Privacy policy

Who we are

This website and the personalized book service about your dog's breed are offered under the trade name Pet Histories. We operate entirely in digital format. We have no physical premises open to the public.

For any question related to this policy, write to us at [email protected]. We'll reply personally.

What data we collect

To prepare your dog's book and provide you with the service, we collect these categories of data:

Contact details

• The name or nickname you want to use.
• The email address where you'll receive the book.

Data about your dog

• Their name and their sex.
• Their breed, if you know it.
• A photo of them, if you don't know their breed and want us to identify it. This has a section of its own: section 3.
• Anything you choose to tell us about them, if you fill in the optional free-text field. It is optional. We use it only to write their book, and it may be reflected in the text.

Your dog's data is not strictly your own personal data, but it travels attached to your order and your email address, so we treat it with the same care as everything else.

Payment data

• It is processed directly by our payment gateway.
• We do not store your card number or your banking details on any server of ours.

Automatic technical data

• IP address, browser, operating system and device.
• Pages you visit and time you spend on the site.
• Cookies and similar technologies (more detail in section 10).

Communications

• Messages you send us by email or through a form.
• Comments and feedback you choose to share with us.

Your dog's photo

Who sees it

The photo is reviewed by our team, who determine the breed or the mix, and by support staff who need access to your order in order to help you. Nobody else. Access is restricted to those people and is logged.

We rely on automated tools to sort and classify the material we receive, but the breed identification is always reviewed and confirmed by a person before it goes into the book. We do not make automated decisions that produce legal effects concerning you or that similarly significantly affect you, within the meaning of Article 22 of the General Data Protection Regulation.

What we do NOT do with it

• We don't publish it. Not on the website, not on social media, not in ads, not in any promotional material.
• We don't use it for marketing unless you give us separate, specific, written consent for that particular use. That consent is voluntary, it is independent of your purchase and you can withdraw it whenever you want.
• We don't sell it or hand it over to third parties for commercial purposes.
• We don't use it to develop products or for any purpose other than preparing your dog's book.
• We don't apply facial recognition or any technique aimed at identifying people.

Metadata: what a photo carries inside without you seeing it

Photos taken with a phone or a camera usually include technical metadata (the EXIF format): date and time of capture, device model and, in many cases, the exact geolocation of the place where it was taken, which is often your home.

If you'd rather not depend on that, you can remove the metadata yourself before uploading, from your phone's settings or with any image editor.

If a person appears in the photo

It happens often: a hand, someone holding the dog, the family in the background. It's not a problem for us, but there are two things worth knowing:

• We only look at the dog. We don't identify, classify or process in any way the people who appear incidentally.
• If someone recognizable who isn't you appears in the photo, you must have their permission before uploading it. If that person writes to us at [email protected] asking us to delete the image, we will delete it.

Our simple recommendation: upload a photo of your dog alone, full body and in good light. It's better for the identification and it's better for your privacy.

How long we keep it

• While we're preparing the book, we keep it because we need it to work.
• After delivering it to you, we keep it for up to 90 days, so we can handle a review or a question about the identification.
• Once that period is over, we delete it securely from our systems.

You can ask us to delete it sooner by writing to [email protected]. We'll do it without asking you for explanations. Bear in mind that if we delete it before the book is finished, we probably won't be able to complete the breed identification.

Legal basis

We process the photo in order to perform the contract we have with you: you give it to us so we can identify your dog's breed and prepare their book, which is exactly what you asked us for. Any use other than that requires your express, separate consent.

What we use your data for

We use your information solely for these purposes:

• To identify your dog's breed or mix, when you upload a photo.
• To prepare their personalized book based on their breed, their name and the details you share with us.
• To deliver the book to you at the email address you gave us.
• To communicate with you about the status of your order, your questions or your requests.
• To meet accounting and tax obligations arising from the transaction.
• To improve the service based on aggregate, anonymous browsing behavior.
• To prevent fraud and protect the security of the site and of the people who use it.
• To send you optional communications only if you ticked the express consent box.

We do not build profiles with your data, nor do we make automated decisions with legal effects concerning you.

Legal basis for processing

We process your data on the following legal bases (under the General Data Protection Regulation for residents of the European Union, the Ley Federal de Protección de Datos Personales en Posesión de los Particulares for Mexico and Ley 25.326 for Argentina, as applicable):

• Performance of the contract: the data needed to identify the breed, prepare the book and deliver it to you. Your dog's photo falls under this basis.
• Express consent: optional commercial communications, non-essential cookies and any use of the photo other than preparing the book.
• Legitimate interest: site security, fraud prevention and service improvement using anonymized data.
• Legal obligation: retention of transaction records for the applicable tax periods.

Who we share your data with

We don't sell your data. We don't share it for third-party advertising purposes. We only work with providers strictly necessary for the service to function, all of them under confidentiality agreements and with security measures aligned with applicable regulations.

