Who we are
PetCompli is operated by PetCompli. We are the data controller for this website and for the account details of our customers. For the animal, customer and staff records a customer enters into the app, the customer is the controller and we are their processor.
Contact: privacy@petcompli.com.
This website
- No analytics cookies. We don't use Google Analytics or advertising pixels. Our web server keeps standard access logs (IP address, page requested, browser, time) for security and to count visits, deleted after 30 days.
- Demo requests. When you book a demo we collect your name, email address, business name and anything you write in the message, and use them to reply to you. Lawful basis: taking steps at your request before a contract. Kept for 12 months after our last contact unless you become a customer.
- Email. If you email us, we keep the correspondence for as long as needed to deal with it.
The app
- Account data: your name, email address, role, organisation and sign-in records (passkeys are stored as public keys; we never hold a password). Lawful basis: performance of the contract with your organisation. Kept while the account is active and for 12 months afterwards.
- Records your organisation enters: animals, suppliers, purchasers of animals, staff training, inspections and uploaded documents. Your organisation decides what to enter and why; the regulations require some of it to be kept for at least three years. We process it only on your organisation's instructions and delete or return it when the contract ends.
- Audit trail: who changed which record and when, kept as part of the record so that the history is complete.
- Local authority access: only if your organisation grants it, read-only, and only for the sites chosen.
Where data is stored and who sees it
Data is stored on servers in the European Union, with encrypted daily backups held in a separate location in the EU. We use a small number of suppliers to run the service, each under a written contract: hosting (Hetzner Online GmbH, Germany/Finland), transactional email (Resend), and domain registration. We don't sell or share personal data for marketing. We disclose it only where the law requires.
Security
Connections are encrypted (HTTPS). Sign-in is passwordless: email links that expire, passkeys, or Sign in with Apple. Each organisation's data is separated at the database level, every change is logged, and access by our staff is limited to support you ask for.
Your rights
Under UK GDPR you can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format. Email privacy@petcompli.com; we respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk. If your data is in a customer's app records, please contact that business first, as they are the controller.
Changes
We will update this notice when the service changes and show the date below.
Last updated 14 October 2026.