🐾 Welcome To Taggzi 🐾 Use Discount Code WELCOME10 For 10% Off At Checkout Buy Now β†’
Taggzi
🎁 Gift 🐾 Sponsor
Β§ Legal

Privacy policy.

01 Who we are

Taggzi ("we", "our", "us") operates taggzi.com, providing smart NFC and QR identification tags and associated digital services. We are the data controller for the personal data described in this policy.

If you created an account before October 2026 under the PawTag name, your personal data was transferred to Taggzi in September 2026. The same data controller (named above) continues to control it under the Taggzi name, for the same purposes described in this policy.

Data controller: Taggzi is currently operated as a UK sole trader by Steven Chowns trading as Taggzi. A UK limited company + registered trademark are planned; when the transition happens this notice will be updated with the new company number and registered address.

Correspondence address: Taggzi, Unit 172585, PO Box 7169, Poole, BH15 9EL

Contact for privacy / data-subject requests: privacy@taggzi.com

ICO registration: our registration with the Information Commissioner's Office has been applied for and is being processed. This notice will show our registration number once it is issued.

Effective date: 24/09/2026

General enquiries: Contact us Β· support@taggzi.com

Scope note: Taggzi is expanding across five verticals β€” Taggzi-Pet (live), Taggzi-Travel, Taggzi-Active, Taggzi-Care, and Taggzi-Luxe (each launching in turn). This notice currently applies to Taggzi-Pet and any general account / commerce activity. As each additional vertical launches we will update these terms to describe the specific data types it handles.

02 Data we collect

Account data: Your name, email address, and password when you register.

Pet profile data: Pet name, species, breed, colour, date of birth, microchip number, medical notes, and veterinary contact details you choose to enter.

Contact preferences: Which contact details (phone, email, WhatsApp) you elect to display publicly on your pet's profile.

Scan data: When your tag is scanned, we log the timestamp, scan method (NFC or QR), and a one-way SHA-256 hash of the scanner's IP address. We never store the scanner's raw IP address. A finder's location is only shared if they agree on the pet page and then allow it in their browser (on the private call screen the "share my location" box is ticked by default and can be unticked before calling; when reporting a found pet they choose "Share my location"); their device's GPS coordinates are then stored with the scan and used to show you where your tag was last detected. Finders can decline and still contact you.

Private calls (Pro): When a finder calls an owner through Taggzi, we keep a short record of the call β€” which pet it was about, the owner, when it started, whether it was answered, how long it lasted, whether the finder chose to share their location β€” and if they did, that location rounded to about 100 metres together with its reported accuracy β€” and a one-way SHA-256 hash of the finder's IP address. If a finder doesn't share their location, none is recorded. We never record the audio or video of a call. Calls are encrypted end to end between the two devices; our relay providers (see section 05) can't see or hear them. We keep this record to prevent misuse (for example harassment), to answer questions from the owner or finder about their own calls, and to respond to lawful requests from the police.

Payment data: Stripe processes all payments. We store only your Stripe customer ID and subscription status β€” never full card details.

Community alert subscriptions: Email address and geographic area if you subscribe to lost pet alerts.

Push notification tokens: If you install the Taggzi companion app, your device generates an Apple Push Notification service (APNs) token or Firebase Cloud Messaging (FCM) token which we store against your account solely to deliver scan alerts, Lost Mode acknowledgements, and account-critical messages. The token is discarded when you sign out or uninstall.

Special category data (UK GDPR Article 9): Taggzi-Pet may contain optional veterinary or animal-medical notes β€” this is animal data, not human special-category data, so Article 9 does not apply today. The Taggzi-Care vertical (medical-alert tags for people) has not yet launched. If and when it does, health data will be handled under Article 9(2)(a) (explicit consent) with a dedicated consent flow, an updated version of this notice, and a separate DPIA. We will not begin collecting Article 9 human data before that update is published.

03 How we use your data

  • To provide the pet identification and recovery service
  • To display your pet's profile to finders who scan the tag
  • To send lost pet community alert emails (only with your consent)
  • To send transactional emails (welcome, verification, order confirmation, subscription renewal reminder, competition-related notices) via our email delivery provider Resend
  • To manage your subscription and one-off tag purchases via Stripe
  • To dispatch physical tags to your delivery address (via our shipping partners when applicable)
  • To route lost pet alerts to your registered vet or nearby vets (Pro feature; opt-out available in vet settings)
  • To respond to enquiries you send to our IMAP-connected support inbox
  • To send you marketing updates about Taggzi only if you've opted in (competition entry, account signup, or later via your preferences)
  • To show you scan analytics in your dashboard
  • To comply with legal obligations (HMRC records, ICO enquiries)

04 Legal basis (UK GDPR)

  • Contract: Processing your account and pet data to deliver the service you signed up for
  • Consent: Community alert emails and marketing emails (you can unsubscribe at any time)
  • Legitimate interests: Security, fraud prevention, service improvement
  • Legal obligation: Retaining financial records

05 Who we share data with

We use a small number of trusted third-party service providers ("sub-processors") to run Taggzi. Each is bound by a data processing agreement and processes data only on our instructions, except where they act as independent controllers (marked below).

