PetDesk Privacy Policy

Effective Date: June 22, 2026

1. Introduction

This Privacy Policy explains how PetDesk Brand Holdings, LLC collects, uses, protects, and shares personal data when you use our Websites or Products. It applies to all visitors, users, customers, and veterinary clinics interacting with PetDesk and our affiliates. By using our Websites or Products, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree with this policy, you may choose not to use our Websites or Products.

2. Who we are

PetDesk, Inc. (“PetDesk”, “we”, “us”, or “our”) is a company registered in the United States. When we say “PetDesk,” we include our subsidiaries, affiliates, and brands, including Vetstoria, Groomer.io, and PetDesk.
“You” and “your” refer to any individual or organization that interacts with our Websites or uses our Products. This includes veterinary clinics that subscribe to our Products, customers of those clinics (e.g., pet parents), and individuals browsing or interacting with our Websites.
If you are a customer of a veterinary clinic, your clinic has authorized us to process certain data to deliver services to you. Please consult your clinic’s privacy policy for more details about the data it collects and how it uses it.

3. Defined Terms

“Websites” means www.PetDesk.com, www.petdesk.com, www.vetstoria.com, get.groomer.io, and any associated sites we operate.

• “Products” means our software, services, tools, and platforms, including (without limitation) online booking software, phone services, website management services, pre-appointment questionnaires, and any other applicable products offered by the company and used or acquired by the customer.
• “Clinic Data” means personal data or information that might be collected from or about a veterinary clinic (or its corporate owner) in connection with the provision of the Products (e.g., clinic contact information).
• “Customer Data” means personal data that might be collected and processed about individuals (e.g., pet parents) on behalf of a veterinary clinic using the Products.
• “Website Visitor Data” means technical and usage data that might be collected from visitors and users of the Websites and Products (e.g., IP address, device identifiers, browser type).

Capitalized terms not defined here have the meanings in our Terms of Use.

4. Our role (controller vs. processor)

We act as a data controller for personal data we collect directly (e.g., from clinics to provide and administer the Products) including Clinic Data. We also act as a data controller as to Website Visitor Data.
We typically act as a data processor for Customer Data that clinics instruct us to process to deliver the Products to them and their customers. In those cases, the clinic determines the lawful basis and purposes for processing, and you should review your clinic’s privacy policy for details.

5. Information we collect

i. Visitors and users of our Websites and Products
Website Visitor Data (e.g., IP address, device and browser information, operating system, unique IDs, pages viewed, referral URLs, plug-ins installed, time and date of access, and on-site search queries).

ii. Mobile app users

• App activity and performance data.
• Uploaded photos and videos.
• Personal information you provide within the app.
• Device information.

iii. Veterinary clinic customers (pet parents and other end users)
When you use our Products to interact with your veterinary clinic, we process Customer Data on behalf of the clinic. This may include:

• Identifiers and contact information (e.g., first and last name, date of birth, email address(es), phone number(s), postal address(es), country, usernames).
• Credentials (e.g., passwords).
• Technical and device data (e.g., IP address, mobile device IDs).
• Communication and support data (e.g., call history and call recordings).
• Some support calls may be recorded and transcribed for training, support, or quality assurance. We do not use voice data for biometric analysis or profiling.
• Appointment data (e.g., upcoming, past, and missed appointments).
• Marketing preferences and consent status.
• Pet information (e.g., name, species, breed, sex, age, vaccines, rabies tag, insurance, microchip number, medical history).
• Payment information (e.g., credit card number, expiration date, CVV) is processed by our third-party payment processors (we do not store full card details).

iv. Veterinary clinics and corporate groups

• Contact name, address, email address, and telephone number.
• Other information you provide enables us to contract with you and deliver the Products.

v. Information from other sources

• Verification information (e.g., licensure checks, identity verification).
• Data from service providers, business partners, and public sources.

vi. Information you voluntarily provide

• Survey responses, questionnaires, feedback, and support interactions.
• Recruitment information (e.g., CVs, cover letters).

We do not intentionally collect special categories of personal data (such as racial or ethnic origin, health information, genetic or biometric data, political opinions, religious beliefs, or trade union membership) unless you provide it voluntarily and with your explicit consent. If you do, we process it only as permitted by applicable law.

