Doggie Education Privacy Policy

1. Data controller
PeopleLivery di Boris Zarcone, operante con il marchio Doggie Education, VAT no. 07083600481
Professional address: Via di Castello SNC, 50023 Impruneta (FI), Italia
Privacy email: contattaci@doggieeducation.it
Support: contattaci@doggieeducation.it

2. Services covered
This single notice covers Doggie Education lessons and courses in person, at home and online; DoggieClub; home boarding and day care; Doggie Grooming at home; DoggieAI on the web and, when enabled, by telephone or WhatsApp; the DoggieHub customer area; Doggie Magazine and its articles; video lessons and meetings; gift cards, recommended products, merchandising, contact and review journeys.

3. Sources and categories of data
Data come from the person through forms, checkout, the customer area and communications and may also come from authorised staff, payment and invoicing systems, the telephone or WhatsApp channel chosen by the person, device technical data and, only for reviews already public, Google Business Profile. Where an existing customer contacts Doggie, existing contact and dog records in DoggieHub may be consulted to recognise the customer and continue the request.

Depending on the service, we may process identity and contact data, date of birth where voluntarily provided, credentials and roles, address and travel-zone information, bookings and availability, payment and billing references, provider technical identifiers, the dog’s identity, behaviour, routine, health or therapy information disclosed as necessary for safety and welfare, lesson plans and progress, documents and consents, support messages, call or chat metadata and content within the stated limits, IP address, user agent, security logs and cookie preferences. We do not store full card details or request special-category data that are unnecessary for the service.

4. Purposes and legal bases
We use data to answer requests, assess the suitable service, create and manage bookings, provide lessons, home care or grooming, operate DoggieAI and the customer area, send service communications, collect payments, issue fiscal documents, protect people and animals, prevent misuse and meet legal obligations. The main bases are pre-contractual steps, performance of a contract, legal obligations and legitimate interests in security, organisation and legal defence. Where the person has voluntarily provided a date of birth and consented to promotional communications, it may be used to generate and send one personal birthday reward per year; withdrawal prevents future deliveries. Optional marketing and non-essential tracking require the applicable consent.

5. Home services, animal information and safety
Address, access instructions and information about the dog are used only to organise the agreed service, calculate any disclosed travel charge and protect welfare and safety. The customer does not have to remain at home where secure access has been expressly agreed, but must provide accurate instructions and disclose circumstances relevant to safe performance.

6. DoggieAI, telephone and WhatsApp
AI channels may use the current conversation and authorised DoggieHub context to recognise an existing customer, link the correct dog and provide continuity. Users are clearly informed that they are interacting with an AI system no later than the first contact. DoggieAI Chat, Live and related conversational functions may send Google Gemini the message, a limited part of the history, relevant knowledge-base extracts and, in Live, audio and optional camera frames. Doggie does not retain Live audio or video as files but may retain a transcript and summary. The virtual switchboard may stream audio to OpenAI; Doggie does not record the audio or retain the full transcript, but stores metadata and an encrypted operational summary. WhatsApp operates through Meta and may send DoggieAI the text needed to answer or perform the authorised request.

AI output can be incomplete or wrong. Requests involving identity, payments, bookings, health or other sensitive decisions may be paused, verified or handed to authorised staff. No decision with legal or similarly significant effects is taken solely by the assistant without an appropriate basis, notice and human control where required. The specific DoggieAI notice at https://ai.doggieeducation.online/privacy provides details of Chat, Live, Gemini, provider retention and rights.

7. Recipients and providers
Data may be accessed only by authorised Doggie staff and providers necessary for the requested function. Depending on the channel actually used, these may include Hostinger and OVHcloud for infrastructure; Google for Gemini, Workspace, Meet, Analytics, Ads and Business Profile; OpenAI for the virtual switchboard; Meta for WhatsApp Cloud API; MessageNet for telephony; Stripe, PayPal or the provider shown at checkout for payment, fraud prevention and instalments; OpenAPI and the Italian exchange system for electronic invoicing; and email, security, support and document-retention suppliers. Each provider acts as processor, sub-processor or independent controller according to its function and contract. Full card data remains with the payment provider. We do not sell personal data. Voluntarily opening an external shop, meeting, payment or Google link takes the user to a service also governed by that provider’s notice.

8. International transfers
Where a provider processes data outside the European Economic Area, transfers rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and supplementary measures where necessary. Information about the applicable safeguards and, where available, a copy may be requested through the privacy contact.

9. Retention
Ordinary periods apply unless an active relationship, legal duty, dispute, fraud, debt recovery or documented legal hold requires longer retention: customer and dog profiles, services, bookings, purchases, fiscal documents and consent evidence up to ten years; customer-area access and DoggieHub operational communications up to two years; DoggieAI conversations and summaries and unconverted voluntary contacts up to 180 days, abandoned checkout and residual email-queue entries up to 30 days, and the DoggieAI cookie register up to 730 days; switchboard metadata, encrypted summaries and requests up to 365 days and sent-email copies up to 90 days, while Doggie retains neither full transcript nor call audio; DoggieHub browser cookie preferences up to 180 days and server evidence for the period needed to demonstrate consent or withdrawal. Reviews remain public until withdrawal or another lawful reason for removal, while only proportionate evidence is retained. Cached Google reviews are deleted when no longer available or relevant.

Google states that paid Gemini API prompts, context and output may be retained for abuse monitoring for up to 55 days; resumable Live session state may be retained by the provider for up to 24 hours. Other providers’ independent retention follows their obligations and agreements. Deletion from Doggie systems does not erase records that must be kept by law or data processed independently by a provider.

10. Verified Doggie reviews
After a recorded service, Doggie Education may invite the customer to leave a review. Publication relies on separate, optional consent and covers the rating, text, date and the selected name format or the anonymous label “Verified client”. DoggieHub keeps the link to the service, evidence of consent and moderation status to support authenticity, handle disputes and prevent duplicates. Editorial review is limited to protecting confidential data and removing unlawful or irrelevant content: a positive or negative rating is never a selection criterion. Publication can be withdrawn through the personal link or by contacting the controller; public data is then removed, without affecting proportionate retention of evidence required for legal obligations or claims.

11. Public Google reviews
The first-party widget may display a temporary textual copy of reviews already made public on Google Business Profile. It loads no Google profile pictures or scripts in the visitor’s browser and enables no analytics or advertising cookies. Voluntarily opening the Google link takes the user to that external service. Outdated copies are removed according to the configured technical retention period.

12. Rights and complaints
The data subject may request access, rectification, erasure, restriction and portability, object where applicable — at any time to direct marketing — and withdraw consent without affecting earlier lawful processing. Requests can be sent to contattaci@doggieeducation.it. A complaint may be lodged with the competent supervisory authority, including the Italian Data Protection Authority when it has jurisdiction.

13. Minors and third-party data
Accounts and purchases must be managed by an adult with authority to provide the information entered. Data about another person must not be supplied without a lawful basis and appropriate information to that person.

14. Security
Doggie uses access controls, role segregation, encryption where applicable, hashed personal links, webhook verification, log minimisation, backups and incident-management procedures. No measure eliminates every risk; personal-data breaches are managed and notified where required by law.

15. Updates and effect
This notice may be updated when services, providers or legal requirements change. The published version identifies the applicable text; material changes are highlighted or communicated appropriately before taking effect where required.