PawParent Hub
Contact us Terms Get started

Legal

Privacy Policy

Last updated: 11 July 2026 · Effective for users in India and visitors of pawparenthub.in

This Privacy Policy is a standalone notice intended to meet the spirit of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), and also reflects residual obligations under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent they continue to apply during the phased DPDP rollout. Core operational DPDP obligations are being implemented in phases (with broad operational readiness expected by May 2027). We will update this notice as our practices and the law evolve.

Important: Replace bracketed company details (legal entity name, registered address, CIN/GSTIN if applicable) once your Indian entity paperwork is final. This page is drafted for a marketplace / platform model and should be reviewed by licensed Indian counsel before relying on it as formal compliance.

1. Who we are (Data Fiduciary)

For the purposes of the DPDP Act, the entity that determines the purpose and means of processing your personal data (the "Data Fiduciary") is:

  • Operating name: PawParent Hub
  • Legal entity: [Insert full legal name of Indian company / LLP / proprietorship]
  • Registered office: [Insert complete address in India]
  • Website: https://pawparenthub.in
  • Primary contact: founder@spritius.com
  • Privacy / data rights: founder@spritius.com

In this Policy, "we", "us", and "our" mean the Data Fiduciary above. "You" or "Data Principal" means the individual to whom the personal data relates.

2. Scope

This Policy applies to personal data we process when you:

  • visit our marketing website or submit an enquiry form;
  • create or use a PawParent Hub account (pet parent or business partner);
  • communicate with us by email, phone, or in-app support;
  • are a business contact person whose details are provided for listing / verification;
  • exercise rights or raise a grievance with us.

Partner businesses (boarding centres, vets, cafés, shops, groomers, etc.) may also process your data as independent Data Fiduciaries when you book or purchase from them. Their privacy notices apply to that processing. We are not responsible for partner practices outside our instructions or platform controls.

3. Itemised personal data we process

Depending on how you use PawParent Hub, we may process the following categories (itemised for informed consent under DPDP Rule 3):

Category Examples
Identity & contact Name, email, phone number, city / locality
Account & authentication Login identifiers, OTP / MFA metadata, session tokens
Enquiry & support Form messages, interest category, ticket history
Pet-related (as you provide) Pet type, breed, age, care preferences (not required for basic enquiries)
Business / partner Business name, category, address, KYC / verification documents, GSTIN if shared
Transaction Orders, bookings, invoices, refund status, payment references (payment card data is typically handled by payment processors)
Device & usage IP address, browser / device type, pages viewed, approximate location derived from IP, cookies / similar tech
Communications Emails, chat logs, call notes you share with support

We do not intentionally seek sensitive personal data beyond what you voluntarily share for a service (for example, medical notes for a pet). Please do not submit unnecessary health or financial information in free-text fields.

4. Specified purposes of processing

We process personal data for these specified purposes / services:

  1. Responding to enquiries — to contact you about joining, waitlists, or partnership onboarding.
  2. Providing the marketplace — to create accounts, show listings, enable discovery of boarding, vet, café, shop, grooming and related services, and facilitate bookings / orders between you and partners.
  3. Verification & trust — to verify partner businesses, reduce fraud, and maintain platform safety.
  4. Customer support & grievances — to investigate issues, mediate disputes where appropriate, and meet consumer / data grievance timelines.
  5. Payments & records — to process or reconcile payments (via processors), issue receipts, and keep books required by Indian tax / company law.
  6. Security & integrity — to detect abuse, secure systems, and comply with lawful orders.
  7. Product improvement — aggregated / de-identified analytics to improve UX; where personal data is used for analytics, we rely on consent or another lawful ground as applicable.
  8. Legal compliance — to meet obligations under Indian law, respond to regulators / courts, and establish or defend legal claims.

We will not use your personal data for a purpose that is incompatible with the above without a fresh notice and, where required, fresh consent.

5. Legal bases / consent

Where processing is based on consent, you may give consent by submitting a form, creating an account, toggling a clear optional control, or otherwise affirmatively agreeing. Under the DPDP Act:

  • consent must be free, specific, informed, unconditional and clear;
  • you may withdraw consent with the same ease as you gave it;
  • withdrawal does not affect processing already completed lawfully, or processing that must continue under another lawful ground (for example, legal obligation or employment / contract necessity where applicable).