6. How we use personal data and our legal bases

We collect and process your personal data to provide, operate, support, and improve our websites and products. Our legal bases for using your data, as defined by applicable laws (including GDPR), include legitimate interests, contractual necessity, consent, and compliance with legal obligations.

Purposes for Using Your Data:

• Providing and Improving Services: To operate, support, and enhance the functionality of our websites and products, perform internal analytics, ensure quality, and develop new features.
• Security and Authentication: To authenticate users and protect our systems from fraud and abuse.
• Customer Support: To provide technical assistance and customer service.
• Facilitating Services: To manage clinic appointments, send reminders, and facilitate other related communications.
• Service Communications: To send important messages regarding your account, subscriptions, or renewals.
• Legal Compliance: To meet our legal, regulatory, and contractual obligations.
• Marketing and Promotions: To run marketing or promotional campaigns, offer discounts, coupon, and other offers, and to serve contextual advertisements to you where legally permitted and with your consent when required.

Our Legal Bases for Processing: Legitimate Interests: We rely on our legitimate interests to improve and secure our services, analyze performance, and ensure our offerings run smoothly. For example, we use data for internal analytics and product development. In each case, the personal data collected is limited, and our interests do not outweigh your rights and freedoms.
Contractual Necessity: We process certain information to fulfill our contractual obligations to you or your clinic. This is necessary to provide the products and services you have contracted for. Consent: Where required by law, we will obtain your consent for specific data processing activities, such as certain types of cookies, targeted advertising, or direct marketing in jurisdictions where consent is mandatory. Compliance with Legal Obligations: We may process your data to comply with legal requirements, such as responding to lawful requests from law enforcement or meeting regulatory obligations.

When we process Customer Data on behalf of a veterinary clinic or another entity (meaning we act as a data processor), the clinic or entity that provided your data is responsible for determining the lawful basis for processing. We act strictly under its documented instructions. For details, refer to the privacy policy of the veterinary clinic or the entity to whom you provided your data.

7. Cookies, beacons, and similar technologies

Our Website may use web cookies, pixels, web beacons, and similar technologies (collectively, “Online Tracking Technologies”) to collect certain personal data about you to enhance your experience, perform analytics, personalize content, and deliver advertisements. You can manage your preferences regarding these Online Tracking Technologies through your browser settings and, where required by law, via our cookie consent banner. This banner allows you to accept or reject non-essential cookies such as analytics, advertising, and social media cookies. For details, see our Cookie Policy.

8. Advertising and retargeting

We use third-party platforms (e.g., Google Ads, Facebook Ads) to deliver advertisements. We will seek your consent before using Online Tracking Technologies for targeted advertising purposes where required. You may still be served advertisements where you have not consented, but they will be nonpersonalized, meaning they will not be targeted to you specifically. You can manage your preferences via platform-specific tools or the Network Advertising Initiative opt-out page.

9. International data transfers

We store data regionally where practicable (e.g., EEA/UK data in the EEA, U.S. data in the U.S., and Asia Pacific data in that region). Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses, the UK Addendum, or rely on adequacy decisions or other lawful transfer mechanisms.

10. Data retention

We retain personal data only for as long as needed for the purposes described in this policy (or as required by law). Where your clinic’s license to our Products ends, Customer Data is anonymized within approximately three months, except where we are legally required or permitted to retain certain data. We may archive support tickets containing personal data, subject to access restrictions and data minimization. Recruitment-related data is retained for no longer than necessary to complete the hiring process or as required by applicable employment or anti-discrimination laws.

11. Security and data breach management

We safeguard all collected personal data, including Customer, Clinic, and other data, against loss, misuse, unauthorized access, disclosure, alteration, or destruction through stringent security practices. Further details about security practices are available upon request.

Should a data breach occur, we will minimize its impact to the best of our ability. We will inform you of any known effects on you and make every reasonable effort to comply with all applicable legal and regulatory reporting requirements.

