GDPR & Your Data Rights

Last updated: 10 April 2026

Summary: We comply with the UK General Data Protection Regulation (UK GDPR). You have full control over your data. We collect minimal information, never sell your data, and make it easy to exercise your rights.

Who We Are

Stubo Interactive is the data controller for personal data collected through our websites and apps. We are a sole trader based in the United Kingdom.

As a small business processing minimal personal data, we are not required to appoint a Data Protection Officer (DPO). All data protection enquiries can be directed to us via our contact page.

What Data We Collect

DataWhenLegal Basis
Name and emailWhen you contact usConsent
Google account info (name, email)When you sign in to our appsContract
App data (dog profiles, health records)When you use cloud syncContract
IP address, browser infoServer logs (security)Legitimate interest
Login attempts (IP, timestamp)Sign-in attempts (rate limiting)Legitimate interest
Anonymous usage dataIf you consent to analytics cookiesConsent
Ad interaction dataIf you consent to advertising cookiesConsent

Legal Basis for Processing

Under UK GDPR, we only process your data when we have a lawful basis:

Your Rights

Under the UK GDPR, you have the following rights over your personal data:

Right of Access

Request a copy of all personal data we hold about you. We will provide it within one month in a readable format.

Right to Rectification

Request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Request deletion of your personal data ("right to be forgotten"). In our apps, you can delete all data via Settings > Delete All Data.

Right to Restrict Processing

Request that we limit how we use your data while a complaint or dispute is being resolved.

Right to Data Portability

Request your data in a structured, machine-readable format so you can transfer it to another service.

Right to Object

Object to processing based on legitimate interests. We will stop processing unless we have compelling grounds.

Right to Withdraw Consent

Withdraw consent at any time for processing based on consent (e.g. analytics cookies). Use the cookie settings on our Cookie Policy page or the banner on any page.

To exercise any of these rights, please contact us. We will respond within one month. There is no charge for exercising your rights.

How We Protect Your Data

Data Retention

DataRetention Period
Contact submissionsAutomatically deleted after 12 months
Cloud-synced app dataRetained until you delete it or request deletion
Login attempt recordsAutomatically deleted after 90 days
Analytics data (Google)14 months (if you consent)
Local app dataStored on your device until you clear it

International Data Transfers

Some of our third-party service providers are based outside the UK:

Where your data is transferred outside the UK or European Economic Area, these providers use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the UK Information Commissioner's Office to protect your data.

Cookies and Consent

We use a cookie consent banner on all our sites. You choose what cookies to allow:

You can change your cookie preferences at any time on our Cookie Policy page. For full details on what cookies we use, see our Cookie Policy.

Children's Data

Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child under 13, please contact us and we will delete it promptly.

Making a Complaint

If you are not satisfied with how we handle your data or respond to your request, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
We encourage you to contact us first so we can try to resolve your concern directly.

Related Policies

Contact Us

For any data protection queries or to exercise your rights, please contact us. We aim to respond to all requests within one month.