MaxPetPrivacy Notice
This Privacy Notice explains how MaxPet (“we”, “us”, “our”), accessible at maxpet.co.uk, collects, uses, shares and protects your personal data, and the rights you have. We are committed to handling your information responsibly and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should be read together with our Cookie Policy.
1. Who we are
MaxPet is a health‑tracking service for dogs, operated by MaxPet Limited, a company registered in England and Wales under company number 17336437, whose registered office is at 66 Paul Street, London EC2A 4NA, United Kingdom. For the purposes of UK data protection law, MaxPet Limited is the “data controller” for the personal data described in this notice. MaxPet Limited is registered with the Information Commissioner’s Office (ICO), registration reference ZC200547. If you have any questions, or wish to exercise your rights, contact us at [email protected].
2. The personal data we collect
| Category | What it includes | Why we collect it |
|---|---|---|
| Account details | Your name, email address and a securely hashed password; the role you hold (owner, family member, vet). | To create and secure your account and let you sign in. |
| Pet & care records | Information you choose to add about your pet — e.g. weight, food, medication, toilet, activity, symptoms and clinical notes, and any photos you upload. | To provide the core service: storing and displaying your pet’s health record for you and the people you invite. |
| Care‑team & contacts | Names and email addresses of people you invite (family, friends, vets) and any vet/clinic details you enter. | To manage shared access and send invitations you request. |
| Feedback | A rating and any comments (and an optional email) you submit through the feedback form. | To understand and improve the service. |
| Technical / visit logs | Your IP address, the approximate location of your internet connection (city, region, postcode district and country) which our hosting provider derives from that IP address, the pages you view, the date/time, your referrer and your browser/device type. That location identifies the connection — typically your internet provider's serving area — not your device's position or your address, and we do not store coordinates. | To keep the site secure, prevent abuse, and understand how the site is used. See section 5. |
The pet records are about your animal, but may include personal data about you and the people you invite (for example, contact details and who logged each entry). We do not seek to collect special‑category personal data about you, and ask that you do not enter such data into free‑text fields.
3. How we use your data and our lawful bases
- To provide the service (your account, your pet’s records, sharing with your care team) — lawful basis: performance of a contract with you.
- To keep the service secure and working (security logging, abuse prevention, diagnosing problems, understanding traffic at a high level) — lawful basis: our legitimate interests in running a safe, reliable service.
- To respond to feedback or enquiries you send us — lawful basis: legitimate interests (and your consent where you provide your email for a reply).
- To send service emails (such as care‑team invitations or password resets you request) — lawful basis: performance of a contract / legitimate interests.
4. Cookies
The site runs on strictly necessary cookies only — the ones that keep you signed in and protect forms against attack. We set no analytics, advertising or tracking cookies at all: Microsoft Clarity and our referrer‑attribution cookie were both removed in July 2026. That means there is nothing to consent to and no cookie banner. Full details are in our Cookie Policy.
5. Website visit logs
Like most websites, our server keeps a log of visits so we can keep the site secure and understand how it is used. This log records your IP address, the approximate location of your connection (city, region, postcode district and country) that our security/CDN provider, Cloudflare, derives from that IP address — this identifies the connection, typically your internet provider's serving area, not your device's position or your address — the pages you view, the date and time, your referrer, and your browser/device type. We do not use this information to build advertising profiles, we do not use tracking cookies, and we do not sell it. The lawful basis is our legitimate interests in security and service improvement.
6. The MaxPet apps (Android and iOS)
The MaxPet mobile apps collect some things the website does not. They are covered in full by the Privacy Policy inside the app (Settings › Privacy Policy), and in summary they are:
- Your device’s location — if you allow the location permission, the app reads your device’s approximate, city‑level position and sends those coordinates to our server for the “walk conditions” weather, air quality and pollen. We do not ask for precise, pinpoint location for this. These coordinates are stored: they are rounded to roughly a kilometre and saved as your pet’s home location so its weather and long‑term environment trends stay tied to one place, and a rounded position is kept with each weather snapshot recorded for the pet. If the app later sees your device far from that saved home it asks whether your pet is with you before moving it. Refuse the permission and the app falls back to the approximate location of your internet connection, as described in section 5, which is not stored.