12. Use of AI (artificial intelligence)

We use AI responsibly and transparently in our Products and internal operations, collecting personal data only when necessary and with appropriate safeguards. We do not use personal data to make solely automated decisions (including profiling) that produce legal or similarly significant effects unless required by law or with your explicit consent. We also do not use Customer Data to train public AI models unless expressly permitted or instructed by your clinic and in compliance with applicable law.

13. Categories of Parties to Whom We Disclose your personal data and purposes for disclosure

We may disclose personal data to the following categories of third parties and for the purposes set forth below:

• Service Providers. We disclose your personal data to service providers that perform services on our behalf, including customer support, web hosting, software developers, information technology services, database management, direct mail, and email distribution.
• Affiliates / Subsidiaries. We may disclose your personal data to companies under common ownership or control with us for purposes consistent with this Privacy Policy.
• Joint Marketing Partners. We may disclose your personal data to third parties that we entered into joint marketing collaborations or joint ventures with us, and these third parties may use and disclose such data under their own privacy notices.
• Third-Party Analytics and Advertising Partners. We engage third parties to provide analytics services, serve advertisements to you. These entities may use Online Tracking Technologies to collect Website Visitor Data about your use of the Website in order to deliver personalized advertisements and to provide us with data analytics services. Please note that these activities may constitute “targeted advertising,” “sharing,” or “selling” under certain laws. For information on opting out of having your Website Visitor Data used for these purposes, please see the section below titled, “Opt-Out of Sale, Share, and Targeted Advertising.” For the avoidance of doubt, we do not “sell” or “share” or conduct “targeted advertising” with Clinic Data or Customer Data with any third party.
• Corporate Transaction. Your personal data may be disclosed or transferred in anticipation of or in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which data held by us is among the assets transferred.
• Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process (including an enforceable request from authorities), to respond to claims (including inquiries by you in connection with your purchases from us), enforce or apply our other policies, or to protect the rights, property, or personal safety of us, our users, employees, or others.
• Your Consent or at Your Direction. We disclose personal data to third parties when we have your consent or direction to do so. We may also disclose your data to third parties, such as when you expressly direct us to do so or when you use our products or services to intentionally interact with third parties. In these cases, we disclose your data to carry out your request.

14. Your privacy rights (global)

Depending on where you live, you may have rights to access, correct, delete, or anonymize, object to, or restrict processing of your personal data, to data portability, and to withdraw consent (where applicable). To request a copy or transfer of your data (data portability) or exercise related rights, contact https://petdesk.com/data-privacy-request/. If you are a veterinary clinic customer, contact your clinic first; we will cooperate with them to fulfill your data privacy request.

Before responding, we may need to verify your identity to ensure your data is not disclosed to unauthorized parties. We aim to respond within one month (or within the time allowed by applicable law). We may charge a reasonable fee or refuse requests that are excessive, repetitive, or manifestly unfounded. Residents of other countries with applicable data privacy laws may contact our Data Protection Officer (DPO) to exercise rights under those laws.

15. U.S. State privacy supplement

Depending on your state of residence, you may have specific rights regarding your personal data.

Your Privacy Rights May Include:

• Right to Know: Know if your data is being processed.
• Access: Get a copy of your personal data.
• Correct: Fix inaccurate data.
• Delete: Request data deletion.
• Data Portability: Receive data in a usable format and transfer it.
• Opt-Out of Sale, Share, and Targeted Advertising: Our use of your personal data from Website Visitors may be considered a “sale”/“share” or “targeted advertising under certain U.S. State privacy laws. You may exercise your right to opt-out by clicking the “Your Privacy Choices” linked https://petdesk.com/data-privacy-request/ or you may broadcast the Global Privacy Control signal through your web browser or device. Additionally, you may also email us at the email listed in the Contact Us section below.
• Opt-Out of Profiling: PetDesk has not engaged in “profiling” in furtherance of decisions having legal or similarly significant effects.
• Limit Sensitive Data Processing: We do not currently use sensitive data beyond certain enumerated statutory purposes. Therefore, we do not offer this right at this time.
• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise these rights, contact us at https://petdesk.com/data-privacy-request/ or send a written request to 221 NE Ivanhoe Blvd Ste 310, Orlando, FL, 32804-6449, United States.

Depending on your state of residence, you may have the right to appeal requests that have been denied by contacting us at support@petdesk.com.

