top of page

Legal & Compliance

The legal documents and policies governing your use of Paw Pilot and how we handle personal data.

Contents

Terms & Conditions

Privacy Policy

Data Processing Agreement

Subprocessor Register

Terms & Conditions

  • Version 1.2
  • Effective date: 7 November 2026
  • Last updated: 7 November 2026
  • Provider: Wise Craig Ventures Ltd, trading as Paw Pilot

1. Introduction

These Terms & Conditions ("Terms") govern your access to and use of Paw Pilot, including its website, software application, booking tools, business management features, communications tools, integrations and associated services.

Paw Pilot is operated by Wise Craig Ventures Ltd ("we", "us", "our" or "Paw Pilot").

By creating an account, subscribing to a plan, accessing the platform or using any part of the service, you agree to these Terms.

If you do not agree to these Terms, you must not use Paw Pilot.

These Terms apply primarily to businesses and professionals using Paw Pilot to manage pet care services. They also apply to authorised users accessing the platform on behalf of those businesses.

2. Definitions

In these Terms:

  • Platform means the Paw Pilot website, application, software, features and associated services.

  • Business Customer means the individual or organisation subscribing to or using Paw Pilot to operate a pet care business.

  • User means anyone authorised by a Business Customer to access the Platform, including owners, administrators, employees, walkers and other staff.

  • End Customer means a person who uses a Business Customer's services, such as a pet owner or booking customer.

  • Customer Data means information uploaded, entered, generated or processed through the Platform by or on behalf of a Business Customer.

  • Subscription means the paid or free plan under which a Business Customer accesses the Platform.

  • Integrations means third-party services connected to Paw Pilot, including payment, calendar, messaging and social media services.

  • Services means the software and functionality provided by Paw Pilot.

3. The Paw Pilot service

Paw Pilot provides software designed to help pet care businesses manage and operate their services.

Depending on the subscription and configuration, the Platform may include:

  • Customer and pet management.

  • Booking and scheduling management.

  • Service and pricing configuration.

  • Staff and walker management.

  • Booking capacity and availability management.

  • Customer communications and notifications.

  • Payment and invoice-related functionality.

  • Calendar integrations.

  • Walk tracking, GPS routes and activity reporting.

  • Pet care records, notes, photographs and reports.

  • Business dashboards and operational reporting.

  • Website, booking and customer-facing tools.

  • Messaging and social media integrations.

  • Other features introduced or made available from time to time.

Features may vary according to subscription level, business configuration, availability and development.

We may add, change, improve, suspend or remove features where reasonably necessary to maintain, improve or operate the Platform.

4. Account registration and security

You must provide accurate and complete information when registering for Paw Pilot.

You are responsible for:

  • Maintaining the confidentiality of your login credentials.

  • Ensuring that only authorised individuals access your account.

  • Keeping account and business information accurate and up to date.

  • Removing access for individuals who no longer require it.

  • Notifying us promptly if you suspect unauthorised access or a security breach.

You must not share accounts or credentials in a way that compromises security or breaches your subscription terms.

You are responsible for activity carried out through your account, except where that activity results from our own breach of these Terms or applicable law.

We may suspend access where we reasonably believe an account has been compromised or is being used unlawfully or in breach of these Terms.

5. Business configuration and responsibility

Paw Pilot provides configurable tools to support different pet care business models.

Business Customers are responsible for ensuring that their configuration is appropriate for their business and services.

This includes:

  • Business details and contact information.

  • Services and service descriptions.

  • Service durations and availability.

  • Prices, fees and payment settings.

  • Booking rules and capacity limits.

  • Cancellation and rescheduling policies.

  • Staff permissions and assignments.

  • Customer-facing messages and notifications.

  • Website and booking page content.

  • Business branding and social media settings.

  • Any other settings that affect how the business operates.

5.1 Standard defaults

Paw Pilot may provide standard settings, templates, default values and recommended configurations to help businesses get started.

These defaults are provided for convenience and do not constitute legal, operational, financial or professional advice.

You are responsible for reviewing and confirming that all default settings are appropriate for your business before relying on them.

This includes cancellation policies, booking rules, service availability, pricing, payment terms and customer communications.

Paw Pilot is not responsible for business losses, disputes or misunderstandings arising from a Business Customer's failure to review or correctly configure its settings, except where caused by our own breach of these Terms or applicable law.

5.2 Business-specific policies

Any policies, terms, cancellation rules or service conditions displayed to your End Customers are your responsibility unless expressly agreed otherwise in writing.

You must ensure that your own customer-facing terms are lawful, accurate and appropriate for the services you provide.

6. Pet care services and animal welfare

Paw Pilot is a software provider. We do not provide dog walking, pet sitting, boarding, daycare, training or other animal care services through the Platform.

The Business Customer is solely responsible for the actual pet care services it provides.

This includes:

  • The welfare, safety and supervision of animals.

  • Ensuring staff and contractors are suitably trained and competent.

  • Obtaining appropriate insurance and licences.

  • Assessing the suitability of animals for particular services.

  • Managing animal behaviour, health and safety risks.

  • Maintaining appropriate emergency procedures.

  • Obtaining relevant customer permissions and instructions.

  • Complying with applicable animal welfare legislation and regulations.

Paw Pilot does not independently verify the competence, qualifications, insurance or suitability of a Business Customer or its staff.

Any operational tools, records, alerts or recommendations provided by the Platform are intended to assist business management. They do not replace professional judgement or the Business Customer's legal responsibilities.

7. Bookings, scheduling and availability

The Platform may allow Business Customers to manage bookings, appointments, availability, waiting lists, capacity and staff assignments.

The Business Customer is responsible for ensuring that:

  • Services are configured correctly.

  • Availability reflects actual capacity.