Certain processing may also be necessary for performance of a contract with you, for employment, for compliance with law, or for other legitimate uses recognised under the DPDP Act. We will identify the applicable ground in product notices where required.

6. How to withdraw consent, exercise rights, or complain

In line with DPDP Rules notice requirements, you may use the following communication links / means:

  • Privacy requests (access, correction, erasure, withdrawal, nomination): founder@spritius.com
  • Grievance redressal: founder@spritius.com or Contact us
  • Complaint to the Data Protection Board of India: after exhausting our grievance process (or as otherwise permitted by law), you may complain to the Board once it is operational for your matter — details will be published on official Government of India / MeitY channels.

Please include: your name, registered email / phone, a clear description of the request, and any account reference. We may ask for reasonable identity verification before acting.

7. Your rights as a Data Principal

Subject to the DPDP Act and applicable exceptions, you have the right to:

  • Access a summary of personal data being processed and the processing activities;
  • Correction and erasure of personal data that is inaccurate or no longer necessary for the stated purpose;
  • Data portability where provided under applicable rules;
  • Grievance redressal — we will acknowledge and work to resolve data-related grievances within a reasonable period not exceeding ninety (90) days;
  • Nominate another individual to exercise rights on your behalf in the event of death or incapacity, in the manner we publish when that feature is available.

You also have duties under the DPDP Act not to impersonate another person, suppress material information, or file false / frivolous complaints.

8. Children and persons with disability

PawParent Hub is directed at adults (18+). We do not knowingly offer services that require processing children's personal data without verifiable parental consent as required by the DPDP Act. If you believe a child has provided us personal data, contact founder@spritius.com and we will take appropriate steps. Where a lawful guardian acts for a person with disability, we will follow applicable DPDP requirements.

9. Sharing with processors and third parties

We may share personal data with:

  • Data Processors who process data on our behalf under contract (hosting, analytics, email delivery, customer support tools, cloud infrastructure such as Google Firebase / Google Cloud, payment gateways);
  • Partner businesses when you initiate a booking, order, or enquiry that requires sharing your contact / booking details with them;
  • Professional advisors (legal, accounting) under confidentiality;
  • Authorities when required by Indian law, court order, or to protect rights, safety, and security.

We require processors to implement appropriate security safeguards and to process only as instructed. We do not sell personal data.

10. Cross-border transfer

Personal data may be stored or processed on servers located in India and/or other jurisdictions used by our cloud providers. Under the DPDP Act, transfers outside India are permitted except to countries restricted by the Central Government. We will not transfer personal data to a restricted country. Where we transfer data outside India, we will do so consistently with the Act, Rules, and any government blacklists / conditions then in force.

11. Retention

We retain personal data only for as long as necessary for the purposes stated above, or as required by law (for example, tax, accounting, dispute, and intermediary record-keeping). Enquiry records are typically kept for a limited operational period unless you become a customer or a longer retention is required. When no longer needed, we erase or anonymise data in a secure manner.

12. Security safeguards

We implement reasonable technical and organisational measures appropriate to the nature of the data and risks involved, including access controls, encryption in transit where supported, logging, and staff access limitations. No method of transmission or storage is perfectly secure; if a personal data breach occurs that requires notification under applicable law, we will notify affected individuals and/or the Board as required.

13. Cookies and similar technologies

Our sites may use essential cookies (security, load balancing, session) and, where enabled, analytics cookies. You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.

14. Grievance officer (privacy & consumer)

For privacy and platform grievances, contact:

  • Title: Grievance Officer, PawParent Hub
  • Email: founder@spritius.com
  • Postal: [Insert registered office address]

We aim to acknowledge grievances promptly (target: within 48 hours on business days) and resolve data-related grievances within 90 days. For consumer complaints relating to e-commerce, you may also use remedies under the Consumer Protection Act, 2019, including the National Consumer Helpline / INGRAM where applicable.

15. Changes to this Policy

We may update this Policy to reflect changes in law, product, or processing. Material changes will be highlighted by updating the "Last updated" date and, where appropriate, additional notice. Continued use after an update constitutes awareness of the revised Policy; where consent is required for a new purpose, we will seek it.

16. Contact

Questions about this Policy: founder@spritius.com · Contact page

PawParent Hub

A calmer marketplace for pet parents and the businesses that care for their animals.

Contact us
Privacy Policy
Terms & Conditions
© PawParent Hub