Privacy policy
Last updated on
This English version is provided for convenience; the French version is the only legally binding text. This policy describes the personal data processed by PawMatch, the reasons for that processing, who can see it and your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Data controller
The data controller is to be completed, to be completed. For any question relating to your data: to be completed or the contact form on the website.
Data collected and purposes
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, password (hashed), display name, first name, surname, date of birth (to verify that you are of age), telephone number, town (postcode and coordinates of the town centre) and the département derived from it, role (private owner or breeder). Optional two-factor authentication: encrypted secret and hashed backup codes | Creating and managing the account, login, security, contact by the publisher, notifications related to account activity | Performance of the contract (terms of use); age requirement (date of birth); legitimate interest (telephone: contact and account security) |
| Avatar (optional) | Personalising the profile visible to other members | Consent (voluntary upload) |
| Breeders: SIREN number, professional card number, professional card and additional supporting document (PDF or image, scanned by an antivirus), status and reason for a decision | Verifying breeder status, a condition for publishing females | Legitimate interest (reliability of the platform) and performance of the contract |
| Dog listings: name, breed, sex, date of birth, département, photos, description, LOF number, microchip number, health tests (result, date, issuing body) and their supporting documents, pedigree and, if you have it verified, its supporting document (LOF birth certificate or DNA parentage test), mating terms and indicative fee, availability | Publishing listings, search and map, estimating the coefficient of inbreeding (COI), reviewing health documents, verifying pedigrees (checking the supporting document against the ancestors entered, “Verified pedigree” badge) | Performance of the contract |
| Messaging and mating follow-up: messages, status of the contact request, message read status, follow-up stages (visit, agreement, mating, litter) and terms of the agreement | Putting members in touch, organising matings, template contract generated on request, handling reports | Performance of the contract |
| Reviews of breeders: rating, comment, breeder reply, dates, moderation status | Helping members choose a breeder, limiting fake reviews (only members who have actually exchanged with the breeder can post one) | Performance of the service and legitimate interest |
| Favourites, saved searches and their alerts, blocked members, reports you send | Browsing convenience, alerts about new listings, safety of exchanges, moderation | Performance of the contract; legitimate interest (moderation) |
| Notifications and settings: on-site notifications, preferences by type and channel (site, email, push notification), digest frequency, “do not disturb” hours; for push notifications, the subscription of each device (address supplied by the browser push service, encryption keys, browser type) | Informing you of your account activity according to your choices | Performance of the contract; consent for push notifications (granted in the browser, can be withdrawn at any time) |
| Statistics for your listings: number of views per listing and per day, without any data about visitors | Letting the owner measure interest in their listings | Legitimate interest |
| Paid options: orders (product, amounts incl. VAT and VAT, dates), invoice number and links, subscription, Stripe customer identifier, acceptance of the terms of sale. Card data is entered at Stripe and never goes through PawMatch | Selling and invoicing paid options (promotion, Breeder Pro subscription), accounting, proof of acceptance of the terms | Performance of the contract and legal obligation (accounting, VAT) |
| IP address, browser, login timestamps, log of sensitive actions, normalised email address, fingerprints of dog photos, contact request counters | Security (limiting attempts, detecting multiple accounts, reused photos and abuse), evidence in the event of a dispute | Legitimate interest (security) and legal obligations |
| Name, email, subject, optional reference and message of the contact form | Answering your request | Legitimate interest (handling the request) |
| Log of your consents (terms of use, emails and push notifications, terms of sale), with the text version and date, without IP address | Proving your choices | Legal obligation (proof of consent) |
Who sees what
- Visitors who are not signed in: an anonymised preview of a few listings (dog name, breed, sex, age, département), with no photo or owner. Search and detailed listings are reserved for signed-in members.
- Signed-in members: published listings (photos, name, breed, sex, age, département, availability, LOF number, description, mating terms and fee, health tests with their result, date, issuing body and the “Verified result” badge, pedigree depth, “Verified pedigree” badge and its date, estimated COI), the owner’s display name and avatar, their verified breeder badge and the reviews they have received, signed with the display name of their author.