  • Bookings are reviewed and managed appropriately.

  • Staff assignments are suitable.

  • Customers receive accurate booking information.

  • Changes and cancellations are communicated appropriately.

Booking confirmations, reminders and other automated messages depend on the accuracy of the information and settings supplied by the Business Customer.

Paw Pilot cannot guarantee that a booking will be fulfilled or that a particular member of staff will be available.

Where customers can book directly through a Business Customer's booking page, the Business Customer remains responsible for the service contract with that customer.

8. Payments, subscriptions and fees

Access to certain Paw Pilot features requires a paid Subscription.

Subscription prices, billing periods, included features and any applicable limits will be displayed at the point of purchase or within the Platform.

8.1 Subscription payments

Subscription payments may be processed through Stripe or another payment provider made available by Paw Pilot.

By subscribing, you authorise the relevant payment provider to collect applicable subscription fees using your selected payment method.

You must ensure that your payment details remain valid and up to date.

8.2 Recurring billing

Unless otherwise stated, subscriptions renew automatically at the end of each billing period.

You may cancel your subscription through the available account controls or by contacting us.

Cancellation will normally take effect at the end of the current paid billing period unless otherwise stated at the time of purchase.

8.3 Failed payments

If a payment fails, we may notify you and attempt to collect the outstanding amount again.

We may restrict or suspend access to paid features if subscription payments remain overdue.

8.4 Refunds

Subscription fees are generally non-refundable for unused portions of a billing period, except where required by law or expressly agreed by us.

Nothing in these Terms affects any statutory rights you may have.

8.5 Changes to pricing

We may change subscription prices or introduce new plans.

Where a price change affects an existing subscription, we will provide reasonable notice before the change takes effect.

If you do not agree to a price change, you may cancel your subscription before the new price applies.

8.6 Customer payments

Where Paw Pilot enables a Business Customer to collect payments from its End Customers, those payments are made in connection with the Business Customer's services.

The Business Customer is responsible for its own pricing, refunds, disputes, taxes and customer payment obligations.

Payment processing may be provided by third parties such as Stripe. Their own terms and policies will also apply.

Paw Pilot does not hold itself out as a bank or payment institution.

9. Invoicing and accounting integrations

Paw Pilot may provide functionality to support invoicing, financial records and accounting integrations.

Integrations may include services such as Xero.

The Business Customer remains responsible for:

  • The accuracy of financial information.

  • The accuracy of invoices and tax information.

  • Its accounting records.

  • VAT registration and reporting obligations.

  • Tax returns and other statutory filings.

  • Reviewing information transferred between systems.

Paw Pilot does not provide accounting, tax or financial advice.

You should independently verify financial information transferred through integrations.

10. Customer and pet information

Business Customers may store personal information about their End Customers and information about the animals in their care.

You are responsible for ensuring that you have a lawful basis to collect, use and share this information.

You must ensure that information entered into Paw Pilot is accurate, relevant and appropriate for the services being provided.

You must not upload information that you are not legally entitled to process.

Where you process personal data belonging to End Customers, you are generally acting as the data controller and Paw Pilot may act as your data processor.

The parties' respective data protection responsibilities are described further in the Privacy Policy and, where applicable, the Data Processing Agreement.

11. Data protection and privacy

We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

Our Privacy Policy explains how we collect, use, store and protect personal information.

Where Paw Pilot processes personal data on behalf of a Business Customer, the parties may enter into or rely upon a Data Processing Agreement.

Business Customers must ensure that they provide appropriate privacy information to their End Customers and obtain any necessary permissions or consents.

You must not use Paw Pilot to process personal data unlawfully or in a way that infringes another person's rights.

12. Integrations and third-party services

Paw Pilot may integrate with third-party services to provide additional functionality.

These may include:

  • Stripe for payment processing.

  • Xero for accounting and invoicing.

  • Google Calendar for calendar synchronisation.

  • Meta services, including Facebook and Instagram.

  • WhatsApp and associated messaging services.

  • Email, hosting, storage and other infrastructure providers.

Third-party integrations are subject to the relevant provider's own terms, privacy policies and technical requirements.

You are responsible for ensuring that you are authorised to connect third-party accounts and that you comply with the applicable third-party terms.

12.1 Third-party availability

We do not control third-party services and cannot guarantee their continued availability, performance or compatibility.

An integration may stop working or become limited because of changes made by the third-party provider.

We may suspend, modify or remove an integration where necessary.

12.2 Permissions and access

When connecting an integration, you may be asked to grant permissions to access information or perform actions within the relevant third-party service.

You are responsible for reviewing those permissions and ensuring that the connected account is appropriate for your business.

You may revoke permissions through the relevant third-party service, although doing so may affect Platform functionality.

12.3 Instagram, Facebook and Meta

Where Paw Pilot provides functionality involving Instagram, Facebook or other Meta services, use of that functionality is also subject to Meta's applicable terms and policies.

Business Customers are responsible for ensuring that their use of social media integrations complies with applicable platform rules, advertising requirements, messaging policies and privacy obligations.

We do not guarantee that Meta will approve, maintain or continue to support any particular integration or feature.

13. Communications and automated notifications

Paw Pilot may send or facilitate automated communications, including:

  • Booking confirmations.

  • Booking reminders.

  • Cancellation notifications.

  • Walk and activity summaries.

  • Payment notifications.

  • Account notifications.

  • Business-to-customer messages.

  • Operational alerts.

Business Customers are responsible for ensuring that customer contact details and communication preferences are accurate.

You must ensure that messages sent through Paw Pilot comply with applicable privacy, electronic communications and marketing laws.

You must not use the Platform to send unlawful, misleading, unsolicited or abusive communications.

Automated communications may be delayed, fail or be affected by third-party email, messaging or telecommunications providers.

