "Your rights" section. Where it is based on consent, consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Petabook may use Google services for features such as authentication, communications, technical analytics or integration with external tools.

When a user uses a feature linked to their Google account, Petabook requests only the access necessary to deliver the corresponding service.

Petabook does not sell users' personal data to third parties.

Petabook may share personal data only where necessary to:

• facilitate communication between the user and dog hotels or service providers;
• use technical suppliers that assist with operating the platform;
• comply with legal obligations;
• protect the rights, safety and integrity of Petabook, its users or third parties.

Technical suppliers must process data only in accordance with Petabook's instructions and for purposes related to service delivery.

To operate the platform, Petabook uses the following suppliers, which process personal data on its behalf and in accordance with its instructions:

• Vercel — hosting of the website and the platform's servers, and aggregate traffic measurement without cookies;
• Supabase — database, user authentication and file storage, including photos of dogs;
• Cloudinary — storage and delivery of accommodation photos;
• n8n — automation of emails and notifications, on an instance hosted and managed by a digital services agency engaged by Petabook;
• Zoho (Zoho Mail and ZeptoMail) — sending and receiving email;
• Google — sign-in with a Google account and, only with the user's consent, Google Analytics;
• Meta Platforms (Facebook and Instagram) — Meta Pixel, only with the user's consent;
• Cloudflare — anti-bot checks (Turnstile) on the sign-in and contact forms;
• Sentry — monitoring of the platform's technical errors.

Some of these suppliers are based in, or process data in, countries outside the European Economic Area, in particular the United States. In those cases, transfers rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the European Commission.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer period is required by law. Specifically:

• account, dog and booking request data: for as long as the account is active. Users can delete their account at any time in the profile settings;
• booking requests that were started but not sent: up to 90 days after the request was started;
• messages sent through the contact forms and support requests: up to 2 years after the last communication;
• security logs used to limit repeated attempts, which store only an encoded (pseudonymised) version of the IP address: 24 hours;
• statistics linked to an identifier, collected with the user's consent: up to 14 months;
• Google Analytics data: up to 14 months, according to the service's configuration;
• technical error logs: up to 90 days;
• the choice made in the cookie notice, stored on the user's device: a refusal is respected for 30 days, after which the notice is shown again.

Aggregate statistics, which do not allow anyone to be identified, may be kept indefinitely. Users may also request deletion of their data where applicable.

Under applicable law, including the General Data Protection Regulation, users may exercise the following rights:

• access to their personal data;
• correction of incomplete or inaccurate data;
• deletion of data;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent where processing is based on consent.

Users also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, through its website www.cnpd.pt.

To exercise these rights, please contact:

geral@petabook.com

Petabook adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Despite these measures, no online system can guarantee absolute security.

Petabook may use cookies or similar technologies to improve the user experience, analyse platform performance and ensure essential functionality.

With the user's consent, Petabook uses analytics and marketing cookies from Google Analytics and Meta (Facebook and Instagram) to understand how the platform is used and to measure the results of its campaigns. Consent can be given or refused in the cookie notice shown on the first visit.

With that same consent, Petabook also stores a random identifier on the device that links the pages viewed during a visit and on later visits. Without consent, or after it is refused, this identifier is not created, and any identifier stored earlier is deleted.

Regardless of that choice, Petabook records aggregate usage statistics — such as the number of visits to each page, the referring site, the campaign a visit arrived from and how many times certain actions are performed — without using cookies and without any identifier that would allow the visitor or their device to be recognised.

Users may manage or block cookies through their browser settings. To withdraw consent already given, simply delete the petabook.com site data in the browser settings: the cookie notice will be shown again on the next visit.

Petabook may update this Privacy Policy as necessary, in particular to reflect legal, technical or operational changes.

The most recent version will always be publicly available on the Petabook website.

For any questions about this Privacy Policy or the processing of personal data, please contact:

geral@petabook.com