  • Stripe (USA / IRL) β€” payment processing. Independent controller for payment data. Adequacy: SCCs + UK IDTA.
  • StackCP / 20i (UK) β€” hosting provider. Servers located in the UK.
  • Resend (USA) β€” transactional and marketing email delivery. Adequacy: SCCs + UK IDTA.
  • Meta Platforms Ireland Ltd (IRL) β€” Facebook, Instagram and Threads publishing when we cross-post announcements from our admin. We store OAuth access tokens for these accounts; no user data is sent to Meta except what you can see on our public social posts.
  • Google (Gemini) (USA) β€” AI-assisted caption drafting for our social posts. Only the caption prompt (no personal data) is sent. Adequacy: SCCs + UK IDTA. Optional β€” only used if enabled by admin.
  • Anthropic (Claude) (USA) β€” AI-assisted caption drafting for our social posts. Same conditions as Google above. Adequacy: SCCs + UK IDTA. Optional β€” only used if enabled by admin.
  • Postcodes.io (UK) β€” postcode β†’ lat/lng geocoding for Community Alerts and vet routing.
  • what3words Ltd (UK) β€” checks that a what3words address you type is valid, and (where enabled) converts a location a finder chooses to share into a 3-word address. Only the words or coordinates are sent β€” never names or contact details. Plus Codes are calculated on our own server; no third party is involved.
  • Cloudflare, Inc. (USA / global) β€” relays private calls when two devices can't connect directly (TURN). Call audio and video stay end-to-end encrypted, so Cloudflare can't see or hear them; it processes the devices' IP addresses to route the connection. Adequacy: UK–US data bridge / SCCs + UK IDTA.
  • Metered Video Inc. (metered.ca) (Canada / global) β€” backup relay for private calls on the same terms as Cloudflare. Adequacy: UK adequacy regulations (Canada).
  • ShipStation / carrier partners (USA + UK carriers) β€” physical tag fulfilment when we ship a tag to your address. Optional β€” only if you order a physical tag.
  • Apple Inc. (USA) β€” Apple Push Notification service (APNs) delivery for iOS companion-app notifications. Only the device token and the notification payload transit APNs. Adequacy: SCCs + UK IDTA. Applies only if you install the iOS app.
  • Google LLC (USA) β€” Firebase Cloud Messaging (FCM) delivery for Android companion-app notifications. Same conditions as Apple above. Adequacy: SCCs + UK IDTA. Applies only if you install the Android app.
  • Apple App Store & Google Play β€” where you obtain the companion app. These are independent controllers for the download transaction. Taggzi never receives your Apple ID or Google account.

Your chosen contacts: Contact details you mark as visible are publicly displayed on your pet's profile page to assist finders.

We never sell, rent, or trade your personal data. A full list of current sub-processors is available on request from privacy@taggzi.com.

06 Data retention

  • Account and pet data: retained while your account is active, then deleted within 90 days of account deletion.
  • Scan logs: retained for 24 months, then automatically purged.
  • Private call records (never recordings β€” see section 02): retained for 12 months, then automatically deleted.
  • Payment records: retained for 7 years to satisfy HMRC requirements.
  • Community Alerts subscriber list: retained until you unsubscribe, then permanently deleted within 30 days.
  • Competition entries: retained for 12 months after the competition closes to allow prize disputes to be resolved, then deleted.
  • Marketing preferences: retained indefinitely as a suppression list (email address + opt-out timestamp only) so we never contact you again if you unsubscribe.
  • Support inbox emails: retained for 24 months for continuity of support, then archived off-platform for 5 more years to meet contract-record obligations.
  • Social account OAuth tokens (for our own Facebook/Instagram/Threads accounts): retained while the integration is enabled; deleted immediately if you revoke access at Meta.

07 Your rights

Under UK GDPR you have the right to:

  • Access β€” request a copy of your personal data
  • Rectification β€” correct inaccurate data
  • Erasure β€” request deletion of your data
  • Portability β€” receive your data in a machine-readable format
  • Objection β€” object to processing based on legitimate interests
  • Restriction β€” request we limit processing of your data

To exercise any right, email privacy@taggzi.com from the email address on your account. If you can't access that email, include enough detail for us to verify your identity another way (e.g. your Taggzi short-ID + purchase date) β€” we will not release personal data without verification. We aim to respond within 30 days (UK GDPR Article 12(3)); complex or bulk requests may take up to 90 days with a status update at day 30.

You also have the right to lodge a complaint with the ICO (Information Commissioner's Office).

08 Cookies

We use strictly-necessary cookies to run the site: WordPress sign-in cookies for logged-in users, Stripe's fraud-prevention cookies at checkout, and one first-party cookie (pt_cookie_consent) that remembers your cookie choice.

Advertising measurement (only if you choose "Accept"). We advertise on Google. If you accept, we load Google's advertising tag (Google Ads, provided by Google Ireland Ltd) so we can tell which of our ads led to a sign-up or an order. Google then sets its own cookies (for example _gcl_au and _gcl_aw, up to 90 days) and receives your device and browser details and the pages you visited on our site. We don't use this for retargeting audiences, and we never load it on pet profile or other finder-facing pages. If you choose "Reject", or make no choice, Google's tag is not loaded at all.

You can change your choice at any time using Cookie settings (also in the site footer). Our legal basis for advertising cookies is your consent (PECR reg. 6 and UK GDPR Art. 6(1)(a)); strictly-necessary cookies are exempt under PECR reg. 6(4)(b).

09 Children's privacy & age of use

Two separate age thresholds apply, in line with UK law:

  • UK GDPR digital-consent floor (age 13): Taggzi is not directed at children under 13 and we do not knowingly collect personal data from anyone under 13. If a parent or guardian believes a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
  • Contract capacity (age 18): Because a Taggzi account is a paid contract (including any Pro subscription, physical tag order, or fulfilment address), you must be 18 or older to create an account in your own name. A parent or guardian may hold the account and add profiles for a minor's pet or belongings. See the Terms of Service for the account-holder eligibility clause.

10 Changes to this policy

We will notify registered users by email of any material changes. Continued use of the service after changes constitutes acceptance.