- Map: a listing’s position is the centre of its owner’s town, rounded to about 5 km, and distances are given in 5 km steps. No address or exact position is collected. You can remove your listings from the map (My account › Profile, “Show my listings on the map”): they remain visible in search, with the département entered for each dog.
- Your correspondents, once your contact request has been accepted: your messages, the mating follow-up and, for the dog concerned, the health test supporting documents (after the antivirus scan).
- Never shown to other members: your email address, first name, surname, date of birth, telephone number, town, your dogs’ microchip numbers, the details of their pedigree (ancestors’ names) and its supporting document, your breeder documents, your favourites, your saved searches and the statistics of your listings.
- PawMatch team: authorised administrators see the files and documents to be verified (a pedigree supporting document is only accessible to you and to the administrators in charge of verification), as well as reported content (including the messages of a reported conversation); every access to a supporting document is logged.
Retention periods
- Account: for as long as you use it. After a deletion request, the account is closed immediately and then permanently anonymised after 30 days (see “Account deletion”).
- Deleted dog listing: kept for 30 days so that it can be restored, then erased together with its photos, supporting documents and the conversations about it.
- Messages: kept as long as the conversation exists, that is as long as the listing of the dog concerned exists; when your account is deleted, your identity is removed from them.
- Breeder documents (professional card, attachments): automatically deleted 90 days after the team’s decision (approval, refusal or expiry), or 90 days after upload if they were never submitted; never during the review. The SIREN number, card number and decision remain attached to the account as long as it exists, then are erased with it.
- Health test supporting documents: kept with the dog listing; replaced when a new file is uploaded, deleted with the test or the listing.
- Pedigree supporting document (LOF birth certificate or DNA parentage test): same period as health supporting documents — kept with the dog listing, replaced when a new file is uploaded, deleted with the listing.
- Login sessions (IP address, browser): 12 months after they were opened, then automatically deleted.
- Log of sensitive actions (including IP address): 12 months, then automatically deleted. A security copy, without IP address or identity of the person who performed the action, is kept for 400 days by a separate provider, in write-only mode.
- Server technical logs: 14 days.
- Email verification and password reset tokens: deleted 7 days after they expire or are used.
- Notifications: 6 months, automatically deleted.
- Favourites, saved searches, notification settings and devices subscribed to push notifications: as long as the account exists; a device is removed when you log out of that browser or when its subscription expires.
- Listing view statistics (no personal data): 13 months.
- Orders, invoices and proof of your acceptance of the terms of sale and of the waiver of the right of withdrawal: 10 years (accounting obligation), including after the account is deleted; they then no longer contain any data that directly identifies you, apart from what the invoice must legally state. Technical notifications from Stripe: 30 days.
- Log of your other consents (terms of use, emails and push notifications): for the life of the account, as evidence, then erased on anonymisation. A visitor’s choice regarding audience measurement, if any: 13 months.
- Reviews of a breeder: until their author deletes them or until the reviewed account is deleted; a review written by a member who deletes their account remains published, signed “Deleted user”.
- Contact form messages: for the time needed to handle the request, at most 12 months.
- Database backups, encrypted: kept for at most 12 months by rotation; data erased from the service disappears from the backups as they rotate.
- On your device: conversations already opened remain readable offline for at most 7 days and are erased when you log out.
Account deletion: what happens to your content
- Immediately: login and all your sessions are ended, your listings are removed from search and the map, any paid subscription is cancelled, and your name appears as “Deleted user” to your correspondents and under your reviews.
- After 30 days, permanent anonymisation: email address, display name, first name, surname, date of birth, telephone number, town, département, avatar, password, two-factor authentication, notifications, settings, push devices, favourites, saved searches, blocks, breeder file and documents are erased; your listings and their photos are permanently erased.
- Conversations: those about your own dogs are erased with the listings, for you and for your correspondents. In conversations about other members’ dogs, your messages remain visible to your correspondent, without your identity.