Paw Pilot does not guarantee delivery of every notification.

14. GPS, location and activity reporting

Certain Platform features may collect or display location information, GPS routes, distances, timestamps, photographs, videos and activity records.

These features are intended to help Business Customers record and communicate information about services provided.

You acknowledge that:

  • GPS accuracy depends on the device, operating system, signal and environmental conditions

Privacy Policy

  • Version 1.2
  • Effective date: 7 November 2026
  • Last updated: 7 November 2026
  • Provider: Wise Craig Ventures Ltd, trading as Paw Pilot

1. Introduction

Paw Pilot is committed to protecting personal information and respecting the privacy of individuals who use our website, platform and associated services.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you:

  • Visit our website.

  • Register for a Paw Pilot account.

  • Use the Paw Pilot application.

  • Interact with our customer support team.

  • Connect third-party services and integrations.

  • Communicate with us.

  • Receive communications from us.

Paw Pilot is operated by Wise Craig Ventures Ltd, a company registered in England and Wales, trading as Paw Pilot.

Throughout this policy, references to "Paw Pilot", "we", "us" or "our" mean Wise Craig Ventures Ltd trading as Paw Pilot.

This policy applies alongside our Terms & Conditions and Data Processing Agreement.

2. Our company and ICO registration

Paw Pilot is a trading name of Wise Craig Ventures Ltd.

Wise Craig Ventures Ltd is registered with the Information Commissioner's Office (ICO) as a data controller.

Our registration details are:

  • Legal entity: Wise Craig Ventures Ltd

  • ICO registration reference: ZC238755

  • Registration date: 4 September 2026

  • Registration expiry: 3 September 2027

  • Registration tier: Tier 1

ICO registration does not constitute certification, accreditation or endorsement of Paw Pilot by the Information Commissioner's Office.

For privacy-related enquiries, please contact us using the details provided at the end of this policy.

3. Our role as data controller and data processor

Paw Pilot operates in two different data protection capacities depending on the information being processed.

3.1 When we act as a data controller

Wise Craig Ventures Ltd acts as a data controller when it determines why and how personal information is processed for its own business purposes.

This includes:

  • Website visitor information.

  • Business account registration.

  • Account administration.

  • Subscription and billing administration.

  • Customer support.

  • Platform security and fraud prevention.

  • Website analytics and marketing, where applicable.

  • Direct communications with Paw Pilot customers and prospects.

3.2 When we act as a data processor

When a pet care business uses Paw Pilot to manage its own customers, employees, contractors, pets and business operations, that business will generally act as the data controller.

Paw Pilot generally acts as the data processor, processing personal information on behalf of that business to provide the platform.

The business customer determines the purposes for which its customer and operational information is collected and used.

For example, a dog walking business using Paw Pilot to store customer addresses, pet profiles, emergency contacts and booking information is generally responsible for determining why that information is collected and how it is used.

Paw Pilot processes this information to provide the contracted software functionality and associated services.

Our respective responsibilities are explained further in the Paw Pilot Data Processing Agreement.

The distinction between controller and processor depends on the particular processing activity, rather than simply the type of organisation involved.

4. Personal information we collect

The information we collect depends on how you interact with Paw Pilot.

4.1 Account and registration information

When you register for an account, we may collect:

  • Name.

  • Business name.

  • Email address.

  • Telephone number.

  • Business address.

  • Account login information.

  • Subscription and plan information.

  • Account preferences.

  • Business configuration information.

4.2 Customer and client information

Where you use Paw Pilot to manage your customers, the platform may process:

  • Customer names.

  • Email addresses.

  • Telephone numbers.

  • Home and service addresses.

  • Booking information.

  • Customer preferences.

  • Communication history.

  • Payment and transaction references.

  • Customer notes and instructions.

4.3 Pet information

Paw Pilot is designed specifically for the pet care industry.

The platform may therefore process information relating to animals, including:

  • Pet names.

  • Breed and identifying characteristics.

  • Age and date of birth.

  • Photographs and videos.

  • Behavioural information.

  • Feeding instructions.

  • Care requirements.

  • Veterinary and emergency contact information.

  • Medical and health-related information about animals.

  • Walk and activity records.

  • Other information relevant to the delivery of pet care services.

Pet information is generally not personal data in its own right, but it may become personal data where it is linked to an identifiable owner or individual.

4.4 Employee and contractor information

Where businesses use Paw Pilot to manage their teams, we may process:

  • Employee and contractor names.

  • Contact details.

  • User accounts.

  • Assigned roles and permissions.

  • Work schedules.

  • Booking assignments.

  • Activity records.

  • Operational notes.

  • Other employment-related information entered by the business.

4.5 GPS and activity information

Paw Pilot may process information generated through GPS and activity tracking features.

This may include:

  • GPS coordinates.

  • Walking routes.

  • Location timestamps.

  • Activity duration.

  • Distance travelled.

  • Walk start and finish times.

  • Photographs and videos.

  • Activity notes.

  • Toilet break and water information.

  • Other operational activity records.

Where GPS information relates to an identifiable employee, contractor or customer, it may constitute personal data.

Businesses are responsible for ensuring that any employee, contractor or customer monitoring is lawful and appropriately communicated.

4.6 Communications information

We may process information associated with communications made through or connected to Paw Pilot.

This may include:

  • Emails.

  • WhatsApp messages.

  • Instagram messages.

  • Customer enquiries.

  • Support requests.

  • Notification records.

  • Message delivery information.

  • Other communication history.

The information processed depends on the communication services and integrations enabled by the customer.

4.7 Technical and usage information

When you access our website or application, we may collect technical information such as:

  • IP address.

  • Browser type.

  • Device type.

  • Operating system.

  • Login timestamps.

  • Session information.

