Privacy Policy

Last updated: 15 September 2026 · Version 1.0

This policy explains what personal data Ateliqo collects, why, how long we keep it, and your rights. It covers our online shop at ateliqo.com and our pet tag service at tag.ateliqo.com (the pet owner portal, the public pet pages, and NFC smart links).

1. Who is responsible for your data

The data controller is Ateliqo (Business Name Reg. No. ΕΕ 62949, Cyprus). Contact for anything about your data: info@ateliqo.com. Full business details are at the end of this page.

2. What we collect and why

When	What we collect	Why	Legal basis (GDPR)
You order from our shop	Name, email, phone, delivery address, country, order notes, items, amounts, payment status	To deliver your order, send order emails (confirmation, shipping, refunds) and handle returns	Contract (Art. 6(1)(b))
	The same order records, kept after delivery	Tax and accounting law requires us to keep sales records	Legal obligation (Art. 6(1)(c))
You pay	Payment status and Stripe reference numbers. We never see or store your card details — Stripe handles them.	To take payment, issue refunds and handle disputes	Contract (Art. 6(1)(b))
You create a pet owner account	Name, email, phone, password (stored only in scrambled/hashed form), and optionally your address and Facebook / Instagram links	To run your account and your pets' public pages	Contract (Art. 6(1)(b))
You add a pet	Pet name, species, breed, age or birth date, gender, colour, photo, allergies, medical and care notes, microchip number, vet name and phone, lost-mode status	To show the pet page you set up and help reunite you with your pet	Contract (Art. 6(1)(b))
Someone taps your pet's tag	Date and time, IP address, approximate location worked out from the IP address (country / city), and browser / device type	To show you your pet's scan history, send found-pet alerts, and protect the service from abuse	Contract with the owner (Art. 6(1)(b)); legitimate interest for the finder's technical data (Art. 6(1)(f))
A finder chooses to share more	Their GPS location, message and contact details — only if they choose to share them	To let the pet's owner know where the pet is and how to reach the finder	Consent of the finder (Art. 6(1)(a))
Someone taps a business NFC smart-link tag	Date and time, IP address, approximate location from the IP address (country / city), browser / device type	To show the business that owns the tag how often and where it is used, and to protect the service	Legitimate interest (Art. 6(1)(f))
A tag's status changes (paused, enabled, disabled, deleted, or tapped while disabled)	What changed, when, who did it, your email and pet name at that time, IP address and browser type	To be able to show that the service worked correctly if there is ever a dispute	Legitimate interest (Art. 6(1)(f))
We email you	A record of each email we send (type, recipient, content details, delivery status)	To make sure emails are delivered, retry failures and prove delivery	Legitimate interest (Art. 6(1)(f))
You visit our website (only if you accept analytics cookies)	Pages visited, clicks and scrolling, device and browser type, approximate location and an online identifier	To understand how visitors use our website and improve it	Consent (Art. 6(1)(a))
You ask us to delete data	Your request, reason (optional) and how we handled it	To carry out your request and show we did	Legal obligation (Art. 6(1)(c))

What you show on your pet's public page is visible to anyone who taps the tag. You choose which of your details appear there. Show only what you are comfortable sharing — we recommend the minimum needed for someone to reach you.

We do not sell your data.

3. Who we share data with

We only share what each service needs to do its job:

• Stripe (Stripe Payments Europe Ltd, Ireland) — processes payments and refunds, including automated fraud checks. See stripe.com/privacy.
• Brevo (Sendinblue SAS, France) — sends our emails.
• Hostinger — hosts our servers in Frankfurt, Germany (EU), where our database and pet photos are stored.
• Couriers (for example BOX NOW or ACS) — your name, phone and delivery address, to deliver your order.
• OpenStreetMap — the map on the "I found this pet" page is loaded from openstreetmap.org, so your browser connects to their servers when the map is shown.
• Google Fonts and Cloudflare (cdnjs) — some pages load a font or a small program from these services, so your browser connects to their servers.
• Google Analytics (Google) and Microsoft Clarity (Microsoft) — only if you accept analytics cookies (see section 7). They show us how visitors use our website.
• Authorities — only when the law requires it, for example tax authorities or a valid request from the police.

