PetLegacy Privacy Policy

Last Updated: February 2026

PetLegacy creates lasting physical memorials - NFC memorial tags - that include access to digital photo galleries. This Privacy Policy explains how we collect, use, and protect your information when you purchase our memorial products and use the included digital features.

1. Information We Collect

When you purchase PetLegacy memorial products, we collect:

Memorial Products & Orders

• Your name, email address, phone number, and shipping address
• Payment information (processed securely through Stripe - we never store your card details)
• Product specifications for your memorial tag
• Order history and purchase records

Digital Memorial Content

• Photos, videos, names, dates, and memorial text you choose to upload to your digital gallery
• Profile frame selections and display preferences
• Memorial page customization choices

Technical Information

• Device type, browser information, and IP address
• Page views and interactions with your digital memorial
• Access logs for memorial pages

Collar Tag Data

• Owner contact details you provide for your collar tag profile (name, phone, email, address)
• Pet information (name, breed, medical needs, personality, vet details, microchip number)
• Scan event data: when your collar tag is scanned by a third party, we collect the approximate geolocation (if the scanner grants browser permission), IP address, device type, and timestamp of the scan
• Scan notification preferences (whether you wish to receive email alerts when your tag is scanned)

2. How We Use Your Information

Product Fulfillment & Service Delivery

• Manufacturing and encoding your physical NFC memorial products
• Shipping your orders to the correct address
• Activating and hosting your digital memorial gallery for the prepaid hosting period
• Processing payments and managing your account

Communications

• Sending order confirmations and shipping notifications
• Providing activation instructions for your memorial products
• Sending hosting renewal reminders before your prepaid period expires
• Responding to your customer service inquiries
• Sending collar tag scan notifications (when your tag is scanned by a third party)

Service Improvement

• Understanding how customers use our memorial products and digital features
• Improving product quality and user experience
• Developing new memorial product options

3. Information Sharing

We respect your privacy and do not sell your personal information. We share information only when necessary:

Manufacturing & Fulfillment Partners

• Product specifications are shared with our manufacturing partners to produce your memorial tags
• Shipping addresses are shared with delivery services to fulfill your order

Service Providers

• Stripe: Payment processing (they handle all card information securely)
• Supabase: Secure hosting of your digital memorial content
• Vercel: Website hosting and content delivery
• Resend: Transactional email delivery for order confirmations and account notifications
• Pipedream: Automated email workflow processing

Legal Requirements

• When required by law, court order, or to protect our legal rights
• To prevent fraud or protect the safety of our customers

4. Digital Memorial Privacy

Your digital memorial gallery is private:

• Accessible only via the NFC tag on your physical memorial product or direct link
• Not indexed by search engines
• Not listed publicly on our website
• Only viewable by people you choose to share the physical memorial or link with

You control who can access your memorial by controlling access to the physical product (tag) that contains the NFC chip, or by sharing the direct link.

Collar Tag Privacy

Your collar tag profile (pet name, owner contact details, medical information) is publicly accessible to anyone who scans the NFC tag or visits the collar tag URL. This is by design — the purpose is to enable a finder to contact you if your pet is lost.

• You choose what contact information to display (phone, email, or both)
• Medical information and vet details are visible to anyone who scans the tag
• Scan geolocation data is only shared with you (the tag owner), not with the scanner
• You can update or remove your collar tag information at any time
• You can disable scan notifications in your collar tag settings

5. Data Storage and Security

Physical Product Information

• Order and encoding details are stored securely in our encrypted database
• Payment information is handled entirely by Stripe (PCI-DSS compliant) - we never store card details

Digital Memorial Content

• Photos and memorial content are stored on Supabase's secure cloud storage
• Videos may be hosted on YouTube (unlisted, not searchable) if you choose that option
• All data transmission uses HTTPS encryption
• Access to memorial pages requires the unique link from your physical product

6. Data Retention

Active Memorials

• We retain your memorial content for the full duration of your prepaid hosting period
• Your physical memorial product (tag) remains functional indefinitely

After Hosting Expiry

• 90-day grace period: Your memorial remains viewable, with renewal reminders sent
• After grace period: Memorial is unpublished but data retained for 30 days
• You may request a data export before final deletion
• Renewal available at any time during grace period to restore full access

Order Records

Purchase history and customer information retained for 7 years for tax and accounting purposes.

7. Your Privacy Rights

Under New Zealand's Privacy Act 2020 and GDPR (for European visitors), you have the right to:

Access & Correction

• View all personal information we hold about you
• Correct any inaccurate or incomplete information
• Receive a copy of your memorial content

Data Portability & Deletion

• Export your memorial photos and content in a portable format
• Request deletion of your personal information (subject to legal retention requirements)
• Download all memorial content before your hosting expires

Communication Preferences

• Opt out of renewal reminder emails (you'll still receive critical account notices)
• Unsubscribe from marketing communications
• Update your contact preferences at any time

8. Partner Program Privacy

If you are a PetLegacy partner (veterinarian, funeral home, pet crematorium, etc.):

Information Collected

• Business details, contact information, and banking details for commission payments
• Sales data from activation codes and referral codes you distribute
• Commission earnings and payout history

Partner Communications

• Notifications when your codes are redeemed
• Commission statements and payment confirmations
• Updates to partner terms and program information

You can manage notification preferences in your partner portal settings.

9. Cookies and Tracking

Essential Cookies

• Required for website functionality, order processing, and memorial access
• Cannot be disabled without affecting service functionality

Analytics Cookies

• Google Analytics to understand how visitors use our website
• Helps us improve product offerings and user experience
• You can opt out via browser settings or Google Analytics opt-out tools

No Advertising Tracking

• We do not use cookies for advertising or sell data to third parties
• No cross-site tracking or behavioral advertising

10. Children's Privacy

Our memorial products may commemorate children, but our services are not directed to children.

• We do not knowingly collect personal information from anyone under 16
• Memorial content about children is managed by parents, guardians, or adult family members
• If we discover we have collected information from a child under 16, we will delete it promptly

11. International Data Transfers

Primary Operations

• PetLegacy operates from Aotearoa, New Zealand
• Our infrastructure (Supabase, Stripe, Vercel, Resend, Pipedream) may process data in various locations including the United States and Europe

Data Protection

• All service providers maintain appropriate security standards
• International transfers comply with applicable privacy laws including GDPR

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

Notice of Changes

• Material changes will be communicated via email to active customers
• Updated policy posted on our website with revision date
• Continued use of our products after changes constitutes acceptance

13. Memorial Content Ownership

You Retain Ownership

• You own all photos, videos, and content you upload to your memorial
• PetLegacy hosts your content as a service during your prepaid hosting period
• You may download your content at any time

Our Limited License

• You grant us permission to display your content on the memorial page
• This license is limited to providing the memorial service you purchased
• We do not use your memorial content for any other purpose

14. Contact Us & Data Requests

Privacy Questions

Email: privacy@petlegacy.co.nz
Response time: Within 5 business days

Data Access Requests

• Email privacy@petlegacy.co.nz with your order number or memorial link
• We will verify your identity before providing access to personal information
• Requests processed within 20 business days

Mailing Address

PetLegacy
Auckland, Aotearoa, New Zealand

Right to Complain

• New Zealand residents: Office of the Privacy Commissioner (privacy.org.nz)
• EU residents: Your local data protection authority

15. Business Transfers

If PetLegacy is acquired, merged, or sold:

• Your information may be transferred to the new entity
• You will be notified via email before any transfer
• The new owner must honor this Privacy Policy
• Your memorial content and hosting period will continue uninterrupted