PRIVACY POLICY - PASAPET
Your Pet’s Digital Pawprint
Table of contents
- Introduction
- Data controller
- Categories of personal data
- Purposes of processing
- Legal bases for processing
- Sharing and recipients of data
- International transfers
- Cookies, similar technologies, analytics, and artificial intelligence
- Information security
- Data retention
- Data subject rights and how to exercise them
- Minors
- Changes to this Policy
- Contact
1. Introduction
This Privacy Policy describes how Pasapet collects, uses, stores, shares, and protects personal data when operating its application, related services, and digital features linked to the Pasapet ecosystem.
Pasapet is committed to reasonable protection of users’ personal information, transparency in data processing, and compliance with applicable data protection laws in Costa Rica.
By registering for, accessing, or using Pasapet, the user acknowledges having read this Privacy Policy and accepts the processing of their data as set out herein, together with the Terms of Service and any complementary notice or policy that may apply.
2. Data controller
The controller of personal data collected through Pasapet is 3-101-953991 Sociedad Anónima, with its address in San José, Costa Rica.
This entity decides what data is collected, how it is used, how it is protected, and when it may be shared, always in accordance with this Privacy Policy and applicable law.
Privacy email: info@pasapet.com
If Pasapet appoints an internal privacy lead or a specific contact for privacy or data protection matters, their contact details may be published in the Application or through official channels.
3. Categories of personal data
Pasapet may collect and process the following categories of personal data, depending on the features used by the user:
3.1 Account and contact data
- first and last name;
- email address;
- phone number;
- login credentials or authentication identifiers;
- basic account and notification preferences.
3.2 Profile data
- profile photo;
- description or biography, if applicable;
- country, province, canton, or other general location information;
- language, preferences, and user settings.
3.3 Pet data
- pet name;
- species, breed, and sex;
- age or date of birth;
- weight, size, and other physical characteristics;
- photographs;
- information relevant to care and management within the Application.
3.4 Veterinary and care data
- vaccination history;
- allergies, conditions, diagnoses, and treatments;
- medications;
- results or records related to the pet;
- notes, observations, and follow-up;
- documents, certificates, prescriptions, reports, and files uploaded by the user or authorized third parties.
3.5 Transaction and operations data
When a feature enables it, Pasapet may process information related to bookings, purchases, payments, refunds, chargebacks, or other operations within the ecosystem.
Pasapet will not store full card numbers when processing is performed by certified external payment providers, unless expressly stated otherwise in a specific policy or notice.
3.6 Communications data
- messages sent through chat or other communication features;
- comments, support requests, and reports;
- content shared between users, providers, or other authorized third parties.
3.7 Technical and usage data
- device identifiers;
- operating system, app version, and similar technical data;
- IP address and connectivity data;
- activity logs, usage events, technical errors, and security data;
- interaction with Application features.
3.8 Device permissions
Depending on the features used, Pasapet may request permissions such as:
- camera or gallery/photos;
- device storage;
- push notifications;
- location, where applicable;
- other permissions strictly necessary to enable specific features.
The user may manage these permissions in their device settings, although certain features may not work properly without them.
3.9 Data from third parties
Pasapet may receive information from third parties when:
- the user authorizes specific integrations or connections;
- an authorized provider uploads or shares information related to the pet;
- a payment processor, technical service, or infrastructure provider sends information necessary to operate the service;
- it is necessary to provide features enabled within the Application.
4. Purposes of processing
Pasapet may process personal data for the following purposes:
4.1 Operation of the Application
- create, maintain, and manage user accounts;
- enable access to and use of Application features;
- authenticate users and manage sessions;
- provide technical support and customer service.
4.2 Pet management and core features
- register and organize pet information;
- store related documents and records;
- manage reminders, calendars, treatments, vaccinations, appointments, and other support features;
- facilitate communication between users, providers, or other authorized participants in the ecosystem.
4.3 Commercial and transactional operations
Where applicable, Pasapet may process data to:
- manage bookings, requests, purchases, payments, refunds, or chargebacks;
- coordinate interactions with providers or partners;
- operate commercial features enabled within the Pasapet ecosystem.
4.4 Security, integrity, and compliance
- detect, prevent, and investigate fraud, abuse, spam, unauthorized access, or malicious activity;
- monitor use of the Application to protect its integrity and that of its users;
- enforce the Terms of Service, Community Guidelines, and other applicable policies;
- comply with legal, regulatory, accounting, tax, or competent authority requirements.