Approximate location from IP addresses is worked out on our own server; your IP address is not sent to a location service.

If you click a location link in the pet portal, Google Maps opens in a new tab under Google's own privacy policy.

4. Data outside the EU

We store your data in the EU (Germany). Some of the providers above (for example Stripe, Google or Microsoft) may process data outside the EU, such as in the United States. When they do, they use the protections required by EU law, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long we keep data

Data	How long
Orders and sales records	7 years (tax law). If you delete your account, your name, email, phone and address on these records are replaced with "[ERASED]"; the amounts and items stay.
Pet owner account and pet profiles, photos	As long as your account exists. Deleted when you delete the pet, the tag or your account (within 30 days of your request).
Pet tag scan history and found reports	As long as the tag is active. The IP address and browser details are erased after 12 months; the date, approximate area and any location the finder shared stay in your scan history. Everything is deleted when the tag or your account is deleted.
Business NFC smart-link taps	The IP address and browser details are erased after 12 months. The rest (time, device type, country / city) is kept as anonymous statistics for the business that owns the tag.
Tag status log	6 years (the period for legal claims under Cyprus law), then deleted automatically — unless linked to an active legal claim.
Records of emails we send	2 years, then deleted automatically.
Deletion request records	6 years after we handle the request, then deleted automatically.
Website analytics (only with your consent)	Up to 14 months, then deleted automatically by Google / Microsoft.
Technical error logs	30 to 90 days, then deleted automatically. A small number of critical system errors are kept longer to investigate serious faults.

6. Your rights

You can ask us to:

• see the data we hold about you and get a copy (access),
• correct data that is wrong,
• delete your data,
• restrict how we use it, or object to uses based on our legitimate interest,
• give you your data in a machine-readable form (portability),
• and, where we rely on your consent (for example a finder's shared location), withdraw that consent.

You can manage most of this yourself in the pet portal (Profile → Privacy & Data) — pause tags, request deletion of a tag, or request deletion of your account. For anything else, email info@ateliqo.com. We reply within one month.

What deleting means for your tags. Your contact details are what makes a tag useful, so deleting your account permanently disables all your tags and deletes your pet profiles, photos and scan history. Some records stay:

• Orders are kept for 7 years because tax law requires it (GDPR Art. 17(3)(b)) — but your personal details on them are anonymised.
• The tag status log is kept for up to 6 years so we can defend against legal claims about whether our service worked correctly (Art. 17(3)(e)). It may include your IP address and the email you used at the time. After 6 years it is deleted automatically, unless linked to an active legal claim.

Complaints. If you are unhappy with how we handle your data, please contact us first at info@ateliqo.com. You also have the right to complain to a data protection authority.

7. Cookies and similar technologies

Necessary — always on. To make the sites work, we store a few things in your browser: your shopping cart, your language choice and, in the pet portal, your login session.

Analytics — only with your consent. If you accept analytics cookies in our cookie banner, we use Google Analytics and Microsoft Clarity to understand how visitors use our website, for example which pages they visit and where they click. You can change your choice at any time from the "Cookie settings" link at the bottom of our pages.

Payments — the payment page is run by Stripe on stripe.com and uses Stripe's own cookies for payment security and fraud prevention.

8. Children

Our accounts are for adults (18+). We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

9. Security

We use encrypted connections (HTTPS), store passwords only in hashed form, limit who can access the admin tools, protect logins against repeated guessing, and keep backups. If a data breach puts your rights at risk, we will notify the data protection authority within 72 hours and tell you without undue delay, as the law requires.

10. Changes to this policy

We will show the date of the latest version at the top of this page and email registered users about important changes.

---

Business details · Ateliqo · Business Name Reg. No. ΕΕ 62949 (Department of Registrar of Companies, Cyprus) · Nicosia, Cyprus · info@ateliqo.com