  • Application usage.

  • Diagnostic and error information.

  • Security and access logs.

This information helps us maintain, secure and improve the platform.

4.8 Payment information

We may process subscription and billing information, including:

  • Subscription plan.

  • Billing address.

  • Payment status.

  • Transaction references.

  • Invoice information.

  • Payment history.

Where payments are processed by third-party payment providers, those providers may independently collect and process card or banking information.

Paw Pilot does not necessarily receive or store full payment card details.

5. How we use personal information

We process personal information for the following purposes.

Purpose

Examples

Account management

Registration, authentication and account administration

Platform delivery

Bookings, customers, pets and business operations

Communications

Emails, notifications and messaging

Subscription management

Billing, payments and renewals

Customer support

Responding to enquiries and resolving issues

Security

Preventing misuse, fraud and unauthorised access

Platform improvement

Diagnostics, performance and product development

Legal compliance

Meeting applicable regulatory obligations

Marketing

Sending relevant business updates and promotional communications where lawful

We only use personal information where we have an appropriate legal basis.

6. Our lawful bases for processing

Under applicable data protection legislation, we rely on one or more of the following lawful bases.

6.1 Contractual necessity

We process information where it is necessary to:

  • Create and manage your account.

  • Provide the Paw Pilot platform.

  • Deliver subscription services.

  • Process payments.

  • Provide customer support.

  • Fulfil contractual obligations.

6.2 Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

These interests may include:

  • Maintaining platform security.

  • Preventing fraud and misuse.

  • Improving software functionality.

  • Diagnosing technical problems.

  • Managing customer relationships.

  • Protecting our business and intellectual property.

6.3 Legal obligations

We may process information where necessary to comply with applicable laws and regulatory obligations.

This may include accounting, tax, financial recordkeeping and responding to lawful requests from regulatory authorities.

6.4 Consent

Where required, we rely on consent for activities such as certain marketing communications, non-essential cookies and other processing activities requiring consent.

You may withdraw consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

7. Data hosting, storage and international processing

Paw Pilot operates as a cloud-based software platform and relies on third-party infrastructure and technology providers.

Personal information may be stored, processed or accessed in different geographical locations depending on the infrastructure, services and integrations involved.

These locations may include:

  • The United Kingdom.

  • The United States.

  • Other jurisdictions where our infrastructure or service providers operate.

7.1 Cloud infrastructure

Paw Pilot uses third-party infrastructure providers to host and operate the application, databases and associated services.

These providers may process information necessary to deliver the platform.

The exact geographical location of production databases, file storage, backups and associated infrastructure is subject to the arrangements of the relevant providers.

We will provide further information about relevant providers and processing locations through our subprocessor information.

7.2 International transfers

Where personal information is transferred to a separate organisation outside the United Kingdom, we will ensure that an appropriate legal transfer mechanism and safeguards are in place where required.

These may include:

  • UK adequacy regulations.

  • The UK International Data Transfer Agreement.

  • The UK Addendum to the EU Standard Contractual Clauses.

  • Other legally recognised transfer mechanisms.

Where required, we will undertake appropriate assessments of international transfer risks.

7.3 Third-party integrations

When you connect services such as Instagram, WhatsApp, Google Calendar or other external applications, information may be processed by those providers in accordance with their own privacy policies and infrastructure arrangements.

You should review the privacy information of any third-party service you choose to connect.

We do not guarantee that information will be stored exclusively within the United Kingdom.

8. Third-party service providers

Paw Pilot relies on selected third-party providers to deliver and maintain its services.

These may include providers of:

  • Cloud hosting and application infrastructure.

  • Database and file storage.

  • Authentication and account management.

  • Email and notification delivery.

  • Payment processing.

  • WhatsApp and messaging services.

  • Instagram and Meta integrations.

  • Google Calendar integrations.

  • Analytics and monitoring.

  • Technical support and security services.

Where providers process personal information on our behalf, we will put appropriate contractual data protection arrangements in place.

Some third-party services may act as independent data controllers for their own processing activities.

A list of relevant subprocessors and additional information about their services will be made available through our subprocessor register.

9. Instagram, Meta and social media integrations

Paw Pilot may provide functionality allowing businesses to connect their Instagram and other Meta accounts.

Depending on the permissions granted and available functionality, this may involve accessing:

  • Account information.

  • Messages and conversations.

  • Communication metadata.

  • Supported social media interactions.

  • Other information made available through authorised integrations.

9.1 Authorisation

When you connect a social media account, you authorise Paw Pilot to access and process the information made available through the permissions you grant.

You must have appropriate authority to connect the account.

9.2 Third-party processing

Meta and Instagram operate independently of Paw Pilot.

Information shared with or processed by these services is subject to their own privacy policies and terms.

Their services, APIs, permissions and technical capabilities may change.

9.3 Disconnecting integrations

You may disconnect an integration through the available platform functionality or relevant third-party account settings.

Disconnecting an integration may prevent further information from being received through that connection.

Information already processed may remain subject to applicable retention requirements and the relevant provider's own policies.

10. WhatsApp and messaging integrations

Where WhatsApp integration is available, Paw Pilot may process message content, contact information, delivery information and associated communication records.

The information processed will depend on the integration functionality and permissions enabled.

You remain responsible for ensuring that you have the appropriate permissions and lawful basis to communicate with your customers.

WhatsApp and Meta operate independently of Paw Pilot and have their own privacy policies and service conditions.

We cannot guarantee uninterrupted availability of these integrations.

11. Google Calendar and connected applications

Where Google Calendar integration is enabled, Paw Pilot may access or exchange calendar information necessary to provide scheduling and calendar synchronisation functionality.

This may include:

  • Calendar events.

  • Event dates and times.

  • Scheduling information.

  • Event descriptions.

