At trainandwag (“we,” “us,” or “our”), accessible via www.trainandwag.com, we are committed to protecting the privacy and personal data of our users located in the European Union / European Economic Area and the United States. This Privacy Policy explains how we collect, use, disclose, and store your information when you interact with our website and purchase our custom pet training plan services.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the Data Controller responsible for your personal information is trainandwag.
- Brand Name: trainandwag
- Website: www.trainandwag.com
- Official Contact Email: secops@trainandwag.com
- Country of Operation: Germany
2. Information We Collect
We collect personal data to deliver customized pet training services, process transactions, and communicate effectively with you.
- Contact & Identification Data: Email address, name, and billing details provided during checkout or account creation.
- Service Personalization Data: Pet details (e.g., age, breed, behavioral traits, routine) submitted via custom questionnaires to generate personalized training plans.
- Payment & Transaction Data: Payment transactions are handled securely by third-party processors. We do not store full credit card numbers or sensitive payment authentication credentials on our servers.
- Technical & Usage Data: IP address, browser type, operating system, and interaction data collected automatically via essential cookies and website functionality log files.
3. Legal Basis for Processing (EU/EEA Users)
Under GDPR, we process your personal data under the following legal bases:
- Contractual Necessity: Processing is necessary to perform our contract with you (i.e., generating and delivering your custom pet training plan).
- Legitimate Interests: Processing is necessary for fraud prevention, securing our website operations, and improving service efficiency.
- Compliance with Legal Obligations: Processing required to meet statutory tax, accounting, and commercial reporting standards in Germany and the EU.
4. Payment Processing with Stripe
To securely process payments for our digital training services, we use Stripe as our primary third-party payment processing provider.
- When you place an order, your payment credentials and transaction details are transmitted directly to Stripe via encrypted protocols.
- Stripe acts as an independent data controller for certain processing activities related to payment validation, fraud prevention, and compliance.
- We do not collect, store, or view your complete credit card or financial account numbers on our servers.
5. Data Sharing & Third-Party Vendors
We do not sell, rent, or trade your personal information. We only share personal data with trusted service providers strictly necessary to operate our digital platform:
- Payment Gateways: Stripe (for checkout authorization and payment processing).
- Technical Infrastructure: Web hosting and secure cloud service providers essential for delivering custom digital files.
All third-party infrastructure providers adhere to appropriate cross-border data transfer safeguards (e.g., EU Standard Contractual Clauses).
6. Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by statutory laws in Germany, the European Union, or the United States.
- Account & Training Plan Data: Retained for as long as your service account remains active or up to 2 years after service completion to facilitate customer support and plan adjustments.
- Financial & Transaction Records: In compliance with German tax and commercial laws (e.g., Abgabenordnung § 147 and Handelsgesetzbuch § 257), transactional invoicing data is retained for 10 years from the end of the calendar year in which the transaction occurred.
- Support Communications: Customer support emails sent to secops@trainandwag.com are retained for up to 3 years to resolve potential legal claims or operational disputes.
- Technical Logs: Server security logs are retained for a maximum of 30 days before automatic deletion.
7. Your Data Protection Rights
Depending on your residency (EU/EEA or US states such as California), you have specific statutory privacy rights:
European Union (GDPR) Rights:
- Right of Access: Request copies of your personal data.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of personal data where legal exceptions do not apply.
- Right to Restrict or Object: Limit or object to certain aspects of processing.
- Data Portability: Request transfer of your data to another controller in a machine-readable format.
- Right to Lodge a Complaint: File a complaint with a European data protection authority (e.g., your local German data protection regulator).
United States Privacy Rights:
- Right to Know/Access: Request information regarding categories and specific pieces of personal data collected.
- Right to Deletion: Request removal of personal data subject to legal retention exceptions.
- Right to Non-Discrimination: Equal service provision regardless of exercising privacy rights.
To exercise any of these rights, please contact us at secops@trainandwag.com.
8. International Data Transfers
Because we sell digital services to customers in both the EU/EEA and the United States, data may be accessed or processed across borders. Whenever personal data is transferred internationally, we ensure appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) are in place to maintain data security.