Last Updated: 2025/09/16

1. Purpose
This paw-licy sets out how Paw-Paw Pets (“we,” “our,” or “us”) protects and manages data in line with legal requirements and best practices. It applies to all staff, contractors, and systems handling Paw-Paw Pets’ information.

2. Scope
This paw-licy covers all data collected, stored, or processed by Paw-Paw Pets, including:

  Client data (paw-rents personal details, contact information, booking history, payment records).
  Pet data (health, behavioral notes, special instructions).
  Operational data (schedules, reports, business records).

It applies to the following storage environments:

  Paper records.
  Local storage on company laptops.
  Cloud storage (Azure, Google Workspace).
  Pet Sitter Dashboard system.

3. Data Collection
We only collect what’s necessary to provide tail-wagging service effectively. This may include personal, operational, and financial data. We never sell or share personal data with advertisers or unauthorized third parties.

4. Data Storage and Security Paw-tection Measures

Paper Storage
  Paper records are minimized and stored in locked cabinets.
  Access is limited to authorized staff.
  Sensitive paper records are shredded when no longer required.

Laptops (Local Storage)
  All devices are password-protected with automatic screen locks.
  Company laptops use antivirus software and regular system updates.
  Where sensitive data is stored locally, it must be encrypted.

Cloud Storage (Azure and Google Workspace)
  Data is encrypted at rest and in transit.
  Access is role-based and requires multi-factor authentication.
  Activity is monitored, and suspicious activity is flagged.

Pet Sitter Dashboard
  Data is stored in secure Google Cloud services.
  Authentication uses OAuth 2.0 and OpenID Connect.
  All communications between app and server are SSL/TLS encrypted.

5. Data Retention
  Paw-rents and pet records are retained as long as necessary for service provision and legal compliance.
  Digital logs and temporary diagnostic data are retained for a maximum of 90 days unless required for legal or business purposes.
  Upon request, data will be deleted permanently within 30 days.

6. Access Control
  Only authorized staff have access to paw-rents or operational data.
  Access is granted on a “least privilege” basis (only what is needed for work).
  Staff must not share login credentials.

7. Paw-rent Rights
Paw-rents have the right to:

  Request access to their personal data.
  Request correction of inaccurate data.
  Request deletion of their data (subject to legal obligations).

Requests can be sent to: info@pawpawpets.co.za

8. Compliance
We comply with:

  The Protection of Personal Information Act (POPIA) in South Africa.
  General Data Protection Regulation (GDPR) where applicable.
  Other relevant data protection laws.


9. Breach Response
In the event of a data breach:

  The Data Protection Officer (DPO) will investigate immediately.
  Impacted individuals will be notified within 72 hours where required.
  Preventative measures will be put in place to avoid recurrence.

10. Responsibilities

  All employees and contractors must follow this paw-olicy.
  Managers must ensure their teams are trained and compliant.
  The DPO (currently Jaco Dorfling) oversees paw-licy enforcement and updates.

11. Paw-licy Review
This paw-licy will be reviewed annually, or sooner if required by changes in law, technology, or operations.