Core commitments
Public profiles never reveal a seller’s exact premises. Identity and premises evidence is separated from public marketplace data, access is role-limited and every reviewer access is logged.
Data we expect to process
Account and contact details, identity-provider results, premises and occupancy evidence, dog ownership and microchip records, health evidence, communications, visits, reports and enforcement records. We should avoid retaining raw identity documents where a specialist provider can return a verified result instead.
Purpose and retention
Each field must have a named purpose and retention period. Sensitive evidence is deleted when its verification, legal and appeal purposes expire; minimal fraud-prevention fingerprints and enforcement records may be retained where lawful and proportionate.
Your rights and contact
Before launch this section must name the controller, lawful bases, processors, international transfers, retention schedule, DPO/contact channel, complaint route and all applicable data-subject rights.