Privacy Notice

PawSpot is a UK marketplace for booking private dog exercise fields, operated by Pawspot Limited, registered office Franklins House, Wesley Lane, Bicester, United Kingdom, OX26 6JU. Pawspot Limited is the data controller for the personal data described in this notice. You can reach us at hello@pawspot.co.uk for any privacy question.

This notice explains what data we collect about you, why we hold it, who else sees it, and what rights you have. It complements our Terms of Service.

Different bits of data sit on different lawful bases (UK GDPR Article 6). The table below shows what we keep, why, and how long for.

We use a small set of third-party processors to run the platform. They only see what they need for their specific job, and they have data-processing agreements in place with us.

We don't sell your data, share it with advertisers, or use it to train AI models.

Field owners never see your email address. On their dashboard, in their incoming-booking email, and in any calendar / webhook integration they connect, we show your name as “first name + last initial” (e.g. “Sarah J.”) and your dog count, that's it. This stops owners contacting you off-platform to take repeat bookings outside PawSpot. If you ever need to reach an owner directly we'll relay the message through our support team.

Some of the processors above are based outside the UK. We rely on standard transfer mechanisms recognised by the UK government, primarily the EU/UK Standard Contractual Clauses, the UK International Data Transfer Addendum, and the UK extension to the EU-US Data Privacy Framework. We don't make transfers to countries without an adequate safeguard.

Under UK GDPR you have rights over your personal data. You can:

• Access the data we hold about you
• Correctanything that's wrong
• Delete your account and most data (some financial records have to stay for tax purposes)
• Port your data, get a machine-readable copy
• Restrict or object to specific uses
• Withdraw consent for anything you consented to (e.g. non-essential cookies)

The fastest way to exercise any of these is from your account settings (account deletion is in there) or by emailing hello@pawspot.co.uk. We aim to respond within one calendar month, as required by GDPR.

If you're unhappy with how we've handled your data, you can complain to the UK's Information Commissioner's Office (ico.org.uk). We'd rather you talked to us first, but it's your call.

When you close your account, most of your data goes — but some has to stay for legitimate reasons:

• Booking records stay (anonymised), so field owners keep their financial history and HMRC tax obligations are met. UK accounting rules require us to retain transaction records for 6 years.
• Reviews you wrotestay on the field, with your name replaced by “Former PawSpot user”. Other customers' decisions shouldn't be lost when you close your account.
• Saved cards at Stripe become orphaned; the customer object is detached. Card numbers themselves never sit on our infrastructure to begin with.

Everything else (account profile, dog records, loyalty points, payment-tied profile data, owner field listings) is deleted.

You must be at least 18 to create a PawSpot account. We don't knowingly collect data from anyone younger; if we discover we have, we'll delete it.

Passwords are hashed with bcrypt and never stored in plaintext. Card numbers never reach our servers, Stripe handles them under their PCI-DSS-certified infrastructure. Data in transit uses HTTPS; databases use encryption at rest. Access is limited to the small number of people who run the platform.

No system is perfectly secure. If we ever discover a data breach that affects you materially, we'll let you know within 72 hours, as required by GDPR.

We'll update this notice when our data practices change. The date at the top reflects the most recent update. For material changes we'll tell you by email or a banner on the site.

Questions about anything here? hello@pawspot.co.uk , a real person reads every email.