Privacy Policy

KeepPaws (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit www.keeppaws.com, create a memorial, leave a tribute, or purchase a keepsake. It is written to help you understand your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the ePrivacy Directive (Cookie Law).

1. Who We Are

Controller: KeepPaws
Website: https://www.keeppaws.com
Privacy contact: privacy@keeppaws.com

2. Information We Collect

Depending on how you use KeepPaws, we may process:

• Account data: name, email address, profile details, and authentication identifiers (via Supabase Auth).
• Memorial content: pet names and details, photos, stories, tributes, privacy settings, and related metadata.
• Order data: shipping address, order items, custom images/engravings, and payment status. Card payments are processed by Stripe; we do not store full card numbers.
• Technical data: IP address, browser type, device information, and approximate location derived from IP (for security and, if consented, analytics).
• Cookie / consent data: your cookie preference choices and the timestamp of those choices.

3. Legal Bases for Processing (GDPR)

• Contract — to create your account, host memorials, and fulfill keepsake orders.
• Legitimate interests — to secure the platform, prevent abuse, and improve reliability (balanced against your rights).
• Consent — for non-essential cookies and analytics (e.g. Google Analytics). You may withdraw consent at any time via Cookie Settings.
• Legal obligation — where we must retain records for tax, accounting, or regulatory reasons.

4. How We Use Your Information

• To create and maintain digital memorial pages
• To fulfill keepsake orders and communicate order status
• To send essential account-related emails (not marketing by default)
• To send optional anniversary reminder emails when enabled
• To protect against abuse and improve the platform
• To measure site usage with analytics only if you consent
• To comply with legal obligations

5. Cookies & Similar Technologies

Under the ePrivacy Directive and GDPR, non-essential cookies require prior consent. We group cookies as follows:

• Strictly necessary — required for sign-in sessions, security (e.g. Cloudflare Turnstile), and basic site operation. These cannot be switched off.
• Analytics — Google Analytics (Measurement ID G-T4XEYCRG2R) helps us understand how visitors use KeepPaws. Loaded only after you opt in.
• Marketing — we do not currently use advertising or marketing cookies. This category is reserved for future use and stays off unless you consent.

You can Accept all, Reject non-essential, or customize preferences via our Cookie Banner. You can change your mind anytime using Cookie Settings in the site footer, or by clearing site data in your browser.

6. Memorial Privacy Settings

You control who can see your memorial:

• Public: Visible to everyone and listed in our memorials directory.
• Link Only: Only visible to people with the URL. Not listed publicly.
• Private: Visible only to you when signed in.

7. Sharing & Third-Party Processors

We share personal data only with processors who help us operate KeepPaws, under appropriate data-processing terms:

• Supabase — authentication
• Neon — database hosting
• Cloudflare — media storage, CDN, Turnstile
• Stripe / PayPal — payment processing
• Vercel — application hosting
• Google Analytics — usage analytics (consent required)
• Resend — transactional email (when configured)

Some processors may process data outside the EEA/UK. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the provider's equivalent transfer mechanism.

8. Data Retention & Deletion

We retain memorial and account data while your account is active. If you delete a memorial or request account deletion, we remove associated content (photos, stories, tributes, pet details) within 30 days, except where we must keep limited records for legal, tax, or dispute-resolution purposes. Cookie consent records are kept as long as needed to demonstrate compliance.

9. Your Rights

If you are in the EEA, UK, or a similar jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (“right to be forgotten”), subject to legal limits
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your local supervisory authority

To exercise these rights, email privacy@keeppaws.com. We will respond within one month where required by law.

10. Children's Privacy

KeepPaws is not directed at children under 16 (or under 13 where applicable US law applies). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

11. Security

We use industry-standard encryption in transit and at rest where supported by our providers. Passwords are handled by Supabase Auth — we never store raw passwords. No method of transmission or storage is 100% secure; we continually improve our safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be highlighted on the site or via email where appropriate.

13. Contact

For privacy questions, cookie preferences, or data requests: privacy@keeppaws.com. You can also visit our Contact page.