Privacy Policy
Draft — for legal review before publishing. Last updated: [date]
Havefoi ("we", "us") operates pet ID tags linked to online profiles. This policy explains what personal data we collect, why, and how you can control it, in line with India's Digital Personal Data Protection Act, 2023 (DPDPA).
What we collect
When you create an account and set up a pet profile, we collect:
- Account data: your email and a password (stored as a secure hash, never in plain text)
- Public profile data (visible to anyone who scans your pet's tag): your pet's name, a contact phone number, an optional photo, and any notes you choose to add
- Private profile data (visible only to you, never shown publicly): your full name, home address, alternate phone number, your pet's breed, age, medical notes, vet contact details, and microchip ID, if you choose to provide them
- Order data: delivery address and contact details needed to ship your tag
Why we collect it
We use this data solely to: operate your pet's public identification page, let you manage and update that profile, fulfil and ship your order, and provide customer support.
Consent
We ask for your explicit consent before storing your pet's profile information. You can withdraw consent at any time by deleting the profile from your account.
Your rights
Under the DPDPA, you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate data
- Request erasure of your data — deleting a pet profile permanently removes its personal data from our systems
- Withdraw consent at any time
What we don't do
- We never display your home address, medical notes, or full name on the public tag-scan page
- We don't sell your personal data to third parties
- [Add/remove this line based on your actual practice: We do / do not use your data for marketing communications]
Data security
Passwords are hashed and never stored in plain text. [Describe your actual database/hosting security measures here once finalized.]
Contact us
For any privacy questions or to exercise your rights under the DPDPA, contact: [your support email]
This is a starting draft, not legal advice. Have it reviewed by a lawyer familiar with the DPDPA before publishing, especially the sections on data sharing, retention periods, and grievance redressal (which the DPDPA requires you to name a contact for).