Privacy Policy

Effective date: 2026-04-17

This Privacy Policy explains how CloudBuddies (“CloudBuddies”, “we”, “us”, “our”) collects, uses, stores and shares personal data when you use our website, mobile experiences, QR/NFC pet tag services, and related features (the “Service”).

1. Who we are

  • Service name: CloudBuddies
  • Website: cloudbuddies.co.uk
  • Contact: Please use our contact form on the website for privacy enquiries.

2. What data we collect

2.1 Account & profile data
  • Owner details you provide such as name, email address, phone number and address details (where applicable).
  • Login data and authentication events (e.g., magic links, sessions, timestamps).
2.2 Pet profile data
  • Pet details you enter such as name, breed/type, colour, gender, date of birth, microchip number, dietary needs, allergies, vet/insurance info, and any “about” information.
  • Pet photos you upload.
  • Privacy settings that control which fields are shown on the public profile.
2.3 Tag and scan data
  • Tag identifiers (e.g., tag code / pet URL) and linking status (activated, linked to a pet profile).
  • Scan events and scan counts (e.g., when a tag is scanned and a profile is viewed).
2.4 Communications data
  • Messages you send through the Service and notifications we send you (e.g., email and SMS/WhatsApp notifications where enabled).
  • Support enquiries submitted through our contact form.
2.5 Purchase & billing data
  • Order metadata (e.g., tag quantity, order status) and shipping details you provide for shop purchases.
  • Subscription and entitlement status (e.g., plan code, active/cancelled state).
  • Payment details: we do not store full card details on our servers. Payments are processed by third-party payment providers.
2.6 Technical and usage data
  • Device/browser information, IP address, logs, and cookies necessary to operate and secure the Service.

3. How we use your data

We use personal data to:
  • Provide the Service: create accounts, activate and link tags, host pet profiles, and show a pet profile when a tag is scanned.
  • Process purchases and subscriptions, deliver tags, and provide receipts/notifications.
  • Send transactional messages (e.g., magic links, order confirmations, subscription status updates, tag replacement notifications).
  • Maintain safety and security, prevent abuse/fraud, and troubleshoot issues.
  • Improve and develop the Service (analytics, performance monitoring, feature development).

4. Legal bases (UK/EU GDPR)

Depending on your location, we process data under one or more of these bases:
  • Contract: to provide the Service you request (accounts, pet profiles, subscriptions, orders).
  • Legitimate interests: to secure, maintain and improve the Service, prevent fraud and manage support.
  • Consent: where required for certain communications or optional features.
  • Legal obligation: where we must comply with laws (e.g., accounting, tax, or regulatory requirements).

5. What is visible when someone scans a tag

When a tag is linked to a pet profile, the public profile can be viewed by anyone who scans the tag. What is displayed depends on your privacy settings. You are responsible for choosing which owner/pet details you share publicly.

6. Sharing and third parties

We share data only as needed to operate the Service, including with:

  • Payment providers: Stripe and Mercado Pago (to process payments and subscription events).
  • Email delivery: our email service/provider configured in our infrastructure to send transactional emails.
  • SMS/WhatsApp: messaging providers used to send notifications and deliver messages (as configured).
  • Anti-spam: Google reCAPTCHA (used on the contact form).
  • Hosting and infrastructure: providers that host our servers and databases.

These providers act as processors (or independent controllers where applicable) and process data under their own terms and privacy policies.

7. Data retention

  • We retain account and pet profile data for as long as your account is active or as needed to provide the Service.
  • We retain order and billing records as required for legal and accounting purposes.
  • We retain logs and security records for a limited period to detect and prevent abuse.

8. Security

We use reasonable technical and organisational measures to protect data. However, no system is completely secure. You should protect your account by using secure devices and not sharing login links.

9. International transfers

Some service providers may process data outside your country. Where required, we use appropriate safeguards.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your data, and to data portability. You may also have the right to lodge a complaint with your data protection authority.

11. Cookies

We use cookies and similar technologies to keep you logged in, secure the Service, and improve performance.

12. Children’s privacy

The Service is not intended for children under 13. If you believe a child has provided personal data, please contact us.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date.