Privacy Notice
Effective draft: August 16, 2026. This operational template must be reviewed against NearPaw's real providers, data flows, retention schedule, and Canadian legal obligations before public launch.
1. What NearPaw collects
Account and contact data; service address and location; Pet Safety Passport information; caregiver verification status; bookings, messages, media, CareProof events, tracker data, payments status, support records, incidents, consent records, device and security information.
2. Why it is used
To create accounts, match qualified caregivers, process bookings, display live service information, secure home access, communicate, prevent fraud, respond to incidents, manage claims, meet legal obligations, and improve operations.
3. Sensitive information
Identity and screening information, precise location, home-access instructions, incident evidence, and some pet medical or behavioural information receive restricted access. Raw identity documents should remain with the configured verification provider where practicable. Home-access text is encrypted at rest by the application.
4. Consent and choices
NearPaw records acceptance of terms and privacy notices. Separate meaningful consent should be used for screening, marketing, optional tracker sharing, and any future call recording. Consent may be withdrawn subject to legal, contractual, safety, and record-retention requirements.
5. Providers
NearPaw may use hosting, payment, communications, mapping, verification, email, security, analytics, insurance, and professional-service providers. The final notice must identify relevant categories, processing locations, and safeguards.
6. Location and CareProof
Precise caregiver and tracker locations are collected during relevant care windows and are restricted to authorized users and operations. The configured default location retention period is 90 days, but a final retention schedule must account for incidents, claims, legal holds, and minimization.
7. Access, correction, and complaints
Users may request access or correction through privacy@nearpaw.ca. NearPaw should verify identity before releasing personal information and document any lawful refusal.
8. Security and breaches
NearPaw uses access controls, password hashing, CSRF protection, security headers, encrypted sensitive instructions, private media storage, audit logging, and provider webhook verification. No system is perfectly secure. A documented breach-response and notification process is required.
9. Children
The platform is not directed to children. Account holders must have legal capacity to agree to the applicable terms.
10. Contact
Privacy contact: privacy@nearpaw.ca.