4.5 Service improvement and internal analysis
- understand use of the Application and its features;
- develop, test, evaluate, and improve products, services, and internal tools;
- perform statistical, performance, quality, support, and user experience analysis;
- personalize, adapt, or improve certain features within the Application.
4.6 Artificial intelligence, automation, and technology development
Pasapet may use information provided by the user and information derived from use of the Application to develop, test, train, validate, operate, and improve automated tools, algorithms, models, or features based on artificial intelligence, machine learning, or similar technologies, in accordance with this Policy, applicable law, and reasonable security measures.
Where appropriate, Pasapet may use aggregated, de-identified, or anonymized information for analysis, training, improvement, or validation of these tools and features.
4.7 Communications
- send operational notifications, reminders, security notices, and relevant updates;
- communicate changes to policies, terms, or features;
- send promotional or marketing communications where there is sufficient legal basis or consent, as applicable.
5. Legal bases for processing
Pasapet may process personal data on one or more of the following legal bases, as applicable:
- performance of a contractual or pre-contractual relationship, when processing is necessary to create the account, provide the services, or enable features requested by the user;
- consent, when required by law or the nature of the processing, including certain device permissions, certain communications, or certain special processing;
- compliance with legal obligations, when processing is necessary to meet regulatory, tax, accounting, security duties, or requirements of a competent authority;
- legitimate interest, when reasonable to operate, protect, improve, and develop the Application, prevent fraud, maintain security, conduct internal analysis, or manage service continuity, always within limits permitted by applicable law.
6. Sharing and recipients of data
Pasapet may share personal data only to the extent reasonably necessary to operate the Application, provide services, develop the Pasapet ecosystem, comply with legal obligations, or protect rights and legitimate interests.
Data may be shared with the following categories of recipients:
6.1 Ecosystem providers and partners
When a feature requires it, Pasapet may share information with providers, businesses, partners, or third parties involved in delivering a feature or interaction enabled within the Application.
6.2 Technology providers and processors
Including, as applicable:
- hosting and infrastructure services;
- storage and backup;
- messaging, notifications, and support;
- analytics, monitoring, error reporting, and security;
- maps, location, communication, or equivalent technical services;
- payment processors and related financial services.
6.3 Third parties authorized by the user
Pasapet may share data when the user requests, authorizes, or expressly enables it through settings, integrations, links, or actions within the Application.
6.4 Authorities and legal requirements
Pasapet may disclose information when necessary to comply with the law, respond to orders, requests, or legal proceedings, or protect rights, safety, integrity, or the defense of Pasapet, its users, or third parties.
6.5 Corporate transactions
In the event of reorganization, merger, acquisition, sale of assets, or similar corporate transaction, data may be transferred as part of that transaction, subject to reasonable applicable safeguards.
6.6 No sale of personal data
Pasapet does not sell users’ personal data to third parties as a standalone commercial database.
7. International transfers
Pasapet may use providers or infrastructure that involve processing data outside Costa Rica.
In those cases, Pasapet will seek to adopt reasonable contractual, organizational, or technical safeguards according to the nature of the processing and applicable law.
The user acknowledges that certain tools, technology services, or infrastructure providers may operate from multiple jurisdictions.
8. Cookies, similar technologies, analytics, and artificial intelligence
Although the mobile Application does not use browser cookies in the same way as a website, Pasapet may use cookies where appropriate, as well as equivalent technologies such as persistent identifiers, local storage, session tokens, analytics tools, event logging, error reporting, and other mechanisms necessary to operate, protect, and improve the service.
These technologies may be used expressly for the following purposes:
8.1 Operation and functionality
- maintain an active session;
- remember settings, language, preferences, or user adjustments;
- enable basic Application functions;
- protect account and service security.
8.2 Analytics
Pasapet may use cookies or equivalent technologies for analytics, measurement, statistics, performance monitoring, understanding use of the Application, analysis of interaction with screens, features, or tools, error detection, improved technical support, and evaluation of overall service operation.
8.3 Personalization
Pasapet may use cookies or equivalent technologies to personalize or adapt the experience within the Application, including remembering preferences, showing more relevant content, ordering certain features, improving recommendations, adjusting settings, and optimizing navigation or use according to interaction with the platform.
8.4 Security and abuse prevention
- detect technical failures;
- prevent fraud, spam, abuse, or suspicious activity;
- protect the integrity of the Application and its users.
