1. Who we are
Pet Manifest Ltd ("PetManifest", "we", "us") is the data controller for this website and owner accounts. We are registered in England and Wales No. 17251023. Our registered office is 13 Lincoln Road, Bromsgrove, England, B61 8SE. This Privacy Policy explains how we process personal data when you use our website, mobile web app, and related services (collectively, the "Service").
For privacy enquiries or to exercise your rights, contact privacy@petmanifest.com.
2. Data we collect
Account and identity data
- Email address, name, password hash, and account type (pet owner or business user)
- Optional profile preferences such as notification settings and language
- Authentication events and session metadata required to secure your account
Household and pet care data
- Household names, member roles, invite tokens, and care instructions
- Pet profiles including species, routines, medical notes, photos, and feeding logs
- Calendar events, contacts, visit reports, walk routes, and uploaded documents
- Encrypted household security details such as alarm codes or key locations when you choose to store them
Business and billing data
- Business profile, staff assignments, intake questionnaires, and booking requests
- Payment and subscription identifiers processed through Stripe (we do not store full card numbers)
Technical and usage data
- Device/browser type, IP address, timestamps, and error logs needed to operate and secure the Service
- Locally cached app data on your device for offline use, synced when connectivity returns
3. How we use data
We use personal data to:
- Provide, maintain, and improve the Service
- Authenticate users and enforce role-based access within households and businesses
- Send operational notifications you opt into (meals, medical reminders, household updates)
- Process subscriptions and invoices through our payment partners
- Detect abuse, troubleshoot incidents, and meet legal obligations
We do not sell personal data. We do not use pet care records for unrelated advertising profiling.
4. Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on:
- Contract — to deliver the Service you sign up for
- Legitimate interests — to secure the platform, prevent fraud, and improve reliability
- Consent — for optional notifications or marketing where required
- Legal obligation — where we must retain or disclose information by law
5. Sharing and processors
We share data only when necessary with:
- Infrastructure providers that host our application and database
- Stripe for payments and Connect payouts
- Email or push notification providers when you enable alerts
- Professional advisers or authorities when required by law
Household members and assigned business staff can access data according to the roles configured in your workspace. You control invites and member permissions in Household Settings.
6. International transfers
If data is processed outside your country, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, and we limit access to what is necessary to run the Service.
7. Retention
We retain account and care records while your account is active and for a reasonable period afterward to resolve disputes, meet regulatory requirements, and maintain audit trails. You may request deletion subject to legal and contractual limits.
Directory data
Public directory cards for unclaimed businesses are compiled from UK registers: Companies House (Crown copyright), the Charity Commission, local authority animal activity licences published under the Open Government Licence v3.0, and Food Standards Agency hygiene ratings (date-stamped from the published inspection). Google Places fields are shown only with the required “Powered by Google” attribution.
Under UK GDPR Article 14 we tell you when we process public-register data to publish a directory listing. Under Article 21 you may object. Use directory data and removal or email privacy@petmanifest.com to hide a listing.
Open Government Licence v3.0.
Cookies and similar technologies
Strictly necessary: Stripe payment cookies (__stripe_mid,
__stripe_sid) for fraud prevention, and Cloudflare
Turnstile on sign-in and registration. These last for the session up
to one year (Stripe mid).
Optional (off until you Accept or enable them in Manage): Sentry error
diagnostics, performance tracing, and session replay; marketing
dataLayer acquisition events. Map tiles from OpenMapTiles
/ CARTO may be cached in the browser while you use directory search.
We do not use advertising cookies. Session replay is not strictly necessary and is gated on consent (PECR regulation 6).
8. Your rights
Depending on your location, you may have the right to:
- Access, correct, or delete personal data
- Restrict or object to certain processing, including directory listings compiled from public registers (Article 21)
- Data portability
- Withdraw consent where processing is consent-based
- Lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk, 0303 123 1113
How to complain
Write first to privacy@petmanifest.com or use /complaints. We aim to respond within 30 days. If you are not satisfied, you may complain to the ICO (the UK supervisory authority) at ico.org.uk or 0303 123 1113.
Contact privacy@petmanifest.com to submit a data-rights request.
9. Children
The Service is not directed at children under 16. Accounts must be created by an adult responsible for the household or business.
10. Changes
We may update this policy as the product or legal landscape changes. Material updates will be reflected on this page with a revised "Last updated" date.