Alfasys Mascotas
This policy explains how Alfasys Mascotas collects, uses, retains and protects personal
information through its website [SITE DOMAIN] and its mobile app
(package com.alfasys.mascotas), who it is shared with, and how you can exercise your rights.
Data controller
1. Information collected through the website
The website is informational. You do not need an account or to provide personal data to visit it.
- Technical browsing data: like any website, the hosting server may automatically log technical data (IP address, browser and device type, date and time of the visit, pages requested) for operation and security purposes.
- Forms: the site currently has no forms. If one is added in the future (for example, a contact or appointment request form), the data you enter—such as name, phone, email and message—will be used only to handle your request.
- Cookies and third-party tools: the site currently does not use its own cookies or analytics tools. Fonts are loaded from Google Fonts, which means your browser connects to Google’s servers. If cookies or tools such as Google Analytics are used in the future to improve the site and analyze its use, they may collect technical and statistical information about browsing (device, browser, approximate location, pages visited). That information will be used only to understand how the site is used and to improve it, and we will update this policy accordingly.
- WhatsApp, social networks and maps: the site may include links to external services such as WhatsApp, Facebook, Instagram or Google Maps. When you tap them you leave the site; the site does not store your data because of that click, and use of those services is subject to their providers’ privacy policies.
- Contact: if you write to us by email or WhatsApp, we receive the data you choose to share (for example, name, phone, email and the content of your message) and use it to reply to you.
2. Information collected through the mobile app
| Data | When | Purpose |
|---|---|---|
| First and last name, email, phone number and password | When you sign up or edit your profile | Create and authenticate your account, contact you about orders and appointments, recover your password. |
| Delivery addresses (province, canton, district, exact directions) | When you save an address | Deliver your orders and assign them to a delivery route. |
| Precise location (latitude and longitude) | Only when you tap “use my location” or pick a point on the map while saving an address | Pinpoint the delivery address (see section 5). |
| Information about your pets: the text you write on a custom tag (for example, your pet’s name or a contact phone) and anything you choose to write about them in appointment or order notes | When you design a tag or add notes | Make the tag exactly as you designed it and care for your pet properly. The app does not create a pet profile or record. |
| Service appointments (e.g. grooming): service, date, time, name, phone and optional notes | When you book an appointment | Schedule, confirm and provide the appointment. |
| Order details: name, phone, delivery address, delivery type, requested time and optional notes | When you confirm an order | Prepare, deliver and track the order. |
| Order and appointment history, ratings and comments | While using the app | Show your history, track orders and improve our support. |
| Photos: payment receipts and custom pet-tag designs | When you take or select them and submit them | Verify bank-transfer payments and manufacture the custom product. |
| Payments: chosen method (cash, bank transfer, SINPE or card), amount, reference number, transfer receipt and, if paying cash, the bill you will pay with | When you confirm an order | Verify the payment, prepare change and meet accounting and tax obligations. |
| Sign-up technical data: IP address and device or browser type (user agent) | When you create your account | Security and prevention of fraud or abusive sign-ups. |
| Technical operating data (server error and usage logs) | While using the app | Detect failures and keep the service running. |
Your password is stored hashed, so no one at Alfasys can see it. On your phone the app stores your session and basic profile details so you don’t have to sign in every time; they are removed when you sign out or uninstall the app.
We do not collect payment card data inside the app (card payments are made at delivery), we do not collect advertising identifiers, and we do not show third-party ads. The app does not send push notifications.
Device permissions:
- Internet: to communicate with our servers.
- Camera: to photograph a payment receipt or a design. Optional; you can also choose an image from your gallery.
- Location (precise and approximate): to capture your position when saving an address. You may deny it and type the address manually.
3. How we use the information
We use personal data only to:
- Answer your inquiries, information requests and appointments.
- Create and manage your app account.
- Process, deliver and track your orders.
- Verify payments and meet legal, accounting and tax obligations.
- Contact you about your orders, appointments or requests.
- Email you a password recovery code when you request one.
- Keep the website and app secure, prevent fraud and improve how they work.
We do not sell your personal data or use it for third-party advertising.
4. Sharing with third parties
Personal data provided by users is used mainly by Alfasys to handle their inquiries, information requests, orders and appointments. When necessary to provide these services, certain data may be processed by technology providers that serve Alfasys, such as web hosting, database, email or communication tools. These providers only have access to the information needed to provide their services. Specifically:
- Microsoft Azure (Mexico Central region): hosting of the application, database and files, sending emails (e.g. the password recovery code) and technical operating logs.
- Google Maps Platform: to display maps and select the delivery location in the app.
- Website hosting provider [HOSTING NAME] and Google Fonts: to run the website.
- Alfasys couriers: receive the name, phone number and delivery address of the order assigned to them.
- Authorities, when required by law or court order.
When you open external links from the website or the app (WhatsApp, Waze, Google Maps, Facebook, Instagram or other social networks) you leave our services and those providers’ privacy policies apply.
5. Location
The website does not request your location. The app only accesses your location when you choose to—by tapping “use my location” or picking a point on the map—to save a delivery address. We do not track your location in the background or use it for any other purpose. You can deny the permission and type the address manually, or revoke it at any time in your device settings.
6. Data retention and deletion
Personal data is kept for as long as needed to fulfil the purpose for which it was collected and, where applicable, for the periods required to meet legal obligations or address potential liabilities. When it is no longer needed, it is deleted or anonymized according to technical possibilities and applicable obligations.
- Inquiries received via the website, email or WhatsApp: kept for as long as needed to follow up on the request and for a reasonable period afterwards for administrative purposes [e.g. 12 months], unless the law requires keeping them longer.
- App account data: kept while your account is active. If you delete it, we erase your personal data and associated files. We may retain, for the period required by law, only the minimum billing and order information needed for tax and accounting obligations, without unnecessary contact details.
7. User rights
The person the personal data belongs to (the data subject) may request information about how their data is processed and, where applicable, request access, correction, update or deletion of their data, or object to its processing, in accordance with applicable law.
In the app you can update your name, email and phone from My account → Edit profile and remove addresses from My addresses. For any other request, write to [PRIVACY EMAIL] including:
- Your full name.
- The contact method you gave us your data with (email or phone).
- A description of your request.
For security we may ask you to confirm your identity. We will reply within [10] business days. If you believe your request was not handled properly, you may contact the Costa Rican data protection authority (PRODHAB). [Confirm the applicable regulation for your business with your legal advisor.]
8. Security
Communication with the website and between the app and our servers is encrypted (HTTPS). Access to each account’s data requires authentication, passwords are stored hashed, and only authorized staff access the information needed for their work. No system is 100% infallible; if we detect a breach affecting you, we will notify you.
9. Children
The website and app are not directed to anyone under 18. If we find that an account belongs to a minor without guardian authorization, we will delete it.
10. Changes to this policy
We may update this policy; the current version will be published at this same address with its update date. For material changes we will notify you in the app.
11. Contact
For any question about privacy or your personal data, write to us at [PRIVACY EMAIL].