Effective from: 20 July 2026
The data controller is UNIEXPO Sp. z o.o., registered in Koźmin Wielkopolski, ul. Towarowa 3, 63-720 Koźmin Wielkopolski, Poland, NIP: 6211843170. Data protection contact: kontakt@maxanimals.pl.
We collect the following data: first and last name, e-mail address, phone number, delivery and billing address, tax ID (optional), order and payment data, account and authentication data (including sign-in with Google or Facebook and two-factor authentication), pet information (name, species, breed, age, weight, body condition score, playdate profile -- voluntary), pet health data (vaccinations, medications, vet visits, symptoms, consultations -- see section 5), activity data (walks, GPS location -- with consent), veterinary photos (breed, BCS, skin lesions -- voluntary, for AI analysis), social data: private messages, comments, friend list, lost-pet broadcasts, NFC/QR tags and their scans, heat-in-car alert sessions, pet-sitter share links, playdate interactions, dog-friendly place reviews, short-lived presence pings at POIs and in your area (TTL 30 min, blurred to a ~500 m grid, k-anonymity >= 2-3), show entries and pedigree data, Breeder Club data, product scan history, product Q&A, product collections, loyalty programme data (points, cashback, referrals), affiliate links and their conversions, the content of messages sent through the contact form, the e-mail address from a newsletter sign-up together with the date consent was given, device tokens for push notifications, technical data (IP address, device type, browser).
We process data for: fulfilling orders and delivering Products, managing your Account and providing Service features, keeping pet health records and handling veterinary consultations, operating the loyalty programme, cashback and referrals, personalising product and nutrition recommendations (AI), tracking pet activity (walks, health), providing social features (messages, friends, lost-pet broadcasts, playdate), sending push notifications about Service events, handling contact-form enquiries, marketing communications and the newsletter (with consent), ensuring security and preventing abuse (including bot protection), fulfilling legal obligations (accounting, taxation).
Processing is based on: Art. 6(1)(b) GDPR -- performance of a contract (orders, account, Service features), Art. 6(1)(a) GDPR -- consent (marketing and newsletter, GPS location and its sharing, AI photo analysis, analytics and marketing cookies, push notifications), Art. 6(1)(c) GDPR -- legal obligation (accounting, taxation), Art. 6(1)(f) GDPR -- legitimate interest of the controller (Service security, abuse prevention, analytics, pursuing claims). You may withdraw consent at any time -- this does not affect the lawfulness of processing carried out before the withdrawal.
The Service lets you keep pet health records (vaccinations, medications, visits, weight, body condition score, preliminary symptom assessments) and use online veterinary consultations. For a consultation we process the problem description, attached photos and files, the message history with the veterinarian, and the recommendations or prescriptions issued. This data concerns your pet but is linked to your account. The veterinarian is granted access only to the data necessary to handle that specific consultation. Health records are visible only to you and to recipients you designate (e.g. a pet sitter). Consultation content is never used for marketing. These features are supportive only -- they do not replace an in-person veterinary visit and do not constitute a diagnosis.
We use algorithms and artificial-intelligence models for: product recommendations and food matching, photo analysis (breed recognition, body condition scoring, preliminary assessment of skin lesions), preliminary symptom assessment and content personalisation. Prompts and photos sent for AI analysis are processed by our model provider (Anthropic, USA) under standard contractual clauses and are not used to train models. Results are informational and supportive -- we do not take decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR. You may choose not to use AI-based features and, in case of doubt, request human review of a result.
Order data: 5 years from the end of the tax year (accounting obligation). Account data: until account deletion. Pet health records and veterinary consultations: until you delete the entry or your account, subject to periods arising from record-keeping and limitation-of-claims rules. Marketing data and newsletter: until consent is withdrawn. Contact-form messages: 12 months after the matter is closed. Private messages and comments: until account deletion. Push notification tokens: until sign-out or app uninstall. Activity data (walks, GPS): 24 months from last activity. Lost-pet broadcasts: until the report is resolved or the account is deleted. NFC/QR tags and scan history: until the owner deactivates the tag or deletes the account. Heat-in-car alert sessions: until the session ends + 24h diagnostic log. Pet-sitter share links: until the token expires or is revoked. Playdate profiles and interaction history: until opt-out or account deletion. Dog-friendly place reviews: until account deletion or manual review removal. Presence pings (POI presence, Nearby Now): TTL 30 minutes, removed automatically every 5 minutes. Show entries and settlement data: 5 years (accounting obligation). Product Q&A and product collections: until account deletion. Affiliate links and conversions: 5 years (accounting obligation). Technical logs: 12 months.
We share data with our sub-contractors (processors) only to the extent necessary to provide the services: payment operators (PayU S.A., Krajowy Integrator Płatności S.A. -- Tpay, PayPro S.A. -- Przelewy24), courier companies (InPost, DPD, DHL, Poczta Polska), the commerce platform (Shopify), the e-mail delivery provider (Resend), the artificial-intelligence model provider (Anthropic), the web analytics provider (Google -- Google Analytics), the bot-protection provider (Cloudflare -- Turnstile), push notification providers (Expo, Google Firebase), veterinarians handling consultations, hosting and IT maintenance providers, and public authorities where required by law. Some of these entities are established outside the European Economic Area (including the USA) -- in such cases the transfer takes place under standard contractual clauses approved by the European Commission. We do not sell personal data.
The Service uses cookies and similar technologies in three categories: necessary (session, cart, authentication, security and remembering your consent choices -- no consent required), analytics (visit statistics, e.g. Google Analytics -- only with your consent) and marketing (tailoring content and ads -- only with your consent). On your first visit we display a banner where you can accept all categories, reject non-essential ones, or choose individual categories. No analytics or marketing script runs before consent is obtained. You can change or withdraw your choice at any time via the "Cookie settings" panel available on this page. You can also change cookie settings in your browser; disabling necessary cookies may make the Service unusable.
You have the right to: access your data, rectify your data, erase your data (right to be forgotten), restrict processing, data portability, object to processing, withdraw consent at any time, lodge a complaint with the supervisory authority (Prezes Urzedu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If a parent or guardian learns that a child has provided us with personal data, please contact us -- the data will be promptly deleted.
We apply appropriate technical and organisational measures to protect personal data: encrypted connections (TLS/SSL), multi-factor authentication (Keycloak), regular security audits, role-based access control, encryption of sensitive data at rest.
We reserve the right to update this Privacy Policy. We will notify you of material changes via the Service or by e-mail at least 14 days before they take effect.
For data protection matters please contact: E-mail: kontakt@maxanimals.pl UNIEXPO Sp. z o.o. ul. Towarowa 3, 63-720 Koźmin Wielkopolski, Poland
Cookie settings