  • Other information authorised through the connection.

The permissions granted determine the information that may be accessed.

Google operates independently of Paw Pilot and processes information in accordance with its own privacy policies.

12. Cookies and website technologies

Our website and application may use cookies and similar technologies.

These may be used for:

  • Essential website functionality.

  • Authentication and session management.

  • Security.

  • Performance monitoring.

  • Website analytics.

  • Remembering preferences.

  • Marketing measurement, where applicable.

Strictly necessary cookies may be used where required to provide a service requested by you.

Non-essential cookies and similar technologies will be used in accordance with applicable consent requirements.

You can manage cookie preferences through the available cookie controls and your browser settings.

Blocking certain cookies may affect website or application functionality.

Further details about specific cookies, their providers and retention periods should be provided in our cookie information.

13. Marketing and communications

We may send communications relating to:

  • Account administration.

  • Subscription and billing.

  • Security and platform updates.

  • Service changes.

  • Customer support.

  • Product functionality.

  • Relevant business announcements.

Where permitted, we may also send marketing communications about Paw Pilot products and services.

You can opt out of marketing communications at any time using the unsubscribe option or by contacting us.

Opting out of marketing will not prevent us from sending essential service, security or account-related communications.

We will comply with applicable marketing and electronic communications legislation, including PECR where relevant.

14. How we protect personal information

We implement appropriate technical and organisational measures designed to protect personal information.

Depending on the service and infrastructure involved, these measures may include:

  • Secure authentication.

  • Access controls and role-based permissions.

  • Encryption in transit.

  • Encryption at rest where supported and appropriate.

  • Secure infrastructure and hosting.

  • Security monitoring and logging.

  • Backup and recovery procedures.

  • Software maintenance and security updates.

  • Controls over third-party providers.

We take reasonable steps to protect information against unauthorised access, accidental loss, alteration, destruction or disclosure.

However, no internet-based service can guarantee absolute security.

Customers are also responsible for maintaining secure login credentials, appropriate user permissions and secure devices.

15. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.

Retention periods depend on the type of information and the reason for processing.

Examples include:

Account information - While the account remains active and for an appropriate period afterwards

Subscription and billing records - In accordance with applicable financial and tax requirements

Customer and pet records - In accordance with the relevant business customer's instructions and contractual arrangements

Communication records - For operational, support and applicable legal requirements

Security logs - For an appropriate security and monitoring period

Marketing preferences - Until withdrawn or no longer required

Backups - In accordance with applicable backup and deletion cycles

Where Paw Pilot acts as a processor, the business customer is generally responsible for determining appropriate retention periods for its own customer information.

Following account termination, data may be retained for a reasonable period to allow export, fulfil legal obligations, resolve disputes or maintain security.

Information will be securely deleted or anonymised when no longer required, subject to applicable legal obligations and backup arrangements.

16. Your data protection rights

Depending on the circumstances and applicable law, individuals may have the right to:

16.1 Right of access

Request access to personal information we hold about you.

16.2 Right to rectification

Request correction of inaccurate or incomplete personal information.

16.3 Right to erasure

Request deletion of personal information where applicable.

16.4 Right to restrict processing

Request that we restrict the processing of personal information in certain circumstances.

16.5 Right to data portability

Request a copy of certain personal information in a commonly used, machine-readable format where the right applies.

16.6 Right to object

You have the right to object to processing based on our legitimate interests and to object at any time to the use of your personal information for direct marketing.

Where you object to direct marketing, we will stop using your information for that purpose.

16.7 Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

16.8 Rights relating to automated decision-making

Where applicable, you may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.

Paw Pilot uses automated operational functionality, including booking and assignment rules. These features are designed to support business operations and should not be assumed to constitute legally significant automated decision-making.

If we introduce functionality involving relevant automated decisions, we will provide appropriate information and safeguards.

16.9 Exercising your rights

You can contact us using the details in this policy to exercise your rights.

Where we act as a data processor on behalf of a business customer, we may direct your request to the relevant business, which is generally responsible for responding.

We aim to respond within the applicable legal timeframes.

We may need to verify your identity before responding.

Your rights are subject to applicable legal conditions and exemptions.

17. Data breaches and security incidents

If we become aware of a personal data breach affecting information for which we act as a controller, we will assess the incident and take appropriate action in accordance with applicable law.

Where we act as a processor, we will notify the relevant business customer without undue delay after becoming aware of a personal data breach affecting information processed on its behalf.

We will provide information reasonably available to assist the relevant controller in assessing the incident and meeting its reporting obligations.

Where required, the relevant controller will determine whether notification to the ICO or affected individuals is necessary.

18. Children's information

Paw Pilot is a business management platform intended for professional pet care businesses and is not designed to be used directly by children.

Business customers must not knowingly use the platform to collect children's personal information unless they have an appropriate lawful basis and have complied with all applicable legal requirements.

If we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps to address the issue.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services.

  • New platform functionality.

  • Changes to our infrastructure.

  • New third-party integrations.

  • Changes in data protection legislation.

  • Changes to our data processing practices.

Where changes materially affect how we process personal information, we will take reasonable steps to notify affected individuals.

The latest version will always be made available on our website.

20. Complaints and the Information Commissioner's Office

If you have concerns about how we handle personal information, we encourage you to contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office.

Information Commissioner's Office (ICO)

Website: https://ico.org.uk
Telephone: 0303 123 1113

You may also contact the ICO through its official website.

21. Contact information

For privacy-related enquiries, data protection requests or questions about this policy, please contact:

Paw Pilot
Wise Craig Ventures Ltd
United Kingdom

Website: https://pawpilot.tech
Application: https://app.pawpilot.tech

Data Processing Agreement

Provider: Wise Craig Ventures Ltd, trading as Paw Pilot

Paw Pilot DPA

1. Introduction

This Data Processing Agreement (“DPA”) forms part of the agreement between the customer using Paw Pilot (“Customer”) and Wise Craig Ventures Ltd, trading as Paw Pilot (“Paw Pilot”, “we”, “us” or “Processor”).

