PetLegacy Privacy Policy

Last Updated: February 2026

PetLegacy creates lasting physical memorials - engraved metal plates and NFC tags - that include access to digital photo galleries. This Privacy Policy explains how we collect, use, and protect your information when you purchase our memorial products and use the included digital features.

1. Information We Collect

When you purchase PetLegacy memorial products, we collect:

Memorial Products & Orders

• Your name, email address, phone number, and shipping address
• Payment information (processed securely through Stripe - we never store your card details)
• Product specifications and engraving details for your memorial plate or tag
• Order history and purchase records

Digital Memorial Content

• Photos, videos, names, dates, and memorial text you choose to upload to your digital gallery
• Profile frame selections and display preferences
• Memorial page customization choices

Technical Information

• Device type, browser information, and IP address
• Page views and interactions with your digital memorial
• Access logs for memorial pages

2. How We Use Your Information

Product Fulfillment & Service Delivery

• Manufacturing and engraving your physical memorial products
• Shipping your orders to the correct address
• Activating and hosting your digital memorial gallery for the prepaid hosting period
• Processing payments and managing your account

Communications

• Sending order confirmations and shipping notifications
• Providing activation instructions for your memorial products
• Sending hosting renewal reminders before your prepaid period expires
• Responding to your customer service inquiries

Service Improvement

• Understanding how customers use our memorial products and digital features
• Improving product quality and user experience
• Developing new memorial product options

3. Information Sharing

We respect your privacy and do not sell your personal information. We share information only when necessary:

Manufacturing & Fulfillment Partners

• Engraving details and specifications are shared with our manufacturing partners to produce your memorial plates
• Shipping addresses are shared with delivery services to fulfill your order

Service Providers

• Stripe: Payment processing (they handle all card information securely)
• Supabase: Secure hosting of your digital memorial content
• Email service providers: For order confirmations and important account notifications

Legal Requirements

• When required by law, court order, or to protect our legal rights
• To prevent fraud or protect the safety of our customers

4. Digital Memorial Privacy

Your digital memorial gallery is private:

• Accessible only via the unique QR code on your physical memorial product or direct link
• Not indexed by search engines
• Not listed publicly on our website
• Only viewable by people you choose to share the physical memorial or link with

You control who can access your memorial by controlling access to the physical product (plate or tag) that contains the QR code or NFC chip.

5. Data Storage and Security

Physical Product Information

• Order and engraving details are stored securely in our encrypted database
• Payment information is handled entirely by Stripe (PCI-DSS compliant) - we never store card details

Digital Memorial Content

• Photos and memorial content are stored on Supabase's secure cloud storage
• Videos may be hosted on YouTube (unlisted, not searchable) if you choose that option
• All data transmission uses HTTPS encryption
• Access to memorial pages requires the unique link from your physical product

6. Data Retention

Active Memorials

• We retain your memorial content for the full duration of your prepaid hosting period
• Your physical memorial product (plate or tag) remains functional indefinitely

After Hosting Expiry

• 90-day grace period: Your memorial remains viewable, with renewal reminders sent
• After grace period: Memorial is unpublished but data retained for 30 days
• You may request a data export before final deletion
• Renewal available at any time during grace period to restore full access

Order Records

Purchase history and customer information retained for 7 years for tax and accounting purposes.

7. Your Privacy Rights

Under New Zealand's Privacy Act 2020 and GDPR (for European visitors), you have the right to:

Access & Correction

• View all personal information we hold about you
• Correct any inaccurate or incomplete information
• Receive a copy of your memorial content

Data Portability & Deletion

• Export your memorial photos and content in a portable format
• Request deletion of your personal information (subject to legal retention requirements)
• Download all memorial content before your hosting expires

Communication Preferences

• Opt out of renewal reminder emails (you'll still receive critical account notices)
• Unsubscribe from marketing communications
• Update your contact preferences at any time

8. Partner Program Privacy

If you are a PetLegacy partner (veterinarian, funeral home, pet crematorium, etc.):

Information Collected

• Business details, contact information, and banking details for commission payments
• Sales data from activation codes and referral codes you distribute
• Commission earnings and payout history

Partner Communications

• Notifications when your codes are redeemed
• Commission statements and payment confirmations
• Updates to partner terms and program information

You can manage notification preferences in your partner portal settings.

9. Cookies and Tracking

Essential Cookies

• Required for website functionality, order processing, and memorial access
• Cannot be disabled without affecting service functionality

Analytics Cookies

• Google Analytics to understand how visitors use our website
• Helps us improve product offerings and user experience
• You can opt out via browser settings or Google Analytics opt-out tools

No Advertising Tracking

• We do not use cookies for advertising or sell data to third parties
• No cross-site tracking or behavioral advertising

10. Children's Privacy

Our memorial products may commemorate children, but our services are not directed to children.

• We do not knowingly collect personal information from anyone under 16
• Memorial content about children is managed by parents, guardians, or adult family members
• If we discover we have collected information from a child under 16, we will delete it promptly

11. International Data Transfers

Primary Operations

• PetLegacy operates from New Zealand
• Our infrastructure (Supabase, Stripe) may process data in various locations including the United States and Europe

Data Protection

• All service providers maintain appropriate security standards
• International transfers comply with applicable privacy laws including GDPR

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

Notice of Changes

• Material changes will be communicated via email to active customers
• Updated policy posted on our website with revision date
• Continued use of our products after changes constitutes acceptance

13. Memorial Content Ownership

You Retain Ownership

• You own all photos, videos, and content you upload to your memorial
• PetLegacy hosts your content as a service during your prepaid hosting period
• You may download your content at any time

Our Limited License

• You grant us permission to display your content on the memorial page
• This license is limited to providing the memorial service you purchased
• We do not use your memorial content for any other purpose

14. Contact Us & Data Requests

Privacy Questions

Email: privacy@petlegacy.co.nz
Response time: Within 5 business days

Data Access Requests

• Email privacy@petlegacy.co.nz with your order number or memorial link
• We will verify your identity before providing access to personal information
• Requests processed within 20 business days

Mailing Address

PetLegacy
Auckland, New Zealand

Right to Complain

• New Zealand residents: Office of the Privacy Commissioner (privacy.org.nz)
• EU residents: Your local data protection authority

15. Business Transfers

If PetLegacy is acquired, merged, or sold:

• Your information may be transferred to the new entity
• You will be notified via email before any transfer
• The new owner must honor this Privacy Policy
• Your memorial content and hosting period will continue uninterrupted