Providers that receive limited data

• Payment gateway: receives your email address and the card details you yourself enter into its secure form. We never see your card.
• Hosting and storage: the servers where the website lives and where your order and your dog's photo are kept, encrypted, for as long as we retain them.
• Email delivery: the provider that delivers the email with your book and our communications.
• Campaign measurement (Meta and Google): they receive aggregate browsing data, and only if you consent to marketing cookies. They never receive your dog's photo.

We may also share information when required to do so by a competent authority or by a legal obligation.

International transfers

Some of our providers operate mainly from the United States, which involves international data transfers.

To guarantee an adequate level of protection, these transfers are covered by the standard contractual clauses approved by the European Commission and, where applicable, by the providers' recognized certifications.

If you have questions about how your data is protected when it crosses borders, write to us at [email protected].

How long we keep your data

We keep your data only for as long as necessary to fulfil the purposes stated:

• Your dog's photo: up to 90 days after we deliver the book to you. See section 3.
• Order and book data: the tax retention period corresponding to the jurisdiction where you purchased (5 years in Argentina and Mexico; 6 years in Spain, in accordance with Article 30 of the Código de Comercio).
• Support communications: 2 years from the last interaction.
• Marketing data: until you withdraw your consent.
• Anonymous browsing data: 26 months maximum.

Once those periods are over, we delete or anonymize the information securely.

Your rights

You have the following rights over your personal data, and you can exercise them at any time by writing to us at [email protected]. In Spain and the European Union these are the rights under the General Data Protection Regulation; in Mexico they are the ARCO rights; in Argentina, those under Ley 25.326. In practice they cover the same ground:

• Access: to know what data we hold about you and obtain a copy.
• Rectification: to correct inaccurate or out-of-date data.
• Erasure or cancellation: to have us delete your data when it is no longer necessary. This includes your dog's photo, at any time.
• Objection: to object to processing based on our legitimate interest.
• Restriction: to temporarily restrict how we process your data.
• Portability: to receive your data in a structured, readable format so you can take it to another controller.
• Withdrawal of consent: whenever you want, without affecting the lawfulness of processing carried out beforehand.

To handle your request we may need to verify your identity. We'll reply within the time limits set by the regulations of your country.

If you believe we haven't handled your request properly, you have the right to lodge a complaint with the data protection authority of your country of residence: the Agencia Española de Protección de Datos in Spain, INAI in Mexico and the Agencia de Acceso a la Información Pública in Argentina.

United States and California residents

If you live in the United States, this section applies to you in addition to the rest of this policy.

We do not sell your personal information. We also do not share it for cross-context behavioral advertising in exchange for money or any other valuable consideration, in the sense California law gives those terms.

If you are a California resident, the California Consumer Privacy Act (CCPA, as amended by the CPRA) gives you the following rights, which you can exercise by writing to [email protected]:

• Right to know: what categories of personal information we collect, why, from what sources, and who we share it with — and to get a copy of the specific information we hold.
• Right to delete: ask us to delete the personal information we hold about you, including your dog's photo, subject to the exceptions the law itself allows.
• Right to correct: ask us to fix inaccurate information.
• Non-discrimination: we will not deny you service, charge you a different price, or give you a worse version of the product because you exercised any of these rights.
• Opt out of sale or sharing: since we do not sell or share your information in the sense of the law, there is nothing to opt out of. If that ever changed, we would say so here before doing it and provide the corresponding mechanism.

You can exercise these rights yourself or through an authorized agent. To protect you, before we respond we verify that the request comes from the email address associated with your order. We respond within the timeframes set by law.

The data we process does not include sensitive categories as defined by California law, and we do not carry out profiling with legal effects on you. We do not direct the service to children under 16 and we do not sell children's data.

Cookies and similar technologies

We use cookies to make the website work, remember your preferences and understand how the site is used.

Types of cookies we use

• Essential: needed to browse and complete a purchase. They don't require consent.
• Preference: they remember language, currency and other options you chose.
• Analytics: they measure aggregate use of the site so we can improve it. Anonymous as far as the technology allows.
• Marketing: they measure the performance of advertising campaigns. They are only activated with your consent.

You can manage your preferences from the banner that appears on your first visit or from your browser settings.

Security of your data

We apply reasonable technical and organizational measures to protect your information:

• Encryption in transit via TLS.
• Encryption at rest for order data and your dog's photo.
• Access restricted to strictly necessary staff.
• Up-to-date software and industry-standard security practices.

No transmission over the internet is completely secure. If we detect a breach affecting your personal data, we'll let you know without undue delay and we'll notify the relevant authority where the regulations require it.

Minors

Pet Histories is not directed at people under 18. We do not knowingly collect personal data from people under that age.

If you believe a minor has provided us with data without authorization, write to us at [email protected] and we'll delete it as soon as possible.

Changes to this policy

We may update this policy when our practices or the applicable regulations change. The version in force will always be published on this page, with the date of last update at the top.

If the changes are substantial, we'll let you know by email before they take effect.