Effective Date: 07.09.2025
Welcome to Pethearted (the “app“, “we“, “our“, “us“), a mobile application operated by C&E BRAND S.R.L., a commercial company registered in Romania with CUI (Unique Registration Code) 49714967, Trade Register number J26/390/2024, with its registered office at Mureș, Loc. ADRIAN, NR. 37.
This Privacy Policy explains how we collect, use, process, and protect your personal data when you use the Pethearted application and its associated services (collectively, the “Services“).
By accessing or using our Services, you understand and agree to the practices described in this policy. If you do not agree with these practices, please do not use our Services.
We collect the following categories of personal data:
A. Data you provide directly to us:
Account Data: Name, surname, email address, phone number, password (hashed), country.
Profile Data: Profile picture (optional), pet preferences (type, breed, name, age).
Provider Data: Company name, CUI, contact details, business address, bank details for settlement, business description, logo, images of products/services offered, prices, business hours.
Payment Data: Payment details (e.g., card number, cardholder name, expiration date, CVV) are processed by our authorized payment processors (e.g., Stripe, PayPal, or an authorized local processor). We do not store complete credit card details on our servers.
Content and Communications: Messages you send to providers/clients, reviews and ratings you post, your interactions with our support service.
B. Data collected automatically:
Usage Data: Order history, products/services viewed, account type (client/provider), settings preferences, date and time of access, device type, operating system version.
Technical Data: IP address, browser type, language settings, unique device identifiers (e.g., advertising ID, UUID).
C. Data from third-party sources:
You may choose to log in to your Pethearted account using a social media account (e.g., Facebook, Google). We receive your name, email address, and profile picture from that account, in accordance with your privacy settings on that platform.
We process your personal data based on the following legal grounds:
Performance of a contract (Art. 6(1)(b) GDPR): To create and manage your account, process your orders and payments, facilitate communication with providers/clients, and deliver the products/services you request.
Legitimate interests (Art. 6(1)(f) GDPR): To operate, maintain, secure, and improve our Services (e.g., analyzing usage data to prevent fraud and improve user experience), for direct marketing (within the limits permitted by law, see point 4).
Your consent (Art. 6(1)(a) GDPR): For marketing activities that go beyond the scope of legitimate interest (e.g., receiving marketing newsletters by email if you explicitly subscribed) and for some cookies. You can withdraw your consent at any time.
Legal obligation (Art. 6(1)(c) GDPR): To comply with our legal obligations, such as those for billing and keeping financial records.
Direct Marketing: Based on our legitimate interest, we may send you communications about products or services similar to those you have purchased (direct marketing). You can object (“opt-out”) to these communications at any time by clicking the unsubscribe link in any email or by changing your account settings.
Newsletter: We will send you general promotional communications (newsletter) only with your explicit consent. You can subscribe or unsubscribe at any time.
We do not sell your personal data. We only share it in the following situations:
With Providers/Clients: To facilitate transactions, your contact details and order information are shared between the Client and the Provider to enable delivery, billing, and necessary communication.
With Service Providers: We use trusted third parties who help us operate the application (hosting providers, payment processors, analytics services, email marketing services, customer support services). They only have access to data to perform tasks on our behalf and are contractually obligated to keep it secure and not use it for other purposes.
For Legal Obligations: If required by law or a legal mandate.
To Defend Our Rights: If we reasonably believe it is necessary to protect our rights, property, or safety, or that of our users or others.
Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we will only do so if there are adequate data protection guarantees in place (e.g., European Commission Adequacy Decisions, Standard Contractual Clauses).
We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or accidental alteration. These include encrypting data in transit (SSL/TLS) and at rest, regular security reviews, and employee training.
We will retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including to meet any legal, accounting, or reporting requirements.
For example:
Account Data: We keep it for as long as your account is active. You can request account deletion.
Transaction Data (orders, invoices): We keep it for the periods required by Romanian fiscal legislation (usually 10 years).
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
The right to access your personal data.
The right to rectification (correction) of inaccurate data.
The right to erasure (“the right to be forgotten”), under certain conditions.
The right to restriction of processing.
The right to data portability.
The right to object to processing based on legitimate interest.
The right to withdraw your consent (where consent is the basis for processing).
To exercise any of these rights, please contact us at office@pethearted.ro. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
Our application uses cookies and similar technologies (e.g., web beacons, mobile SDKs) to ensure the proper functioning of the app, analyze traffic, and personalize content. You can manage your cookie preferences in your browser or device settings.
We reserve the right to update this Privacy Policy to reflect changes to our practices or regulations. We will notify you of any significant changes by posting the new policy in the application and, where appropriate, by email. Continued use of the Services after any change constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
Data Protection Officer (DPO)
C&E BRAND S.R.L.
Mureș, Loc. ADRIAN, NR. 37
Email: office@pethearted.ro