It governs how Paw Pilot processes personal data on behalf of the Customer when providing the Paw Pilot platform and associated services.

This DPA is intended to meet the requirements of Article 28 of the UK General Data Protection Regulation (“UK GDPR”) and applicable UK data protection legislation.

By creating an account, subscribing to or using Paw Pilot, the Customer agrees to this DPA where Paw Pilot processes personal data on the Customer’s behalf.

2. Parties and roles

For the purposes of this DPA:

  • Customer: The pet care business or other organisation using Paw Pilot.

  • Processor: Wise Craig Ventures Ltd, trading as Paw Pilot.

  • Controller: The Customer, when determining why and how personal data relating to its own customers, staff and business operations is processed.

The Customer generally acts as the Data Controller for personal data it enters into or manages through Paw Pilot.

Paw Pilot acts as a Data Processor when processing that information on the Customer’s documented instructions to provide the platform.

Paw Pilot may separately act as an independent Data Controller for information it processes for its own purposes, including account administration, billing, platform security, legal compliance and its own business communications. Those activities are addressed in the Paw Pilot Privacy Policy.

The parties acknowledge that their roles depend on the specific processing activity and are determined by applicable data protection law.

3. Subject matter and duration

The subject matter of processing is the provision of the Paw Pilot software platform and associated pet care business management services.

Processing may include:

  • Customer account and business administration.

  • Client and pet record management.

  • Booking and scheduling management.

  • Staff and walker management.

  • Customer communications and notifications.

  • Walk reporting, GPS tracking and activity records.

  • Payment and subscription administration where applicable.

  • Calendar, messaging and other authorised integrations.

  • Storage, retrieval, organisation and management of information entered into the platform.

Processing will continue for the duration of the Customer’s use of Paw Pilot and for any additional period required to fulfil contractual, legal or operational obligations.

4. Nature and purpose of processing

Paw Pilot processes personal data to provide, maintain, secure and support the platform.

This may include:

  • Collecting and storing information entered by the Customer.

  • Making information available to authorised users.

  • Processing bookings and scheduling activities.

  • Generating walk reports and customer updates.

  • Sending authorised notifications and communications.

  • Synchronising information with integrations enabled by the Customer.

  • Maintaining records and supporting platform functionality.

  • Providing technical support and troubleshooting.

  • Protecting the platform against unauthorised access, misuse and security incidents.

Paw Pilot will not use Customer personal data for purposes unrelated to providing the services, except where required by law or where Paw Pilot is acting as an independent Controller.

5. Categories of personal data

Depending on the Customer’s use of Paw Pilot, personal data may include:

Customer and client information

  • Names.

  • Email addresses.

  • Telephone numbers.

  • Home and service addresses.

  • Customer account details.

  • Booking and service history.

  • Customer communications and preferences.

Employee, contractor and walker information

  • Names and contact details.

  • User account and access information.

  • Roles and permissions.

  • Work schedules and assigned activities.

  • Activity and performance records entered into the platform.

Pet-related information

  • Pet names and descriptions.

  • Breed, age and relevant care information.

  • Behavioural notes and care instructions.

  • Feeding, medication or other care information entered by the Customer.

  • Photographs and videos.

  • Walk reports, GPS routes and activity records.

Pet information is not necessarily personal data in its own right. However, it may constitute personal data where it identifies or relates to an identifiable individual, such as an owner or member of staff.

Technical and operational information

  • User activity and platform usage records.

  • Device and technical information.

  • Login and access logs.

  • Integration and synchronisation information.

  • Support requests and troubleshooting records.

The Customer must not intentionally upload special category personal data or criminal offence data unless the parties have agreed an appropriate lawful basis, safeguards and additional processing arrangements.

6. Categories of data subjects

Depending on how the Customer uses the platform, data subjects may include:

  • The Customer’s clients and prospective clients.

  • Pet owners and authorised contacts.

  • Employees and contractors.

  • Dog walkers, pet sitters and other service providers.

  • Emergency contacts and other individuals whose details are entered by the Customer.

  • Other individuals whose information is legitimately entered into the platform.

7. Customer responsibilities

The Customer is responsible for:

  1. Ensuring it has a lawful basis for collecting and processing personal data.

  2. Providing appropriate privacy information to its clients, employees and other relevant individuals.

  3. Ensuring personal data entered into Paw Pilot is accurate and kept up to date.

  4. Ensuring that information is only entered where there is a legitimate business need.

  5. Configuring user permissions and access appropriately.

  6. Ensuring its staff and contractors understand their data protection responsibilities.

  7. Responding to requests from individuals exercising their data protection rights.

  8. Ensuring that any integrations enabled through Paw Pilot are lawfully configured and used.

  9. Complying with applicable data protection legislation.

  10. Informing Paw Pilot promptly if it becomes aware of an issue affecting the security or lawful processing of personal data held within the platform.

The Customer must not instruct Paw Pilot to process personal data in a way that would breach applicable data protection law.

8. Paw Pilot responsibilities

Paw Pilot agrees to:

  1. Process personal data only on the Customer’s documented instructions, including instructions given through the Customer’s use and configuration of the platform, unless required to do otherwise by applicable law.

  2. Ensure that individuals authorised to process personal data are subject to appropriate confidentiality obligations.

  3. Implement appropriate technical and organisational security measures.

  4. Respect the conditions governing the appointment of sub-processors.

  5. Assist the Customer, where reasonably possible, with requests from individuals exercising their data protection rights.

