Personal Data Policy

1. Data controller

The controller of your personal data is Nebula Group, a company domiciled in Bogotá D.C., Colombia.

You can reach us at contacto@petid.com.co or +57 317 1415 680 for anything related to this policy.

2. Legal framework

This policy is adopted under Colombian Law 1581 of 2012, Decree 1074 of 2015 and any rules amending them, and under article 15 of the Constitution of Colombia.

3. Data we collect

We collect only what the service needs:

• Owner identification: full name, identification number, email address and phone number.
• Contact and shipping details: address, city and department, used to dispatch the physical tag.
• Pet details: name, species, breed, sex, colour, date of birth, photographs, and health or behaviour notes.
• Documents you attach to the vaccination record or the pet profile, including veterinary certificates and records.
• Transaction data: the plan purchased, the payment status and the gateway reference. We do not store card numbers.

4. Sensitive data

Your pet's health information is not sensitive data under article 5 of Law 1581 of 2012, which concerns natural persons. We still treat it as confidential: documents and medical notes are never public and are shown only to someone signed in as that pet's owner.

We do not collect sensitive data about you, nor data about children or adolescents.

5. Purposes

Your data is processed in order to:

• Create and manage your account and authenticate you on the platform.
• Register your pets and link them to the tag you purchased.
• Produce and ship the physical tag to the address you provide.
• Process plan payments through the gateway and confirm their status.
• Let whoever finds your pet get in touch with you, under the terms of section 6.
• Answer your requests, complaints and claims, and send you service-related messages.

6. Public tag profile

Every tag carries a code that resolves to a public pet profile. It is readable without signing in, because its whole purpose is to let whoever finds the animal identify it.

While the pet is not reported lost, the profile shows only details of the animal: name, species, breed, sex, colour, age and photographs. It does not show your name, your phone number or the medical notes.

When you report your pet lost, and only while that report is active, the profile additionally shows your name, your phone number and the pet's health notes, so whoever finds it can call you and knows about any urgent care. Marking it found withdraws all three immediately.

Reporting a pet lost is therefore your decision to make your name and phone number public for that period.

7. Your rights

As the data subject, article 8 of Law 1581 of 2012 grants you the right to:

• Access, update and correct your personal data.
• Request proof of the authorisation you gave, except where the law does not require it.
• Be told how your data has been used.
• File complaints with the Superintendence of Industry and Commerce for breaches of the law.
• Withdraw your authorisation or request deletion of your data, where no legal or contractual duty prevents it.
• Access your processed data free of charge.

8. Exercising your rights

Write to contacto@petid.com.co with your name, identification number, a description of your request and where you want the answer sent.

Queries are answered within ten (10) business days, extendable by five (5). Claims are answered within fifteen (15) business days, extendable by eight (8), under articles 14 and 15 of Law 1581 of 2012.

9. Processors and transfers

To run the service we share data with third parties acting as processors: the payment gateway, the storage provider holding images and documents, the transactional email provider, and the courier delivering the tag.

They may only process the data to provide us that service, under the security and confidentiality duties the law imposes on them.

10. Security

We take technical and administrative measures to protect your data: sessions are handled with short-lived access tokens, medical documents are stored in a repository with no public access and served only after checking that the requester owns the pet, and traffic to the platform is encrypted.

No system is infallible. Should an incident compromise your data, we will inform you and report it to the competent authority as the law requires.

11. Retention

Your data is kept while your account is active and, after it closes, for as long as legal, accounting and tax obligations require. After that it is deleted or anonymised.

12. Changes to this policy

We may amend this policy. Where a change is substantial we will tell you by email or through a visible notice on the platform before it takes effect.