1.1 Personal Information

When you register or use our Services, we may collect:

• Identity data: Full name, email address, phone number.
• Account data: Password (encrypted), Google account details (if using Google Sign-In).
• Profile data: Address, preferences, account settings.

1.2 Pet Information

To provide pet care services, we collect:

• Pet name, breed, age, weight, and size.
• Pet photos uploaded by you.
• Health records entered through Vitals (vaccinations, vet visits, medications, diet, exercise logs).
• Grooming history and preferences.

1.3 Booking & Transaction Data

• Service bookings, appointment dates, and time slots.
• Payment information (processed through secure third-party payment gateways — we do not store card numbers).
• Booking codes and service history.
• Spotless Prime membership details and wallet transactions.

1.4 Usage & Device Data

• IP address, browser type, device type, and operating system.
• Pages visited, features used, and session duration.
• Referral source and interaction patterns.

1.5 IoT & Sensor Data

Our Smart Pet Wash Stations are equipped with IoT sensors (ESP32-based nodes) that collect:

• Water temperature, flow rate, and session duration data.
• Machine operational metrics for quality assurance.
• This data is linked to your booking but does not include personally identifiable information.

We use your information for the following purposes:

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party partners who assist in payment processing, cloud hosting, email delivery, and analytics — bound by confidentiality agreements.
• Grooming Professionals: Mobile grooming staff receive only the minimum information necessary (pet name, size, appointment details) to deliver services.
• Legal Requirements: When required by law, court order, or government authority, or to protect the rights, safety, or property of Petgully Services Pvt. Ltd. or its users.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction, with prior notice.

We implement industry-standard security measures to protect your data:

• Encryption: Passwords are hashed using bcrypt. Data in transit is protected via TLS/SSL encryption.
• Secure Hosting: Our platform is hosted on secure cloud infrastructure with regular security audits.
• Access Controls: Employee access to user data is restricted on a need-to-know basis with role-based permissions.
• Photo Storage: Pet photos are stored in secure cloud storage (AWS S3) with access controls.
• Payment Security: All payment processing is handled by PCI-DSS compliant third-party gateways. We never store your complete card details.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.

We use cookies and similar technologies for:

• Essential Cookies: To maintain your session and enable core functionality (login, bookings).
• Analytics Cookies: To understand how users interact with the Platform and improve our services.
• Preference Cookies: To remember your settings and personalise your experience.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Platform.

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal information through your profile settings or by contacting us.
• Erasure: Request deletion of your personal data, subject to legal and operational requirements.
• Withdraw Consent: Withdraw consent for data processing at any time. This may limit your ability to use certain features.
• Data Portability: Request your data in a structured, commonly used format.
• Grievance Redressal: Lodge a complaint with us or with the Data Protection Board of India if you believe your data rights have been violated.

To exercise any of these rights, contact us at support@petgully.com. We will respond within 30 days.

We retain your personal data for as long as:

• Your account remains active on the Platform.
• Necessary to provide you with our Services.
• Required by applicable law, regulation, or legal obligation.
• Needed to resolve disputes and enforce our agreements.

Upon account deletion, your personal data will be deleted or anonymised within 90 days, except where retention is required by law. Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@petgully.com.

Our Platform may contain links to third-party websites or integrate with third-party services (e.g., Google Sign-In, payment gateways). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing any personal information.

Your data is primarily stored and processed in India. In cases where data is transferred to servers outside India (e.g., cloud infrastructure providers), we ensure that adequate safeguards are in place as required by the Digital Personal Data Protection Act, 2023.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on the Platform with a revised "Last updated" date.
• Sending an email notification for significant changes.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised policy.

In accordance with the Information Technology Act, 2000, the name and contact details of the Grievance Officer are:

For any privacy-related queries, concerns, or requests, please reach out to: