Legal

Privacy Policy

Last updated: not yet published.

Draft — pending legal review. This page describes how Anemalo is designed to work today. It is not final legal wording, has not been reviewed by a lawyer, and sections marked "pending legal drafting" are placeholders, not commitments. Do not treat this as binding until it is replaced with a reviewed version.

1. Data controller

Pending legal drafting

Anemalo is operated by Tovernet. The full registered legal form, address, and a contact for data protection questions will be published here once finalised.

2. What we collect and why

This reflects what the platform actually stores today, not a general statement:

CategoryExamplesWhy we process it
Account detailsName, email, phone, city/country, preferred language and currencyTo create and run your account, and to show you a relevant experience.
Exact addressesPickup/delivery street address for a transport requestOnly for coordinating the specific transport — never shown publicly, never shared with other customers. Public maps only ever show an approximate area.
Animal and transport detailsSpecies/breed info, health notes you provide, passport and vaccination documents you uploadTo review and carry out the transport, including any legally required document checks.
Breeder/foundation verificationAssociation membership, registration numbers, evidence you submit for reviewTo verify an organisation before it can publish listings.
Activity and status historyA record of status changes on your requests, and administrative actions taken on your accountAccountability and traceability for important changes — e.g. who reviewed or changed a transport request's status.
Product analyticsPages visited, features used, and anonymised (input-masked) session recordings, via PostHog; linked to your account (user ID, name, email) once you're signed inTo understand how the platform is actually used and find real usability problems — see the Cookie Policy for detail.

3. Who can see your data

Access is restricted by both application logic and database-level security rules, not just by hiding buttons in the interface. As a rule: your exact address and uploaded documents are visible only to you and to the operations staff handling your specific request (and, once a driver is assigned to carry out that specific job, to that driver) — never to other customers, and never published publicly. Basic account details (like your display name) may be visible to another user only where there is a real reason for it — for example, a breeder can see the buyer's name on a reservation they are both party to.

4. Cookies

See the Cookie Policy — in short, we use the cookie our sign-in system needs to keep you logged in, plus PostHog for product analytics and anonymised (input-masked) session recordings, which also identifies your account when you're signed in. We don't run advertising trackers or sell this data to third parties.

5. Legal basis for processing

Pending legal drafting

Which legal basis under applicable data protection law (e.g. performance of a contract, legitimate interest, consent) applies to each category above needs confirmation by a lawyer before this is published as final.

6. How long we keep your data

Pending legal drafting

Retention periods per data category are not yet defined.

7. Your rights

Depending on where you live, you generally have the right to access, correct, delete, restrict, or export a copy of your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You also have the right to complain to your local data protection authority.

Pending legal drafting

Self-service tools for exporting or deleting your account are not built yet. Until they are, contact us using the details in section 1 to exercise these rights.