- Reviews: those you wrote remain published, signed “Deleted user”; those you received as a breeder are deleted.
- Reports you sent and orders: kept without your identity, orders and invoices for 10 years (accounting obligation).
Recipients and processors
Your data is processed by the website publisher and, for breeder verification and moderation, by authorised PawMatch administrators, from a separate back office whose accounts are protected by two-factor authentication. No data is sold or used for advertising purposes.
- Hosting of the website and database: to be completed (to be completed).
- File storage (photos, avatars, supporting documents): to be completed.
- Sending of service emails (address verification, password reset, notifications): to be completed.
- Off-site backups, encrypted before being sent (the provider cannot read them): to be completed.
- Payments: Stripe (Stripe Payments Europe, Ltd., Ireland), controller of your card data, which PawMatch does not receive.
- Push notifications, if you enable them: your browser’s push service (Google, Mozilla, Apple or Microsoft depending on the browser) receives your device address and the notification, encrypted end to end; it does not know its content.
- Town search: what you type (name or postcode) is sent by our server to the French State’s administrative boundaries API (geo.api.gouv.fr), without your identity or your IP address.
- Map backgrounds: when you open the “Map” view, your browser loads images from the IGN Géoplateforme (data.geopf.fr, a French public service, without cookies); your IP address and the area viewed are visible to it.
- Breached password check: when you sign up or change your password, only the first 5 characters of the password hash are sent to the Have I Been Pwned service (Cloudflare); they make it impossible to recover the password or to identify you.
- Antivirus scanning of files and error tracking: performed on our servers; the error tracking service, if enabled, receives no data about you (no identifier, email or IP address).
Transfers outside the European Union: Stripe, browser push services and Have I Been Pwned may process data outside the European Union, under standard contractual clauses or an adequacy decision. No other transfer takes place.
Security
- Passwords hashed with the Argon2id algorithm; never stored in clear text. Optional two-factor authentication for members, mandatory for administrators.
- Encrypted exchanges (HTTPS) and secure session cookies.
- Breeder, health and pedigree documents stored in a private space, scanned by an antivirus and only accessible through temporary signed links; photos re-encoded, metadata (including GPS position) removed.
- Limited number of login attempts and temporary account lock in case of abuse.
- Encrypted database backups, kept on a second site.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data.
- Rectification: edit your profile and listings from your account.
- Portability and access: download a copy of your data (profile, breeder file, listings, your messages, favourites, searches, reviews, blocks, reports, notifications, orders and consents) from the “Data” tab of your account, once every 24 hours.
- Objection and restriction: choose your notifications by type and channel, turn off emails or remove a device from push notifications from your account.
- Erasure: delete your account from the “Data” tab; anonymisation becomes permanent after 30 days.
- For any other request: to be completed or the contact form. You will receive a reply within one month.
If you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL).
Minors
The service is reserved for adults. No account can be created by a minor: the date of birth is checked at sign-up.
Changes
This policy may change as the service evolves. The date of the last update appears at the top of the page; any substantial change is notified to members by email.
Change history
- Verified pedigree: if you have a dog’s pedigree verified, the supporting document you upload (LOF birth certificate or DNA parentage test) is collected to be checked against the ancestors entered; the “Verified pedigree” badge and its date are visible to members.
- This document is only accessible to you and to the administrators in charge of verification; it is kept like health supporting documents (with the listing, replaced by a new upload, deleted with the listing).
- New “Who sees what” section: what visitors, members, your correspondents and the PawMatch team can see; a listing’s position on the map is rounded to about 5 km.
- New “Account deletion” section: what happens to your listings, conversations, reviews and orders.
- Full list of processors and third-party services (hosting, storage, emails, backups, Stripe, push notifications, town search, map backgrounds, breached password check) and of transfers outside the European Union.
- Retention periods clarified (sessions, logs, backups, statistics) and processing added: two-factor authentication, push notifications, reviews, favourites, alerts, mating follow-up, abuse prevention.
- Version published before updates were emailed automatically.