How we handle your data.

Last updated 11 October 2026

Who we are

CertPet (cert.pet) makes personalized pet certificates, AI pet portraits and print keepsakes. We decide why and how the personal data described here is used. For anything about your data, write to [email protected].

What we collect

Your pet's details and photos: the photo you upload, plus the name, species, birthday, story and wording you choose for a certificate.
Your contact details: your email address, and your name and a hashed password if you create an account.
Orders: what you bought, its status and the amount paid. Card details are entered with Stripe; we never see or store your card number.
Delivery details: if you order a printed certificate, the name and delivery address you give us.
Messages: anything you send us by email or through the live chat.
Technical data: your IP address, browser and device type and the pages you visit, kept in server logs for security and troubleshooting. With your permission, analytics and advertising cookies collect more (see Cookies).

Why we use it

To provide what you ordered (contract): creating your certificate or portrait, taking payment, delivering files and print orders, and sending order and verification emails.
To run and protect the site (legitimate interests): preventing fraud and abuse, fixing faults, answering your messages and keeping records of purchases and credits.
To measure and advertise (consent): analytics and advertising cookies load only after you accept them, and you can change your choice at any time.
To meet legal duties: for example keeping accounting records.
Birthday reminders are sent only if you switch them on for a pet page, and every reminder has an unsubscribe link.

Who processes it for us

We do not sell your personal data. We share only what each provider needs to do its job:

Stripe processes payments.
OpenAI receives your pet photo and the details needed for the design, but only when you ask for an AI portrait or AI certificate.
Printful receives your certificate file and delivery details if you order a print.
Our email delivery service sends verification, order and reminder emails.
Our hosting provider and Cloudflare host the site and deliver it securely, and Cloudflare Turnstile helps block automated abuse on forms.
Google Tag Manager and the tools loaded through it handle analytics and advertising measurement, only with your consent.
Tawk.to runs the live chat. It sets its own cookies and stores the messages you send.

We may also disclose data where the law requires it.

International transfers

Some of these providers are based in or operate from the United States and other countries. Where your data leaves the UK or the European Economic Area we rely on recognised safeguards such as standard contractual clauses or an adequacy decision.

How long we keep it

Photos from unpaid keepsakes expire after 7 days.
Purchased files and their photos stay available for 90 days.
Pet pages and their photos stay until you delete the page.
Account details stay until you ask us to delete them.
Purchase and credit records are kept separately for as long as accounting law requires.
Server logs are kept for a short period for security. Chat history is kept by Tawk.to as long as it is useful for support.

Cookies

Essential cookies keep your session, sign-in and checkout working. Analytics and advertising cookies are off until you choose. See our cookie details or change your cookie choice.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, limit or object to how we use it, move it to another service, or withdraw consent you gave earlier. Email [email protected] from the address on your account and we will respond within a month. If you are unhappy with how we handled your data you can complain to your data protection authority, in the UK the Information Commissioner's Office (ico.org.uk).

Security and children

Photos and generated files are stored privately, connections are encrypted and passwords are stored hashed. No system is perfectly secure, so please use a strong, unique password. CertPet is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

If we change this policy in a way that matters, we will update the date above and, where appropriate, tell you by email or on the site.