Privacy policy

Last updated: 22 September 2026

Who we are and whose data this covers

PawDocky is operated under the brand aenordic.

Support and privacy enquiries: aenordicvfx@proton.me

We handle account, support and service-security information to operate PawDocky. A pet-care business using PawDocky determines the purposes for the owner, staff and guest information it uploads. For those workspace records, the business is normally the controller and PawDocky acts on its instructions as a processor. This notice is not a substitute for the hotel's privacy notice or any required data-processing agreement.

Information handled

• Account information: username, email address, business details, staff roles, password hashes and account-recovery information.
• Workspace information supplied by a business: pet and owner records, contact details, booking dates, care instructions, payment records, photos, documents and property layouts or images.
• Service information: session identifiers, request and error logs, IP-related abuse-prevention information, and records of document activity.
• Support information you send us, including correspondence and information needed to investigate a request.

Personal information may come directly from you or from the business that manages your booking or staff account. PawDocky does not require pet owners' passports. Businesses must assess necessity and legal authority before uploading identity documents or other sensitive records.

Purposes and legal bases

We use account information to provide the requested service and administer our contract. We process business contact, support and security information for our legitimate interests in operating, protecting and troubleshooting PawDocky, subject to people's rights. We may retain or disclose information where required by law. Optional processing that requires consent will be explained when requested. A hotel is responsible for determining its legal basis for customer and staff records.

Access and service providers

Workspace access depends on membership and role. Authorised staff may access documents according to their selected audience. PawDocky administrators may access information where needed for authorised support, security or legal obligations.

Cloudflare supplies hosting, database storage and network services. Its processing may occur in countries outside your own. We do not promise storage exclusively in the EU or any other region. Contact us for details of the applicable processing arrangements and transfer safeguards before uploading information with specific residency requirements.

Paddle processes purchase and billing information as merchant of record under its own Privacy Policy. We do not use workspace records for advertising or sell them to advertisers.

Retention and deletion

Account and workspace records are retained while needed to provide the service. The business controls the continued need for its guest records and can remove supported records and documents through the app. Documents with an expiry date become inaccessible after expiry and are scheduled for removal. Documents without an expiry are not automatically removed on that basis. Document activity events are scheduled for removal after one year.

For account closure, access or deletion requests, contact us. We assess what can be deleted and what must be retained for legal obligations, security or dispute resolution, and explain any exception. Removal from active storage does not necessarily erase existing backup copies immediately. Backup retention and any legally required retention may affect when all copies expire. We do not promise immediate deletion from every backup.

Cookies and browser storage

A necessary secure session cookie keeps you signed in, normally for up to seven days. Browser storage remembers appearance preferences and may hold unsaved property-layout drafts during your session. These features support the service rather than advertising. You can clear browser storage or cookies, but may lose drafts or be signed out.

Security

The service uses HTTPS, hashed passwords, expiring sessions and workspace access checks. Uploaded documents are served through authenticated access checks. No system is risk-free: protect your account, restrict staff access and avoid collecting information you do not need. Do not send passwords or payment-card details to support.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you can withdraw it without affecting prior lawful processing. You may complain to your local data-protection authority; in the UK this is the Information Commissioner's Office.

For information uploaded by your pet-care provider, contact that business first. You may also contact us and we will help route your request. We may verify identity using proportionate information. We do not use this service to make automated decisions with legal or similarly significant effects about individuals.

Account details are necessary to provide an account; without them we cannot supply that account. PawDocky is intended for adult business users, not as a service directed to children.

Updates

We will update this notice when our practices change and provide additional notice where required. The date at the top identifies this version.