Where applicable law requires, Pasapet will request the corresponding consent for non-essential technologies or for certain associated processing.
Pasapet may also use automated processes, algorithmic tools, or artificial intelligence features to assist operations, organize information, generate recommendations, improve features, support internal analysis, or strengthen the user experience, in accordance with this Policy and applicable law.
9. Information security
Pasapet will implement reasonable technical, organizational, and operational measures to protect personal data against loss, unauthorized access, alteration, improper disclosure, or unauthorized processing.
Such measures may include, as applicable:
- access controls;
- authentication;
- encryption in transit where reasonably applicable;
- incident monitoring;
- backups and continuity measures;
- internal security protocols and restricted access.
However, no system is completely secure. Accordingly, Pasapet cannot guarantee absolute security or the total absence of incidents.
The user is also responsible for protecting their credentials, device, and account access.
10. Data retention
Pasapet will retain personal data for as long as necessary to fulfill the purposes described in this Policy, operate the Application, provide its features, comply with legal obligations, resolve disputes, respond to authority requests, prevent fraud, and protect service integrity.
Retention periods may vary by data category and applicable purpose. In general, Pasapet may retain information according to the following criteria:
10.1 Account data
Account and contact data may be retained while the user’s account remains active and, thereafter, for a reasonable period after closure or deletion when necessary for support, security, fraud prevention, handling claims, legal compliance, or defense of rights.
10.2 Pet data and related records
Pet data, histories, care records, treatments, vaccinations, documents, and related information may be retained while the account remains active and for a subsequent reasonable period when necessary to allow continuity, export, backup, legal compliance, dispute resolution, or protection of rights.
10.3 Messages, reports, and communications
Chat messages, reports, support requests, and other communications may be retained as long as necessary to operate the relevant feature, investigate incidents, handle abuse reports, protect platform security, resolve disputes, or comply with legal obligations.
10.4 Transactions, payments, and legal compliance
Records related to payments, transactions, bookings, refunds, chargebacks, billing, accounting, or tax obligations may be retained for the period required by applicable law or for the time reasonably necessary to meet contractual, legal, accounting, regulatory, or audit obligations.
10.5 Technical logs, analytics, and security
Technical logs, activity records, analytics data, usage events, security records, and fraud prevention data may be retained for limited and reasonable periods according to their purpose, including monitoring, diagnostics, service improvement, technical support, failure detection, and incident investigation.
10.6 Backups and continuity
Certain information may remain temporarily in backups, security copies, continuity, contingency, or recovery systems for an additional reasonable period, even after deletion from active systems, when necessary to ensure operational integrity, recovery from failures, or legal compliance.
10.7 Deletion, anonymization, and residual retention
When data is no longer necessary for applicable purposes, Pasapet may delete, anonymize, de-identify, or retain it only to the extent necessary to comply with a legal obligation, resolve a dispute, protect rights, or maintain records compatible with a legitimate purpose permitted by applicable law.
11. Data subject rights and how to exercise them
Under applicable law, the user may exercise, as appropriate, rights of access, rectification, update, objection, restriction, cancellation, or erasure, as well as other rights recognized by law.
The user may also request, where technically feasible and legally appropriate, export or portability of certain information.
To exercise these rights, the user may contact Pasapet through the privacy channel indicated in this Policy. Pasapet may request reasonable information to verify the identity of the requester and prevent unauthorized access.
Pasapet will respond within the applicable legal timeframe or, failing that, within a reasonable period according to the nature of the request and current regulations.
Exercise of certain rights may be subject to legal, technical, contractual, or mandatory retention limitations.
12. Minors
Pasapet is not directed at minors without proper authorization or supervision of a parent or legal guardian when required by law or by the nature of the service.
If Pasapet reasonably detects unauthorized use by minors contrary to this Policy or its Terms, it may take reasonable measures, including account restrictions, verification requests, or deletion of information in accordance with applicable law.
13. Changes to this Policy
Pasapet may update this Privacy Policy at any time to reflect legal, regulatory, operational, technical, or functional changes.
The current version may be published in the Application, on the website, or by other reasonable means.
Where appropriate, Pasapet may notify material changes through the Application, email, in-app notices, or other appropriate channels.
14. Contact
For questions, requests, or complaints related to this Privacy Policy or the processing of personal data, the user may contact Pasapet through the following channels:
Controller / privacy contact:
3-101-953991 Sociedad Anónima
Pozos, Santa Ana, San José, Costa Rica.