Privacy
Privacy Policy
Looking after your dog means looking after the details you trust us with, too. This policy explains what Snuggle Paws collects, why it is needed and the choices you have.
1. Who we are
Snuggle Paws is a freelance, home-based dog-only boarding and daycare service in Kuala Lumpur, Malaysia, run by an individual sitter. The sitter is responsible for the personal information handled for the service. We handle that information in line with Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended, where applicable.
2. Information we collect
We collect details you provide when arranging a booking and care notes made during your dog’s stay. These may include:
- Your name, contact details given when booking, booking dates and agreed services.
- Your dog’s name, breed, age and vaccination records.
- Health conditions, medication instructions, allergies, diet, routines and temperament notes needed for safe care.
- Your dog’s vet information and an emergency contact, if you provide one. Please make sure you have permission to give us another person’s details.
- Photos and videos of your dog taken for updates during the stay.
- Booking messages and the Google information described below, if you choose to connect a Google account.
Please share only what is needed for the booking. If essential care or emergency information is missing, we may not be able to accept the stay safely.
3. How we use information
We use these details to check whether a stay is suitable, arrange and manage bookings, follow your dog’s care instructions, send daily updates, handle payments and cancellations, and respond to questions. If your dog needs urgent care, the relevant notes help a vet treat them. We also keep necessary records to resolve disputes and meet legal obligations.
We do not sell or rent personal information, use it for advertising or build marketing profiles. Dog update photos are not published without your separate consent.
4. Google user data
If you choose to connect a Google account, the Snuggle Paws app requests your permission through Google OAuth. The consent screen shows the permissions being requested before you decide. We request only access needed to run bookings and dog updates:
- Google Calendar: create and read booking events, including stay dates, drop-off and pick-up times, so we can organise the booking.
- Gmail: read and send booking-related emails, such as confirmations, care instructions and changes to a stay. We do not use unrelated messages.
- Google Drive: store and share your dog’s update photos with you. We do not use unrelated Drive files.
Google user data is used only to provide and improve these booking functions. It is not sold, used for ads or transferred to advertising services. It is not used to train generalized artificial intelligence or machine learning (AI/ML) models. We do not allow humans to read Google user data unless you first give explicit consent for specific information, access is needed to investigate a security issue or abuse, or access is required by law.
Snuggle Paws' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can read the Google API Services User Data Policy and Limited Use requirements for the full rules.
To revoke access: open your Google Account permissions, select Snuggle Paws and remove its access. This stops further access to your Google account. It does not automatically delete information already received; you can request its deletion through the channel you used to book. You can also request disconnection there. Once disconnected, we stop using the connection and delete any stored OAuth tokens. If a booking still needs arranging, we can agree another way to exchange the necessary details.
5. Who we share information with
We do not share your information with other businesses for their own purposes. Google processes the booking information and photos placed in its services to provide Calendar, Gmail and Drive. Those services may process information outside Malaysia; we limit what is sent to what the booking needs and apply applicable PDPA transfer safeguards.
Apart from those service providers, we disclose information only to a vet when needed for your dog’s emergency care, or where required by law or a valid legal process. We share only the relevant details. Google user data is subject to the additional Limited Use restrictions above, including when any transfer is legally required.
6. How long we keep it
Booking details, care notes and booking-related Google data are normally kept for up to 12 months after your dog’s last stay, then deleted. We delete update photos and videos sooner on request, including copies we control in Google Drive. Removing our copy cannot remove a photo you have already saved to your own account or device.
We may keep the minimum records needed for a legal obligation or an unresolved dispute for longer, only for that purpose, and delete them when no longer needed. The same approach applies when you ask us to delete information before the normal retention period ends.
7. Keeping information safe
We limit access to the sitter and the service providers needed to run bookings. We use account access controls, strong passwords, device locks and secure connections to reduce the risk of loss or unauthorised access. OAuth access is limited to the permissions you approve; we do not ask for your Google password.
No storage or transmission method is completely secure. If a breach affects your information, we will take steps to contain it and notify you and the relevant authority where the PDPA requires it.
8. Your rights and choices
You can ask to access, correct or delete your information, withdraw consent to optional uses, stop photo publication you previously agreed to, or raise a privacy concern. Make any request through the channel you used to book. We may ask for enough information to confirm it is really you before acting.
We will respond without unnecessary delay and within any applicable PDPA time limits. If we cannot delete a record because the law requires us to keep it, we will explain why and restrict its use. Withdrawing information needed for care may mean we cannot continue a booking; we will explain the options first.
9. Cookies and this website
This is a static information website. It has no booking forms, cookies, analytics, advertising trackers or third-party fonts or scripts. Reading these pages does not connect your Google account. Links to Google open Google’s own pages, where its privacy practices apply. The hosting service may process basic request details, such as an IP address, to deliver and protect the website; we do not use those details to profile visitors.
10. Children
Bookings must be made by an adult aged 18 or over. The service is not directed at children, and we do not knowingly collect their personal information. If you believe a child has provided information, ask us through the channel used to book so we can review and delete it where appropriate.
11. Changes to this policy
We will publish changes on this page and update the effective date. If a change materially affects how existing booking information is used, we will tell affected owners through their booking channel and obtain fresh consent where required. A policy update does not remove your existing rights.