Privacy

1. Who we are

Petrava is a pet travel advisory service operated by Andrea Matoso (Belgium). As the data controller under the General Data Protection Regulation (GDPR), we are responsible for the personal data we process.

Contact: petravaeu@gmail.com

2. Data we collect

• Account data: full name, email address. Passwords are hashed and managed by Supabase Auth — we never see your password in plain text.
• Profile data: phone number, home country.
• Pet data: name, species, breed, weight, age, microchip number.
• Trip data: travel routes, departure and return dates, airline, veterinary contact details.
• Service request data: subject, description, requested travel dates.
• Document references: file URLs for passports, vaccination records, and health certificates stored in our system.

3. How we use your data

We process your data to:

• Provide our pet travel planning and coordination services (Art. 6(1)(b) GDPR — necessary for performance of the contract).
• Contact you about your trip or service request (Art. 6(1)(b)).
• Improve our services and prevent fraud (Art. 6(1)(f) — legitimate interests).

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Sub-processors

• Supabase, Inc. — database hosting and authentication. Data is stored in the EU region.
• Email provider — used to send transactional messages related to your requests.

5. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by Belgian tax or accounting law (typically up to 7 years for financial records).

6. Your rights

Under GDPR you have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request erasure of your data ('right to be forgotten') where no legal basis for retention exists.
• Receive your data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at petravaeu@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données): gegevensbeschermingsautoriteit.be.

7. Cookies and tracking

We use technically necessary cookies for authentication. Those are always active and required for the service to function.

With your explicit consent (Accept on our cookie banner), we also load the TikTok Pixel (operated by TikTok Technology Limited, Ireland) for analytics and ad measurement. The pixel records pageviews and form submissions, and may set cookies. You can decline on the banner — in which case the pixel is never loaded — or withdraw consent later by clearing your browser storage for this site. Declining has no impact on service functionality.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our service after an update constitutes acceptance of the revised policy.