Legal

Privacy Policy

Last updated: June 2026

PawHub Pte Ltd (“PawHub”, “we”, “us” or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share and protect information about you when you visit ourpetcircle.com, use the Pet Passport, or purchase from our pet shop.

This policy complies with the Singapore Personal Data Protection Act 2012 (PDPA), for users in Australia the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), for users in New Zealand the New Zealand Privacy Act 2020, and for users in the Philippines the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations as enforced by the National Privacy Commission (NPC). Our primary data protection regulator is Singapore’s Personal Data Protection Commission (PDPC); users in New Zealand may also contact the Office of the Privacy Commissioner (OPC) at privacy.org.nz; users in the Philippines may contact the National Privacy Commission at privacy.gov.ph.

1. What personal data we collect

Data you give us directly

Account registration: name, email address, username, country.
Pet Passport — pet health data: pet name, species, breed, date of birth, weight history, microchip number, vaccination records, medication logs, vet visit history and any other health information you choose to enter. See Section 1A for how we treat this data.
Pet shop orders: name, delivery address, email address and order details. Payment card data is handled entirely by Stripe Inc. and is never transmitted to or stored on our servers.
Contact forms and emails: name, email address and any information you choose to include in your message.
Newsletter sign-ups: email address and pet-type content preferences.
Services directory enquiries: name, email address and the enquiry details you submit when requesting a callback or booking from a listed vet, groomer, boarder or other provider.
User-generated content: any reviews, comments or community posts you submit.

Data collected automatically

Usage data: pages visited, time on page, referring URL, browser type, operating system and screen resolution.
IP address: used for approximate geolocation (country/city level) and security monitoring. Not used to identify you personally. IP addresses are not stored in URLs or application logs.
Cookies and similar technologies: see our Cookie Policy for the full list.
Device identifiers: used for analytics and fraud prevention only.

Data from third parties

Payment processors: Stripe provides us with a transaction reference and partial card descriptor (last 4 digits) for our order records. We never receive full card numbers.
Wearable device integrations (future): if you connect a pet wearable (such as Whistle, Fi or PetPace), we will receive activity and health data from that device. This data is treated as pet health data under Section 1A. You may disconnect any wearable at any time.

1A. Pet health data — the Pet Passport

PawHub treats pet health data entered into the Pet Passport as sensitive personal data. This data is stored separately from your general account data and is subject to the following additional protections:

Encryption at rest: Pet Passport health records are encrypted at rest using industry-standard encryption. Access is controlled and audited.
Owner-controlled: only you can see your pets’ health records. PawHub staff do not access your Pet Passport data except where you have explicitly requested support or where we are required by law to do so.
Exportable: you may request a full export of your Pet Passport data at any time by contacting privacy@ourpetcircle.com. We will provide the export in a portable, machine-readable format within 30 days.
Deletable: you may delete your Pet Passport records or your account at any time. Pet health records will be permanently deleted or anonymised within 90 days of your deletion request, except where retention is required by law.
Never sold: we will never sell, license or share your pet health data with third parties for commercial purposes. We do not use Pet Passport data for targeted advertising.
No PII in URLs or logs: pet health data is never included in URL query strings or application logs. Access logs capture only pseudonymous identifiers.
Explicit consent for any secondary use: if we ever wish to use pet health data in aggregate or anonymised form for research or product improvement, we will seek your explicit consent first and you may refuse without affecting your use of the service.

2. How we use your personal data

Providing and personalising the Pet Passport, including vaccination and medication reminders.
Fulfilling and managing your pet shop orders, including delivery and returns.
Sending order confirmation, dispatch notifications and customer service responses.
Providing and personalising the PawHub content experience, including market-specific content (Singapore and other cities).
Forwarding services directory enquiries to the relevant listed provider on your behalf.
Sending newsletters and content updates where you have subscribed (you may unsubscribe at any time).
Sending health-related reminders (vaccine due dates, flea/tick/heartworm treatments, medication refills) that you have set up in the Pet Passport.
Analysing aggregate usage patterns to improve the Site — we use anonymised or pseudonymised data for this purpose wherever possible.
Detecting and preventing fraud, abuse and security incidents.
Complying with legal obligations, including responding to lawful requests from regulators or courts.

We do not sell your personal data to third parties. We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you.

3. Legal basis for processing

Under the PDPA, we rely on the following bases to collect and use your personal data:

Consent: for newsletter subscriptions, marketing communications, optional analytics cookies, and any secondary use of pet health data. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Contractual necessity: to fulfil your pet shop orders, provide account and Pet Passport services, and forward services directory enquiries.
Legitimate interests: to operate and improve the Site, prevent fraud, and send transactional communications related to your use of our services — where our interests are not overridden by your privacy rights.
Legal obligation: where we must retain or disclose data to comply with Singapore law or a court order.

For users in Australia, we rely on equivalent bases under the Australian Privacy Act 1988 and the Australian Privacy Principles.