  6. Assist the Customer with its obligations relating to security, personal data breaches, data protection impact assessments and regulatory consultation, taking into account the nature of the processing and information available to Paw Pilot.

  7. Make available information reasonably necessary to demonstrate compliance with this DPA.

  8. Notify the Customer if, in Paw Pilot’s opinion, an instruction infringes applicable data protection law.

  9. Notify the Customer of relevant personal data breaches in accordance with this DPA.

9. Confidentiality

Paw Pilot will ensure that personnel authorised to access or process Customer personal data:

  • Are subject to appropriate confidentiality obligations.

  • Access personal data only where necessary for their authorised responsibilities.

  • Receive appropriate guidance regarding the handling of personal data.

  • Do not disclose Customer personal data to unauthorised individuals.

These obligations continue after the relevant individual’s access or employment ends.

10. Security measures

Paw Pilot will maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Measures will be appropriate to the nature, scope, context and purposes of processing and the risks to individuals.

These measures may include, where appropriate:

  • User authentication and access controls.

  • Role-based permissions.

  • Access restrictions between separate customer businesses.

  • Secure transmission of information.

  • Appropriate protection of stored information.

  • Security monitoring and logging.

  • Backup and recovery arrangements.

  • Procedures for identifying and responding to security incidents.

  • Secure development and maintenance practices.

  • Access limitation for personnel and service providers.

  • Periodic review of security measures.

Paw Pilot will review and update its security measures as reasonably necessary to maintain an appropriate level of protection.

No security measure can guarantee that a system will be completely free from vulnerabilities or security incidents.

11. Sub-processors

The Customer grants Paw Pilot general written authorisation to appoint third-party sub-processors where reasonably necessary to provide, operate, maintain or support the platform.

Sub-processors may provide services such as:

  • Cloud hosting and infrastructure.

  • Database and file storage.

  • Email and notification delivery.

  • Messaging and communications integrations.

  • Payment processing.

  • Monitoring, diagnostics and technical support.

  • Calendar and third-party integration services.

Paw Pilot will maintain a Subprocessor Register identifying relevant sub-processors and their processing purposes.

Paw Pilot will:

  1. Use written agreements with sub-processors containing data protection obligations appropriate to the services they provide.

  2. Require sub-processors to protect personal data to a standard consistent with this DPA.

  3. Remain responsible to the Customer for the performance of its sub-processors’ data protection obligations, to the extent required by applicable law.

  4. Notify the Customer of intended additions or replacements of sub-processors.

The Customer may object to a proposed new or replacement sub-processor on reasonable data protection grounds by notifying Paw Pilot within 14 days of receiving notice.

The parties will work in good faith to resolve any objection. If no reasonable solution can be agreed, the Customer may discontinue the affected service in accordance with the applicable service terms.

The current Subprocessor Register will be made available through the Paw Pilot website or another location notified to Customers.

12. International data transfers

Paw Pilot may use infrastructure and service providers located outside the United Kingdom.

Where personal data is transferred to, or made accessible from, a country outside the UK in circumstances requiring an international transfer safeguard, Paw Pilot will ensure that an appropriate transfer mechanism is in place in accordance with applicable data protection law.

Depending on the circumstances, this may include:

  • UK adequacy regulations.

  • The UK International Data Transfer Agreement.

  • The UK Addendum to the EU Standard Contractual Clauses.

  • Other lawful transfer mechanisms and supplementary safeguards where required.

Paw Pilot will take reasonable steps to ensure that relevant sub-processors provide appropriate protection for personal data.

13. Data subject rights

The Customer is responsible for responding to requests from individuals exercising their rights under data protection law.

These rights may include:

  • Access to personal data.

  • Rectification of inaccurate information.

  • Erasure of personal data.

  • Restriction of processing.

  • Data portability.

  • Objection to processing.

  • Rights relating to automated decision-making, where applicable.

Where Paw Pilot receives a request directly relating to personal data processed on behalf of the Customer, it will, where reasonably possible, refer the request to the Customer.

Paw Pilot will provide reasonable assistance to help the Customer respond to valid requests, taking into account the nature of the processing and the functionality available within the platform.

14. Personal data breaches

Paw Pilot will notify the Customer without undue delay after becoming aware of a personal data breach affecting personal data processed on the Customer’s behalf.

Where reasonably practicable, Paw Pilot will aim to notify the Customer within 48 hours of becoming aware of the breach.

The notification will include information reasonably available to Paw Pilot, such as:

  • The nature of the breach.

  • The categories of personal data affected.

  • The likely consequences.

  • Measures taken or proposed to address the breach.

  • Information needed to support the Customer’s investigation and regulatory obligations.

Paw Pilot will cooperate reasonably with the Customer in investigating and responding to the incident.

The Customer remains responsible for determining whether the breach must be reported to the Information Commissioner's Office or communicated to affected individuals.

15. Data protection impact assessments

Where reasonably necessary, Paw Pilot will provide assistance to the Customer with data protection impact assessments and related regulatory consultations concerning the processing performed through the platform.

The extent of assistance will depend on the nature of the processing and the information reasonably available to Paw Pilot.

16. Retention, return and deletion of data

The Customer remains responsible for determining how long it needs to retain personal data processed through Paw Pilot.

At the end of the Customer’s subscription or service agreement, the Customer may request the return or deletion of personal data processed on its behalf.

Subject to applicable law and technical limitations, Paw Pilot will:

  • Provide reasonable assistance with the return of Customer personal data.

  • Delete or arrange deletion of personal data processed on behalf of the Customer.

  • Retain information only where required by law or where necessary for legitimate and lawful operational purposes.

  • Ensure that any retained data is appropriately protected and not used for unrelated purposes.

