Privacy policy

1. Who we are

vetclinic.info ("we", "us", "the site") is a veterinary-specialty directory operated from Spain. We are the data controller for the personal data described in this policy. You can reach us at [email protected].

2. What we collect, and why

2.1 When you visit the site

We use Google Analytics 4 (measurement ID G-Z7PBEMRCPV) to understand how visitors find and use the site. GA4 sets first-party cookies and collects:

• An anonymised client identifier (a random ID, not your name or email)
• Pages viewed, time on page, scroll depth, outbound link clicks, downloads, site searches
• Referring URL (e.g. that you arrived from whyismy.org or a Google search)
• Coarse geographic location (country, region, city — derived from your IP and not stored at IP-level precision in our reports)
• Device type, browser, operating system, screen size

Google Analytics is configured with IP anonymisation. We don't use GA4 advertising features, demographics, or remarketing audiences. The legal basis is our legitimate interest in understanding site traffic at an aggregate level.

2.2 When you email us

If you email [email protected] we receive your email address, your name (if your client sends it), and whatever you write to us. We keep that correspondence so we can reply and follow up.

2.3 When you reserve a founding-member spot

Founding-member pledges are processed through Stripe Checkout. Stripe collects the information needed to take payment — name, email, billing address, and card details. We never see or store your card number; Stripe handles that end-to-end. What we receive from Stripe is a pledge notification containing your name, email, the amount, and a Stripe customer reference. We use that to provision your account and contact you about onboarding.

2.4 Clinic data

We publish information about veterinary clinics — addresses, phone numbers, websites, ratings, reviews, photos, and procedure descriptions. That information is sourced from each clinic's own website and from the Google Places API. It's already publicly available; we re-display it in a structured directory format. If you are a clinic owner and would like a listing corrected or removed, email [email protected].

3. Cookies

We use the following cookies:

• Google Analytics (_ga, _ga_*) — first-party, ~2-year expiry, used for traffic analytics
• Stripe (set only on the checkout page) — required to process payments securely

We do not run advertising cookies, social-network trackers, or fingerprinting scripts. You can disable cookies in your browser; the site will still work, but our analytics won't see your visit.

4. Who we share data with

We share the minimum necessary data with the following processors:

• Google LLC — Google Analytics (traffic), Google Places (clinic data), Google Maps Embed (maps on clinic pages)
• Stripe, Inc. — payment processing for founding-member pledges
• Cloudflare, Inc. — hosting, DNS, CDN, and security; processes your IP address to serve the site

We do not sell personal data. We do not share data with advertisers.

5. International transfers

Our processors (Google, Stripe, Cloudflare) operate globally and may process data in the United States and other countries. Each of these companies provides appropriate safeguards (Standard Contractual Clauses, Data Privacy Framework certification, or equivalent). If you would like more detail on the safeguards in place, email us.

6. How long we keep data

• Analytics: Google Analytics retains event-level data for up to 14 months by default; aggregated reports indefinitely.
• Email correspondence: kept for as long as the conversation is operationally useful, typically up to 3 years from the last reply.
• Pledge records: kept for the duration of your subscription plus the period required by applicable accounting / tax law (in Spain, generally 6 years).

7. Your rights

You can ask us to:

• Confirm what data we hold about you, and provide a copy
• Correct anything that's wrong
• Delete your data (where we don't have an overriding obligation to keep it)
• Restrict or object to certain processing
• Port your data to another service in a structured format

Email [email protected] with the request. We'll respond within 30 days.

If you're not satisfied with our response, you have the right to complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos (aepd.es).

8. US visitors

We assume most of our visitors are based in the United States. If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). The categories of personal information we collect, the sources, the purposes, and the recipients are described above. We do not sell or share personal information for cross-context behavioural advertising. You can exercise your CCPA rights by emailing us at the address above.

9. Security

The site is served over HTTPS. Payments are handled by Stripe (PCI-DSS Level 1). Admin endpoints are protected by bearer-token authentication. We don't store credentials, social-security numbers, or other sensitive identifiers.

10. Changes to this policy

If we change this policy in a way that affects how we handle your data, we'll update the "Last updated" date at the top and, where the change is material, post a notice on the homepage for at least 14 days.

11. Contact

Questions, requests, or complaints: [email protected].