SnudeRo

Privacy policy

Last updated: [date]

Draft: this policy is a template and must be completed and reviewed by a lawyer before SnudeRo launches.

[Company name] (CVR [CVR number]), [Address, postcode, city, Denmark], is the data controller for SnudeRo. Questions about your data: [contact email].

1. What we collect

  • Account: name, email address, password (stored only as a secure hash), language, profile photo and your marketing choices with the date you made them.
  • Sitter and hotel profiles: description, town and an approximate location on the map, photos, prices, services and calendar.
  • Bookings and requests: dates, service, type and number of pets, pet photos, messages, offers and reviews.
  • Payments: handled by Stripe. We store the amount and a Stripe reference, never card details.
  • Payouts to sitters: Stripe collects the sitter’s identity details and bank account when they set up payouts. We store only the Stripe account reference and whether payouts are active. We may have to report sitters’ income to the Danish Tax Agency (DAC7 rules).
  • Location: only if you press “Near me”. Your browser sends approximate coordinates for that search; we do not track your location.
  • Technical data: the hosting provider keeps short-lived server logs (for example IP address) for security.

2. Why we use it (legal basis)

  • To provide the service and carry out bookings: contract (GDPR art. 6(1)(b)).
  • To keep booking and payment records: legal obligation under the Danish Bookkeeping Act (art. 6(1)(c)).
  • To keep the platform safe and prevent misuse: legitimate interest (art. 6(1)(f)).
  • To send news and offers: only with your consent (art. 6(1)(a)), which you can withdraw at any time in Settings.

3. Who can see your data

  • Sitter and hotel profiles, reviews and approximate locations are public.
  • Pet photos and care requests are shown only to sitters nearby and to the sitter you book.
  • Messages are visible only to the people in the booking.

4. Service providers

We use these providers to run SnudeRo. Some are outside the EU/EEA; transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

  • Vercel: hosting of the website, and anonymous visitor statistics (Vercel Web Analytics: which pages are visited and where visitors come from, without cookies and without identifying you).
  • Cloudflare (Turnstile): checks on the sign-up page that you are a person and not a bot. It looks at technical information from your browser, such as the IP address, and sets no cookies.
  • Neon: database (servers in Frankfurt, Germany).
  • Stripe: payments (Stripe is also responsible for its own processing of payment data).
  • Resend: delivery of notification emails.
  • OpenStreetMap: map images, loaded directly by your browser (OpenStreetMap receives your IP address).

5. How long we keep it

  • Account data: until you delete your account.
  • Booking and payment records: 5 years, as required by the Danish Bookkeeping Act, without your name or contact details once your account is deleted.
  • Password reset and email confirmation links: 1 hour and 24 hours.
  • Log of notification emails: 12 months.

6. Your rights

You can see and correct your data in Settings and delete your account there (Settings → Delete account). You also have the right to access, restriction, objection and data portability. Contact us. You can complain to the Danish Data Protection Agency (Datatilsynet).

7. Cookies

SnudeRo uses one cookie, “session”, which keeps you logged in (up to 30 days). It is strictly necessary, so no consent banner is needed. We use no analytics or advertising cookies. Our visitor statistics work without cookies (see section on processors), and our fonts are served from our own website.

8. Changes

We will update this policy when the service changes and tell you about important changes.

Privacy policy · SnudeRo