Unless otherwise agreed, Paw Pilot will normally complete deletion of active Customer data within 90 days following termination of the service, subject to any necessary export arrangements and applicable legal requirements.

Data held in backups or archives may remain temporarily beyond the normal deletion period. Such data will remain protected, will not be restored or used except where necessary for disaster recovery or legal compliance, and will be deleted through the applicable backup retention cycle.

17. Audits and compliance information

Paw Pilot will make available information reasonably necessary to demonstrate compliance with this DPA.

The Customer may request reasonable information about Paw Pilot’s data processing and security arrangements.

Where the information provided is insufficient to demonstrate compliance, the Customer may request an audit or inspection, subject to:

  • Reasonable prior written notice.

  • Normal business hours.

  • Appropriate confidentiality arrangements.

  • Protection of other customers’ information and Paw Pilot’s security.

  • No unreasonable disruption to Paw Pilot’s operations.

  • The audit being limited to matters relevant to the Customer’s personal data.

Where possible, Paw Pilot may satisfy reasonable audit requests through existing documentation, security summaries, independent reports or other appropriate evidence.

The Customer will normally bear its own audit costs unless the audit identifies a material breach of this DPA attributable to Paw Pilot.

18. Assistance and cooperation

The parties will cooperate in good faith to support compliance with applicable data protection legislation.

Paw Pilot will provide reasonable assistance where the Customer needs information about the platform’s processing activities, security arrangements, sub-processors or other matters covered by this DPA.

Any assistance that requires substantial additional work beyond the normal operation of the platform may be subject to reasonable charges agreed in advance.

19. Liability

Each party is responsible for complying with the data protection obligations applicable to it under law and this DPA.

Nothing in this DPA excludes or restricts any liability that cannot lawfully be excluded or restricted.

Any contractual limitations of liability in the main Paw Pilot Terms and Conditions will apply to this DPA to the extent permitted by applicable law.

The parties acknowledge that statutory rights and remedies under applicable data protection legislation remain unaffected.

20. Termination and changes

This DPA remains in force for as long as Paw Pilot processes personal data on behalf of the Customer.

Paw Pilot may update this DPA where reasonably necessary to reflect:

  • Changes in applicable law or regulatory guidance.

  • Changes to the Paw Pilot platform.

  • Changes to processing activities or security measures.

  • Changes to sub-processors or service providers.

  • Other operational or legal requirements.

Material changes will be communicated to Customers through the platform, email or the Paw Pilot website.

Where a change materially affects the Customer’s rights or obligations, the Customer may raise an objection through the normal Paw Pilot support channels.

21. Governing law

This DPA is governed by the laws of England and Wales.

Any disputes arising from this DPA will be subject to the jurisdiction of the courts of England and Wales, subject to any mandatory legal rights or protections.

22. Company and contact details

Legal entity: Wise Craig Ventures Ltd
Trading name: Paw Pilot
ICO registration reference: ZC238755
ICO registration tier: Tier 1
ICO registration period: 4 September 2026 to 3 September 2027

Data protection contact: privacy@pawpilot.tech
Registered office: 35 Williams Road, Upper Heyford, ox255ax

For questions about this DPA or the processing of personal data, Customers should contact Paw Pilot using the data protection contact details above.

 

SCHEDULE 1: PROCESSING DETAILS

This schedule forms part of the Data Processing Agreement:

Subject matter - Provision of the Paw Pilot pet care business management platform

Duration - For the duration of the Customer's use of the platform and applicable retention periods

Nature of processing - Collection, storage, organisation, retrieval, use, transmission, deletion and other processing required to provide the platform

Purpose - Business management, bookings, scheduling, customer management, pet records, communications, activity reporting, integrations and platform support

Data subjects - Customers, pet owners, employees, contractors, walkers, authorised contacts and other individuals entered by the Customer

Personal data - Contact details, account information, booking information, service records, staff information, communications, GPS and activity information, photographs, videos and other information entered by the Customer

Special category data - Not intended to be routinely processed. Additional agreement and safeguards are required before such processing is undertaken

Processing location - Locations used by Paw Pilot and its authorised sub-processors, as described in the Subprocessor Register and relevant transfer arrangements


SCHEDULE 2: TECHNICAL AND ORGANISATIONAL MEASURES

Paw Pilot will maintain appropriate safeguards, which may include:

  1. Access control: Access to Customer data is restricted through user accounts, authentication and permissions.

  2. Business separation: Customer data is logically separated to prevent unauthorised access between businesses.

  3. Transmission security: Appropriate protections are used when personal data is transmitted between users, the platform and relevant services.

  4. Data protection: Personal data is protected through appropriate infrastructure and application security controls.

  5. Monitoring: Relevant platform activity and technical events may be logged and monitored.

  6. Resilience: Appropriate backup, recovery and continuity arrangements are maintained.

  7. Incident response: Procedures are maintained to identify, investigate and respond to suspected security incidents.

  8. Personnel controls: Access by authorised personnel is limited to legitimate operational requirements and subject to confidentiality obligations.

  9. Supplier controls: Relevant third-party service providers are subject to appropriate contractual and data protection requirements.

  10. Review: Security arrangements are reviewed and updated as the platform and associated risks evolve.

 

End of Data Processing Agreement

Paw Pilot
A trading name of Wise Craig Ventures Ltd
Version 1.0 | 7 November 2026

Subprocessor Register

Paw Pilot uses selected third-party service providers to help deliver, maintain and support the platform. These providers may process personal data on our behalf where necessary to provide their services.

We maintain a record of the subprocessors we use and the services they provide. A current copy of our Subprocessor Register is available on request.

To request a copy, please contact us using the privacy contact details provided on this website.

We will notify business customers of material changes to our subprocessors in accordance with the applicable Data Processing Agreement.

bottom of page