Privacy Policy

During the closed beta, BoopMart is operated as an independent, not-yet-incorporated project by its founders. No legal entity (NIF/CIF), registered address, or companies-registry entry exists yet; these will be published on this page before BoopMart accepts any paying customer. For any question about your personal data write to hello@boopmart.es.

During the closed beta we only process the minimum data needed to run the test environment (account email and, where applicable, pet profile data you voluntarily provide). The list below describes the categories of personal data we plan to collect once BoopMart launches commercially and starts accepting real orders:

• Identity data: name, surname, email, phone number.
• Account data: encrypted password, preferences, language.
• Payment data: processed directly by Stripe. We do not store card numbers.
• Shipping data: postal address, postal code, city, province.
• Pet data: name, species, breed, age, weight, allergies, health conditions.
• Navigation data: IP address, browser type, pages visited, cookies (see Cookie Policy).
• Order data: purchase history, products, amounts.

During the closed beta we only process your data to run the test environment, answer support enquiries and improve the product. The purposes listed below describe how we plan to use your data once BoopMart launches commercially and starts accepting real orders:

• To manage and process your orders and deliveries.
• To manage your user account and profile.
• To personalize recommendations based on your pet profile.
• To process payments securely via Stripe.
• To send you transactional communications (order confirmation, shipping, delivery).
• To handle support requests and inquiries.
• To comply with legal and tax obligations.

• Contract performance: once BoopMart launches commercially, to process orders, manage your account, and handle deliveries.
• Consent: for marketing communications and non-essential cookies.
• Legitimate interest: to improve our services and prevent fraud.
• Legal obligation: to comply with tax and consumer law requirements.

We share data with the following data processors, all based in countries with adequate protection or with standard contractual clauses:

• Stripe (payment processing) — PCI DSS certified.
• Resend (transactional email delivery).
• Vercel (web hosting and CDN).
• Anthropic (AI query processing for product recommendations).

• Account data: for as long as your account is active, plus 30 days after deletion request.
• Order data: 5 years (tax obligation).
• Payment data: not stored (managed by Stripe).
• Cookies: see Cookie Policy.

You can exercise the following rights at any time by emailing hello@boopmart.es:

• Access: obtain confirmation of whether we process your data and receive a copy.
• Rectification: correct inaccurate data or complete incomplete data.
• Erasure: request the deletion of your personal data.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data in certain circumstances.
• Restriction: request the limitation of processing of your data.

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

We reserve the right to update this policy. Any changes will be posted on this page with the new update date.