Privacy Policy | Flo 4 Paws

Last updated: April 2026

1. Who we are

Flo4Paws is a practice management platform operated by AnimoIT Ltd, a company registered in England and Wales (Company No. 10219788), registered address 143 Tamworth Road, Long Eaton, Nottingham, NG10 1BY.

AnimoIT Ltd is registered with the Information Commissioner's Office (ICO Registration No. ZC110921) as a data controller.

For any privacy-related questions, contact us at: info@flo4paws.co.uk

2. What data we collect

When you use Flo4Paws, we may collect and store the following personal data:

Account information: your name, email address, and phone number, provided when your account is created.

Dog information: your dog's name, breed, and date of birth, provided when a dog profile is created.

Diary entries: behavioural diary entries you submit, including dates, times, events, triggers, reactions, and any rating scores.

Health forms: information you provide in health questionnaires, including details about your dog's physical condition and history.

Comfort and movement assessments: your responses to the Galen Myotherapy posture assessment questionnaire.

Photos and videos: images and video clips you upload via the diary, media library, or assessment features.

Messages: messages exchanged between you and your behaviourist within the platform.

Consultations: appointment details and any consultation notes or uploaded documents shared by your behaviourist.

Technical data: your IP address, login timestamps, and device information collected automatically when you use the platform.

3. How we use your data

We use your personal data to:

Provide and operate the Flo4Paws platform and all its features
Allow your behaviourist to review your diary entries, assessments, and health information
Send you account-related emails, including welcome emails and password reset links, via Amazon Web Services Simple Email Service (AWS SES)
Maintain a secure audit log of account activity
Diagnose technical issues and improve the platform

We do not use your data for marketing purposes. We do not sell your data to third parties.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

Contract: processing is necessary to provide the Flo4Paws service you have signed up for
Legitimate interests: maintaining security logs and improving the platform
Consent: where you have explicitly provided information such as photos or health data

5. Who we share your data with

Your data is shared only with the following third-party service providers, who act as data processors on our behalf:

Hetzner Online GmbH — cloud server infrastructure (Germany, adequacy decision applies)
Cloudflare Inc — file and media storage via Cloudflare R2 (USA, Standard Contractual Clauses apply)
Amazon Web Services — transactional email delivery via AWS SES, EU North region (Ireland)

Your behaviourist (the practice using Flo4Paws) can access all data you submit through the platform. This is the core purpose of the service.

We do not share your data with any other third parties unless required to do so by law.

6. How long we keep your data

We retain your personal data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

Server backups are retained for 30 days, after which they are automatically deleted.

7. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data (the right to be forgotten)
Restrict how we process your data
Object to processing based on legitimate interests
Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at info@flo4paws.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

8. Cookies and local storage

Flo4Paws uses browser local storage to keep you logged in between sessions (via a secure refresh token). We do not use advertising cookies or third-party tracking cookies.

9. Data security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), password hashing, and JWT-based authentication with short-lived access tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

Flo4Paws is intended for use by adults aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact

AnimoIT Ltd 143 Tamworth Road, Long Eaton, Nottingham, NG10 1BY info@flo4paws.co.uk ICO Registration: ZC110921