Depending on your state of residence, you permit an authorized agent to submit a request to exercise the rights described above. If you are an authorized agent, you must be able to demonstrate that you have the requisite authorization to act on behalf of the requestor. We reserve the right to deny your request if we cannot verify your identity.

California’s “Shine the Light” law (Civil Code § 1798.83) permits users of the Services who are California residents to request certain information regarding our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please contact us at the information provided in the Contact Us section below.

Do Not Track: We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate.

Important Considerations:

• Clinic Customers: Please contact your clinic first, and we will then cooperate with them to fulfill your privacy request.
• Identity Verification: We may verify your identity (potentially via a third party) for data protection.
• Response Time: We aim to respond to verified requests within one month (or 45 days for residents of certain US states, with a possible 45-day extension and explanation).
• Request Limitations: We may limit responses to two access requests per individual every 12 months.
• Fees and Refusals: We may charge a reasonable fee or refuse excessive, repetitive, or meritless requests.
• Legal Limitations: Your access or deletion rights may be limited by applicable law.
• Inability to Fulfill: If we are unable to fulfill your request (e.g., verification issues, legal exceptions), we will inform you of the reasons.
• Non-Discrimination: Exercising your privacy rights will not negatively impact your experience with our Websites or Products.

16. EU/UK supplement (GDPR / UK GDPR)

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object (including to direct marketing)
• Right to withdraw consent (where processing is based on consent)

If you are in the EU/UK, you may contact our Data Protection Officer or our EU/UK representative listed below.

17. Australia supplement

We comply with the Australian Privacy Act 1988. You may request access to, or deletion of, your personal data by contacting https://petdesk.com/data-privacy-request/. We will verify your identity (potentially via a third party) for data protection and respond within a reasonable period as required by law. Your access or deletion rights may be limited by applicable law. If we are unable to fulfill your request (e.g., verification issues, legal exceptions), we will inform you of the reasons.

Exercising your privacy rights will not negatively impact your experience with our Websites or Products.

18. Canada supplement

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. If you are a resident of Canada, you have the right to access, correct, and request deletion of your personal data, as well as to withdraw consent where applicable. We will verify your identity (potentially via a third party) for data protection and respond within a reasonable period as required by law. Your access or deletion rights may be limited by applicable law. If we are unable to fulfill your request (e.g., verification issues, legal exceptions), we will inform you of the reasons.

Exercising your privacy rights will not negatively impact your experience with our Websites or Products.

19. Sri Lanka supplement

We comply with the Sri Lanka Personal Data Protection Act No. 9 of 2022, including applicable rights to access, correction, and deletion.

Exercising your privacy rights will not negatively impact your experience with our Websites or Products.

20. Children and vulnerable groups

Our services are not directed to children under 18. We do not knowingly collect personal data from children under the age of 13 (or the minimum age defined by applicable local laws) or from someone in a vulnerable group without verified parental or guardian consent, in accordance with laws such as the U.S. Children’s Online Privacy Protection Act (COPPA).

If you are under 18 or part of a vulnerable group, do not provide us with personal data unless you have received appropriate consent from a parent, guardian, or legal representative.

21. Changes in this policy

We may update this Privacy Policy from time to time. We will post the updated version on our Websites and, where required, notify you of material changes. By using our Website or Products, you accept that you are bound by the Privacy Policy in force at that time and displayed on this page.

22. Change of details

If you are a veterinary clinic and change your contact details, email your new details to support@petdesk.com / support@vetstoria.com / support@groomer.io.

23. Contact Us

If you have questions or concerns about how we process or retain your personal data, contact our Data Protection Officer at https://petdesk.com/data-privacy-request/

PetDesk Brand Holdings, LLC

221 NE Ivanhoe Blvd, Suite 320

Orlando, FL 32804, United States

For product-related support:

• PetDesk: support@petdesk.com
• Vetstoria: support@vetstoria.com
• Groomer.io: support@groomer.io

For recruitment inquiries, contact our Talent Acquisition team at people@PetDesk.com.
You may stop using our Websites or Products at any time, subject to any contractual terms between you and PetDesk or your clinic.