Contents
  1. Who we are
  2. What data we collect
  3. Why we collect it — legal basis
  4. How we store your data
  5. Third-party processors
  6. International data transfers
  7. How long we keep your data
  8. Your rights under GDPR
  9. How to exercise your rights
  10. Supervisory authority
  11. Cookies and analytics
  12. Changes to this policy
  13. Contact

1. Who we are

This privacy policy applies to Rescue My Pet, a digital service accessible at rescuemy.pet, operated from Girona, Spain (European Union).

We are the data controller for the personal data described in this policy. This means we decide how and why your data is processed. If you have any questions, you can contact us at hello@rescuemy.pet.

2. What data we collect

When you purchase our kit and set up your emergency page, we collect the following categories of personal data:

Category Data collected Required?
Your identity Your full name Required
Pet information Pet's name, species (dog, cat, or other) Required
Home address Your full residential address (street, number, floor, city, postal code) Required
Guardian contacts Name and phone number of two emergency guardians you designate Required
Home access instructions Description of how to enter your home (e.g. key location, door code, neighbour contact) Required
Veterinarian details Name and phone number of your vet clinic Optional
Pet care notes Medication, daily routine, temperament, or any other care instructions Optional
Purchase data Email address and purchase details collected at checkout (processed by Lemon Squeezy, our payment platform — see Section 5) Required
Please note: The home address and access instructions you provide are sensitive. We strongly recommend only sharing your emergency page link with people you trust. Your emergency page is not indexed by search engines and is only accessible to anyone who holds your unique link.

We do not collect any special category data as defined in Article 9 GDPR (such as health, racial or ethnic origin, or biometric data). Pet medical notes you provide voluntarily are not considered health data under GDPR as they relate to an animal, not a person.

3. Why we collect it — legal basis

Under Article 6 of the General Data Protection Regulation (GDPR), we rely on the following legal bases:

Performance of a contract (Art. 6(1)(b))

The primary reason we collect your data is to deliver the service you purchased. When you buy the Rescue My Pet kit, the core product is a personal emergency page displaying your pet details, guardian contacts, and home access instructions. We cannot provide this service without this data. Processing is therefore necessary for the performance of our contract with you.

Legitimate interests (Art. 6(1)(f))

We may also process data on the basis of our legitimate interest in operating and improving the service (for example, to ensure the platform functions correctly and remains available). We have assessed that this interest does not override your rights and freedoms given the limited nature of the processing.

We do not rely on consent for core processing

We do not use consent as the legal basis for collecting the data listed above. Your right to withdraw consent does not therefore apply to this processing. You may, however, request deletion of your data at any time (see Section 8).

4. How we store your data

Your emergency page data (name, pet details, guardian contacts, address, and access instructions) is stored in Airtable, a cloud database service. Each customer's data is stored as a single record, identified by a unique randomly generated ID that forms part of their emergency page URL.

Your emergency page is accessible at a URL of the form rescuemy.pet/emergency.html#[unique-id]. This link is not indexed by search engines (we apply a noindex meta tag) and is not guessable by brute force. Only people who hold your link can view your emergency page.

Your data is never sold, rented, or shared with third parties for marketing purposes. It is used solely to operate your emergency page and deliver the service you purchased.

5. Third-party processors

We use the following sub-processors to operate our service. Each is bound by a data processing agreement and may only process your data according to our instructions.

Processor Role Location Data shared
Airtable
airtable.com
Database storage for emergency page data USA All emergency page fields (name, address, guardians, access instructions, pet info)
Lemon Squeezy
lemonsqueezy.com
Payment processing and purchase confirmation emails USA Email address and purchase data (processed independently — see their privacy policy)
Brevo
brevo.com
Transactional email delivery (setup link after purchase) EU (France) Email address and setup link
Netlify
netlify.com
Website hosting and content delivery USA Server access logs (IP address, page visited, timestamp) — standard web hosting logs, not stored by us

We do not use advertising networks, tracking pixels, or social media plugins that share your data with third parties for advertising purposes.

6. International data transfers

Some of our processors (Airtable, Lemon Squeezy, Netlify) are based in the United States. Transfers of personal data to the USA are lawful under one or more of the following mechanisms:

You may request a copy of the applicable safeguards by contacting us at hello@rescuemy.pet.

7. How long we keep your data

We retain your emergency page data for as long as your account is active — that is, for as long as you wish your emergency page to remain available.

If you request deletion of your data, we will erase your emergency page record from Airtable within 30 days of receiving your request. After deletion, your emergency page URL will return a "not found" result.

We do not retain your data after deletion for any purpose other than as required by law (for example, transaction records that must be kept for tax purposes are retained by our payment processor, Lemon Squeezy, in accordance with their own retention obligations).

8. Your rights under GDPR

As a data subject in the European Union, you have the following rights under the GDPR. These rights are not absolute and may be subject to limitations, but we will always respond to your request promptly and explain any limitations that apply.

Right of access (Art. 15)

You have the right to obtain a copy of all personal data we hold about you, along with information about how and why it is processed.

Right to rectification (Art. 16)

You have the right to correct any inaccurate or incomplete data we hold about you. You can update your emergency page at any time via your setup link.

Right to erasure (Art. 17)

You have the right to request that we delete all personal data we hold about you — including your emergency page and all associated records.

Right to portability (Art. 20)

You have the right to receive your data in a structured, machine-readable format (e.g. JSON or CSV) so you can transfer it to another service.

Right to restriction (Art. 18)

You have the right to ask us to suspend processing of your data — for example, while you contest its accuracy or while we review a deletion request.

Right to object (Art. 21)

Where we process data on the basis of legitimate interests, you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds.

You also have the right not to be subject to decisions based solely on automated processing (Art. 22 GDPR). We do not make any automated decisions about you.

9. How to exercise your rights

To exercise any of the rights described above, email us at hello@rescuemy.pet with the subject line "Data request". Please include your name and the email address you used to purchase the kit so we can identify your record.

We will respond to all requests within 30 days of receipt. If we need more time (up to 90 days for complex requests), we will inform you and explain why. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

Data controller
Rescue My Pet
Girona, Spain (EU) hello@rescuemy.pet

10. Supervisory authority

If you believe that your data has been processed unlawfully or that we have failed to respond appropriately to your rights request, you have the right to lodge a complaint with the competent supervisory authority.

As we are based in Spain, the lead supervisory authority is:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 · 28001 Madrid, Spain
www.aepd.es  ·  +34 901 100 099

You may also lodge a complaint with the data protection authority in your country of residence if it differs from Spain.

11. Cookies and analytics

We do not currently use cookies, tracking pixels, or third-party analytics scripts on rescuemy.pet. Our website is a static site hosted on Netlify. Netlify may collect standard server access logs (IP address, browser type, page visited, timestamp) as part of normal web hosting operations. These logs are not controlled by us and are governed by Netlify's privacy policy.

If we add analytics tools in the future, we will update this policy and, where required, obtain your consent before setting any non-essential cookies.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the effective date at the top of this page.

We encourage you to review this page periodically. Continued use of our service after any update constitutes acceptance of the revised policy.

13. Contact

For any questions about this privacy policy or about how we handle your personal data, please contact us:

Data controller — Rescue My Pet
hello@rescuemy.pet
Send us an email We aim to respond within 2 business days.