- Device identifiers — on iOS, at launch the app sends an Apple DeviceCheck token and the vendor identifier so we can turn away a device blocked for abuse. The Android app sends no such identifier. If you turn on notifications we hold the push token for that install, and on Android the Google messaging library generates a Firebase installation ID so notifications can reach your device. None of these is an advertising identifier — we do not read the Google Advertising ID or Apple’s IDFA, and we do no advertising or cross-app tracking.
- Voice dictation — if you dictate feedback instead of typing, the app uses your phone’s own built‑in speech recognition, which on most devices sends the recorded audio to the platform’s servers to be turned into text: on Android that is Google’s speech recognition service, on iOS Apple’s. MaxPet receives only the resulting text, never the audio.
- Bluetooth — only if you set up a MaxPet smart bowl. On Android 11 and older the system requires an app to hold the precise location permission before it may scan for Bluetooth devices at all, so the app asks for it at that point on those versions only; we do not read or send your position for it.
7. Who we share your data with
We do not sell your personal data or share it with advertisers. We share it only as follows:
- People you invite — members of your pet’s care team (and any vet you invite) can see the records for that pet, according to the access you grant.
- Service providers (processors) acting on our instructions: Cloudflare (website hosting, database, file storage, content delivery and security), and Resend (to deliver service emails such as invitations and password resets). If you choose to sign in with Apple or Google, that provider processes your sign-in. If you turn on notifications in the app, they are delivered by Google (Firebase Cloud Messaging) on Android and by Apple (the Apple Push Notification service) on iOS. To show your local “walk conditions”, we send the approximate location described in sections 5 and 6 to WeatherAPI.com, which returns the local weather, air quality and pollen (no account, no cookies). When you generate a PDF on the Vet Summary page, a script library is loaded from Cloudflare’s cdnjs. The site also loads fonts from Google Fonts, which receives your IP address to deliver the font (no cookies). We no longer send anything to Microsoft: the Clarity session‑recording tool was removed in July 2026, so no third party receives data about how you use the site.
- If required by law — e.g. to comply with a legal obligation or protect our rights or the safety of others.
8. Support access to your account
So that we can look into a problem you report and put it right, a small number of authorised MaxPet staff can open your account and see it as you see it, including your pet’s records. Depending on what is wrong, that access can be read‑only or able to make changes on your behalf, for example to correct a record that has gone wrong. It is limited to staff who need it, every such session is recorded against the member of staff who started it, and we use it only to run, support and secure the service — lawful basis: our legitimate interests in providing support and keeping the service working. We will not use it to look through your records for any other reason. If you would rather we did not open your account to investigate something you have reported, tell us at [email protected] and we will work with you another way.
9. International transfers
Our hosting is UK/EU‑based. Some providers (such as Cloudflare, Resend, Google Fonts and, if you accept analytics, Microsoft) may process limited data (for example, your IP address) on servers outside the UK. Where that happens, the transfer is protected by appropriate safeguards recognised under UK law, such as the UK International Data Transfer Agreement / Addendum or an adequacy decision.
10. How long we keep your data
We keep your account and pet records for as long as your account is active. If you delete your account, or ask us to, we will delete or anonymise your personal data within a reasonable period, except where we must keep limited information to meet a legal obligation. Website visit logs are automatically deleted after 90 days, and sign-in attempt records (used to spot attacks on accounts) after 180 days. Both are trimmed by an automated daily job.
11. How we protect your data
The site is served over encrypted connections (HTTPS), passwords are stored only in hashed form, access to pet records is controlled by role‑based permissions, and session cookies are marked Secure and HttpOnly. No system can be guaranteed 100% secure, but we take reasonable technical and organisational measures to protect your information.
12. Your rights
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to certain processing; data portability; and withdraw consent where we rely on it. To exercise any of these, contact [email protected]. You can also manage much of your data directly within the app.
13. Children
MaxPet is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page with a revised “last updated” date.
15. Contact
For any privacy questions or requests, contact us at [email protected].