For users in Spain (and the European Union / European Economic Area), we process personal data under the EU General Data Protection Regulation (GDPR) and Spain’s Ley Orgánica 3/2018 de Protección de Datos Personales y Garantía de los Derechos Digitales (LOPDGDD). EU/EEA users have enhanced rights including the right of access, rectification, erasure (“right to be forgotten”), restriction, data portability and the right to object. To exercise these rights, contact privacy@ourpetcircle.com.

4. Cookies and tracking technologies

We use cookies, local storage and similar technologies to make the Site work, remember your preferences, analyse traffic and serve relevant content. Please see our Cookie Policy for a full breakdown of which cookies we use and how to manage them.

5. Sharing with third parties

We share personal data with the following categories of third parties only where necessary:

Payment processing — Stripe Inc.

Stripe processes all card and PayNow payments. When you check out, your payment details are sent directly to Stripe’s secure environment. We receive only a transaction reference and a partial card descriptor. Stripe is PCI-DSS Level 1 certified. Stripe’s privacy policy is available at stripe.com/privacy.

Services directory providers

When you submit an enquiry to a listed vet, groomer, boarder or other provider via PawHub, we share your name, email address and enquiry details with that provider solely for the purpose of fulfilling your request. We do not share your Pet Passport health data with directory providers unless you explicitly choose to include it in your enquiry.

Video content — YouTube (Google LLC)

We embed YouTube videos on care guide and editorial pages. When you play a video, YouTube may set cookies and collect data about your viewing, subject to Google’s privacy policy. Where possible we use YouTube’s privacy-enhanced embed mode. Google’s privacy policy: policies.google.com/privacy.

Images — Unsplash / image CDNs

Some editorial and news images are served from third-party image CDNs including Unsplash. Loading these images may expose your IP address to those services’ servers as a technical necessity of delivering the content.

Analytics providers

We use analytics tools (including Google Analytics) to understand Site traffic. We configure these tools to anonymise IP addresses and we use data processing agreements to protect your data. We do not share Pet Passport data with analytics providers.

Logistics and delivery partners

For pet shop orders, we share your name and delivery address with our logistics provider(s) solely for the purpose of fulfilling your order.

Email delivery — Resend

We use Resend to deliver transactional emails (order confirmations, reminders) and newsletters. Resend processes your email address on our behalf under a data processing agreement. Resend’s privacy policy: resend.com/legal/privacy-policy.

Legal and regulatory authorities

We may disclose personal data where required to do so by law, court order or a lawful request from a Singapore or Australian government authority.

6. Data retention

Order and transaction records: 7 years from the transaction date (for accounting and legal compliance).
Account and Pet Passport data: retained while your account is active. If you delete your account, personal data and pet health records will be deleted or anonymised within 90 days, except where retention is required by law.
Services directory enquiries: retained for 12 months from submission, then deleted.
Newsletter subscribers: retained until you unsubscribe. We remove inactive subscribers after 24 months of no engagement.
Analytics data: aggregate or anonymised data may be retained indefinitely. Pseudonymous identifiers are deleted or anonymised after 26 months.

7. Your rights

Under the Singapore PDPA

You have the right to:

Access personal data we hold about you, including Pet Passport data.
Correction of inaccurate or incomplete personal data.
Withdrawal of consent for processing based on consent, at any time.
Data portability (where applicable under PDPA amendments in force).
Cessation of use of your personal data where our use is no longer necessary.
Deletion of your account and Pet Passport records on request.

Under the Australian Privacy Act 1988

Australian residents additionally have the right to:

Access a copy of personal information we hold about you.
Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us at privacy@ourpetcircle.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

8. Cross-border data transfers

PawHub is a Singapore-based platform serving users in Singapore, Australia and across Asia-Pacific. Personal data may be transferred to and processed in countries other than your country of residence — for example, to Stripe Inc. (United States), Google LLC (United States) or our cloud infrastructure providers.

Where we transfer personal data outside Singapore, we take steps to ensure an equivalent level of protection applies, consistent with the PDPA’s requirements on overseas transfers (including contractual protections where required). Where we transfer data from Australia, we comply with Australian Privacy Principle 8.

9. Children’s data

PawHub is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at privacy@ourpetcircle.com and we will delete it promptly.

Users aged 13–17 should obtain parental or guardian consent before registering an account, creating a Pet Passport or making a purchase.

10. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include HTTPS encryption, encrypted storage of pet health records and sensitive tokens, access controls, data minimisation practices, and regular security reviews. No transmission over the internet is perfectly secure; we cannot guarantee absolute security.

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify those individuals and the PDPC as required by the PDPA mandatory breach notification obligation.

11. Contact the data controller

The data controller for your personal data is:

PawHub Pte Ltd, Singapore
Privacy enquiries: privacy@ourpetcircle.com
General: legal@ourpetcircle.com

You may also lodge a complaint with the PDPC at pdpc.gov.sg or with the OAIC (for Australian users) at oaic.gov.au.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post an updated “last updated” date and, where required by law, notify affected users by email. We encourage you to review this policy periodically.