Privacy Centre
See what we hold about you, take a copy of it, have it erased, and decide separately what each kind of message is allowed to be sent to you.
Sign in to manage your data
Everything on this page acts on one specific person’s account, so it can only run once we know it is yours. Signing in is not available yet — the phone-OTP sign-in is still being built, and there are no accounts on this site today.
Nothing below is a control that quietly does nothing. There are no switches showing a consent state we have not read, and no button that files a request into nowhere. When sign-in opens, the four actions described below become live here, in this order, and nothing else about this page changes.
In the meantime, a data-protection question or request goes to the contact on the contact page.
What this page does
See what we hold about you
A summary of the personal data processed about you and what it is processed for — your profile, addresses, pets, orders, invoices, subscriptions, reviews and the consent choices you have made.
Available once you can sign in
Digital Personal Data Protection Act 2023, ss.11–14
Export your data
The same data as a machine-readable file you can keep or take elsewhere, delivered over a signed link that expires. Requested here, not by writing to support.
Available once you can sign in
Digital Personal Data Protection Act 2023, ss.11–14
Delete your account and erase your data
Your personal data is erased. Invoices and order financial records are kept, with the personal data in them minimised, because tax law requires them to be retained — and that exception is part of the request, not a surprise afterwards.
Available once you can sign in
Digital Personal Data Protection Act 2023, s.8(7)
Change your consent, purpose by purpose
One switch per purpose, effective immediately. No bundles, nothing pre-selected, and no support ticket in the way.
Available once you can sign in
Digital Personal Data Protection Act 2023, s.6(3), s.6(6)
Your consent, purpose by purpose
These are every purpose this system records a consent against — the same list the API stores against your account, so nothing can be collected here and hidden from you there. Each is a separate choice. Nothing is pre-selected, marketing is never a condition of buying, and turning one off does not turn any other one off.
- Order and account messages
- Order confirmations, dispatch and delivery updates, refund notices, and anything else about an order you actually placed. This is not marketing and it is asked for separately. Your current setting is only readable when you are signed in, so none is shown here.
- Marketing by email
- Offers, new products and reminders by email. Your current setting is only readable when you are signed in, so none is shown here.
- Marketing by SMS
- Offers, new products and reminders by text message. Your current setting is only readable when you are signed in, so none is shown here.
- Marketing on WhatsApp
- Offers, basket reminders and new products on WhatsApp. Your current setting is only readable when you are signed in, so none is shown here.
- Marketing by app notification
- Offers and reminders as notifications in the Pawgress app. Your current setting is only readable when you are signed in, so none is shown here.
- Usage analytics
- Measuring how the store is used, so the shelves and the search can be made better. Your current setting is only readable when you are signed in, so none is shown here.
This much is the law, not our policy
Withdrawing a consent has to be as easy as giving it was. When these switches are live they take effect immediately, with no confirmation maze, no retention offer and no support ticket standing between you and the switch.
Digital Personal Data Protection Act 2023, s.6(3), s.6(6)
What erasure does and does not remove
Erasure is executed, not a flag on a row. It removes or anonymises the personal data held about you across the account, addresses, pets, subscriptions and support history.
This much is the law, not our policy
Invoices and order financial records are retained, with the personal data in them minimised, because tax law requires a seller to keep them. The Act permits exactly this: data may be retained where another law requires it. Nothing else survives an erasure.
Digital Personal Data Protection Act 2023, s.8(7)
Who to ask
- Data protection contact
- Not yet supplied — the name of the person able to answer a Data Principal’s questions about the processing of their personal data. Required by Digital Personal Data Protection Act 2023, s.8(9).
- Not yet supplied — an e-mail address that reaches that person. Required by Digital Personal Data Protection Act 2023, s.8(9).
The rows marked above are open business dependencies, tracked in the project’s licence register. Nothing is filled in with a placeholder value: a plausible-looking registration number on a public listing is an offence, not a stand-in.
To be supplied by the business
The period within which a data-principal request made here will be answered, and the escalation route if it is not. This has to be published, and it is a commitment the business sets rather than one the software can infer.
Required by Digital Personal Data Protection Act 2023, ss.11–14
What is collected and why, and how long it is kept, are set out in the privacy notice. A privacy complaint that is not resolved may be taken to the Data Protection Board of India.