Privacy Policy
Last updated: 6 October 2026
Newsletter privacy notice reference: taggy-newsletter-2026-10-06-v1
1. Data controller
The Taggy service is created and operated by TM Studio — Mattia Timperio, Italian tax code TMPMTT99P20G482I (the “Controller”). For enquiries and support: Instagram @taggy_pet.
2. Data processed
The website may process information voluntarily provided by users, such as first name and surname, email address, sign-in credentials, details needed to place an order and personalise Taggy, the owner’s contact details and information about the pet. The information published in the pet’s digital profile will be chosen by the user to enable contact if the pet is found.
3. Purposes and legal bases
Data is processed to provide the requested service, create and manage accounts, personalise tags and digital profiles, handle orders and support, and comply with legal obligations. Consent to publish the NFC profile is separate from acceptance of the privacy information for accounts and orders.
Signing up to the Taggy Newsletter is voluntary: we use the name and email address you provide for informational and promotional messages about Taggy news, updates and initiatives. The legal basis is explicit, optional consent, requested through an unchecked checkbox and separate from consent for accounts, orders and public profiles. Subscription is not required to purchase or use the service. You can withdraw consent at any time using the unsubscribe link in Newsletters or by contacting the Controller.
Activating the Newsletter does not automatically subscribe existing users or subscribers, backdate consent or import subscribers from test environments. Missing consent for legacy users remains missing until the person makes an explicit choice.
4. Retention and security
Data will be retained for as long as necessary for the purposes for which it was collected and, where required, for the periods specified by law. Passwords are stored as hashes. We record the date and version of the privacy notice accepted at registration; for orders, the version and acceptance are stored with the order details and date. The restricted management area allows the Controller to view customers and orders and generate non-fiscal payment receipts. Orders and profiles are stored in the service database; access to order details requires an authorised session or the corresponding private token.
For the Newsletter we record the consent event, date, source and privacy notice reference, together with subscription status and withdrawal events. Promotional messages stop after unsubscription; data needed to document choices and suppressions may be retained to prevent unauthorised messages and demonstrate consent management, within the stated purposes.
5. Recipients and service providers
Technical providers for hosting, databases and payments may be used to deliver the service. The service uses Netlify for hosting and server functions, Neon/Postgres for accounts and orders and, when enabled, Stripe Checkout for online payments. Card details are entered on Stripe Checkout.
Taggy uses Brevo as a technical provider to send and manage Newsletters and operational/transactional emails. Brevo receives the email address and data necessary for message content and handling. Operational emails relating to the service, including order administration, are separate from the Newsletter and do not require promotional consent.
We process technical events returned by Brevo, such as sending, delivery, opens and clicks when available, errors or bounces, spam reports and unsubscriptions, together with message/campaign identifiers and timestamps. These events allow us to manage sending status, withdrawals and suppressions, and prevent duplicates and unwanted messages. No website visitor profiling system is introduced. For provider information: Brevo Privacy Policy.
6. Public Taggy profile
Configuration collects a photo, name, sex, date of birth, breed, coat, microchip number (or its unavailability), weight, status, six pieces of behavioural information, owners’ first names and surnames, phone numbers, WhatsApp preference and other approach instructions. The date of birth allows age to be calculated. This data is saved with the order to create the chosen NFC website or static PDF. The basket and configured photo are also stored in the customer’s browser. The delivery address and order email are not automatically published in the profile.
The purpose of the public profile is to allow whoever finds the pet to view information authorised by the owner and contact them. Before publication, users should carefully choose which details to make visible.
7. Data subject rights
In the circumstances provided for by the GDPR, data subjects may request access, rectification, erasure, restriction, portability and objection to processing, and may withdraw consent without affecting the lawfulness of prior processing. They may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
8. Minors
The e-commerce service is intended for people who can validly enter into online purchases. Information about minors must not be entered in public pet profiles.
9. Updates
This notice will be updated when services, providers or processing purposes change. The indicated Newsletter version identifies the text used to record new Newsletter consent without changing historical account and order acceptances.