Privacy Policy

1. Who we are

PetMeds is operated by Canvas.je, based in Jersey, Channel Islands. Registered in Jersey, company no. 36527.

Canvas.je is also registered with the Jersey Office of the Information Commissioner (JOIC) under registration number 104189. All personal information we hold is processed in compliance with the Data Protection (Jersey) Law 2018.

For any data protection queries, you can contact us at [email protected].

2. What information we collect

Your account

• Your name and email address, provided when you register
• Your password, stored as a secure one-way cryptographic hash — we never store or have access to your actual password
• If you sign in using Google or Apple, we receive your name and email address from those providers; no password is stored in that case

Your pets and medications

• Pet names, species, breed, and other details you choose to enter
• Medication names, strengths, dosing frequency, and stock levels
• Reorder history

Your vet

• Your vet's practice name and email address, used solely to send automated reorder notifications on your behalf

Payment information

• All payments are processed by Stripe. We do not handle, store, or have access to your card number, expiry date, or security code at any point
• We store only your Stripe customer identifier, current subscription plan, and billing status

Technical information

• Your IP address and basic browser details, recorded automatically for security and fraud prevention
• Push notification tokens, if you opt in to browser notifications

3. How we use your information

We do not use your information for advertising, behavioural profiling, or marketing to third parties. We do not sell your data.

4. Payments — Stripe, Apple Pay, and Google Pay

We use Stripe (Stripe Payments Europe Limited, incorporated in Ireland) to process all subscription payments. When you choose to subscribe, you are redirected to Stripe's secure hosted checkout page.

Card payments

Your card details (number, expiry, CVV) are entered directly on Stripe's page and never pass through PetMeds servers. We receive only a confirmation that the payment succeeded or failed. Visa, Mastercard, and American Express cards are accepted.

Apple Pay

Apple Pay is available on supported Apple devices and browsers. When you pay with Apple Pay, your payment credentials are authenticated by your device's Secure Element and passed to Stripe in tokenised form. PetMeds receives no card details — only a confirmation of successful payment. Apple's handling of your payment data is governed by Apple's Privacy Policy.

Google Pay

Google Pay is available on supported Android devices and Chrome browsers. When you pay with Google Pay, your payment credentials are held by Google and passed to Stripe in tokenised form. PetMeds receives no card details — only a confirmation of successful payment. Google's handling of your payment data is governed by Google Pay's Privacy Notice.

Stripe as data processor

Stripe may collect device and behavioural data during checkout to detect and prevent fraudulent transactions. This processing is subject to Stripe's own privacy policy. For full details, see stripe.com/gb/privacy.

5. Who we share your information with

We do not sell or rent your personal data. We share it only in the following circumstances:

• Stripe — to process your subscription payment, as described in Section 4
• Your vet — their email address and your pet's medication details are included in the reorder notification emails we send on your behalf when stock is running low
• People you share access with — if you grant a partner or carer access to your PetMeds account, they can view your pet and medication data according to the access level you set
• Legal obligations — if required by law, court order, or regulatory authority

6. Data retention

• We keep your account and associated data for as long as your account is active
• If you delete your account, your data is marked for deletion immediately and permanently purged within 90 days
• Billing records may be retained for up to seven years for accounting and tax compliance

7. Your rights

Under the Data Protection (Jersey) Law 2018 (which closely mirrors the UK GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, subject to legal retention requirements
• Restriction — ask us to limit processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing where we rely on legitimate interests

To exercise any of these rights, email us at [email protected]. We will respond within one calendar month.

If you are not satisfied with how we have handled your data, you may lodge a complaint with the Jersey Office of the Information Commissioner (JOIC): joic.je.

8. Cookies

PetMeds uses a single session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics scripts.

If you sign in using Google or Apple, their services may set cookies or use browser storage as part of their authentication flow, subject to their respective privacy policies.

9. Changes to this policy

If we make material changes to this policy, we will notify registered users by email and update the date at the top of this page.

10. Contact us

Questions about this policy or how we handle your data:
[email protected]