Privacy Notice

The controller for the Wefido service is Connetter di Saymon Patryk Grabowski, VAT number 02716910415, registered at Via Alcide de Gasperi 33, 61038 Terre Roveresche (PU), Italy. The service is available at wefido.it. Operational privacy requests can be sent to privacy@wefido.it; formal certified email can be sent to connetter@pec.net.

• Account data: name, email, protected password, account type, plan, verification status, language and theme preferences, active sessions and security records.
• Business and profile data: legal or public name, category, services, breeds, professional contact details, locations, descriptions, photos and videos, access requests, verification and management status.
• Imported data: public or user-provided sources, source labels, addresses, coordinates, accuracy level, collection date and review notes.
• Search and map data: search terms, category, selected area, filters and approximate or precise coordinates depending on access state and preferences.
• Submitted content: Pet Board publications, stories, posts, editorial content, community questions, professional answers, reviews, reports and platform messages.
• User uploads: images, videos, attachments, verification documents, evidence for profile access requests, screen images, essential file information and data needed for publishing, security, optimisation, retention and removal.
• Private pet diary: pet details, daily notes, diet, weight, behaviour, medication, symptoms, health events, seizures, reminders and calendar. Sensitive fields are protected at application level.
• Pet treatment and monitoring: medication, dosage, frequency, times, duration, recorded administrations, stock and refills, alert thresholds, clinical parameters, attachments and comparisons requested by the user.
• Subscription and payment data: selected plan and cycle, subscription status, provider customer, checkout, subscription and invoice identifiers, amounts, currency, discounts, payment outcome, service period and order history. Wefido does not store full card details.
• Technical data: security records, pseudonymous identifiers used to prevent abuse, optional usage statistics covering visited pages, clicks, duration and scrolling, session data, email verification, password recovery and verification through DNS or files.
• Optional Ads data: first-party pseudonymous identifier, viewed pages and content, searches, saves, follows, shares, positive or negative reactions, ad interactions, general device class and usage time bands. This data is collected only after profiling and marketing consent.
• Documents uploaded to request profile management manually, such as company records or ownership evidence, are available only to the authorised team.

• Without an account, people can browse public results, general content and a map with limited information.
• An account may be required to interact, save profiles, send messages, publish reviews, open requests or view contact details and precise information.
• Coordinates shown to guests may be aggregated or approximate. Signed-in users may see more precise details where available and permitted.
• Unclaimed profiles generally do not expose direct contacts. For veterinarians, animal shelters and animal welfare organisations, an eligible phone number from a checked public source can be revealed by signed-in users for free before the profile is claimed. Source-derived numbers are distinguished from numbers confirmed by the profile manager. Report errors or request correction or removal through the profile report or privacy contact.

• Create and protect accounts, sessions, registration, sign-in, password recovery and session revocation.
• Manage professional profiles, access requests, verification, publication in professional search and source checks.
• Display local search, public profiles, Pet Board publications, stories, community and editorial content and results related to a user query.
• Manage maps, conversion of addresses into coordinates, grouping of nearby results, areas selected on the map and location-based ordering.
• Moderate Pet Board publications, reviews, messages, community and editorial content before or after publication where necessary.
• Manage files, attachments, photos and videos uploaded by users, including security checks, formats, compression, previews, publishing, removal and retention of necessary evidence.
• Prevent spam, abuse, false content, unauthorised contact, improper scraping and unauthorised entry of sensitive data.
• Let owners keep a private pet diary and, through an explicit revocable choice, share or export it for selected professionals.
• Manage purchase, activation, renewal, cancellation, payment recovery, operational billing, support and subscription history.
• Calculate aggregate professional-profile statistics, including visits, impressions, contact requests and clicks on public channels, to provide reports to profile owners.
• With separate consent, build and update a probabilistic interest profile to select, limit repetition and explain relevant Wefido Ads for guests and registered users.

• In the current version, creating and using a Wefido account is restricted to people aged 18 or over. Minors may browse public pages without an account, with adult supervision where appropriate.
• In Italy, for online services offered directly to minors and processing based on consent, a person aged 14 or over may independently give privacy consent; below 14, consent must be given by the person holding parental responsibility. This privacy threshold does not automatically confer full contractual capacity.
• Wefido does not yet offer accounts or features for users aged 14 to 17. Before doing so, it will introduce a dedicated process, age-appropriate information, reasonable age checks, safety limits and, where necessary, permission from a parent or guardian.
• Data, images, documents, precise location or health information concerning a minor must not be entered without a lawful basis and the necessary permissions.

• Wefido may import or standardise data already public, supplied by users or obtained from sources such as public registers, websites, OpenStreetMap or Nominatim, Google or other accessible databases.
• Sources may be shown with short labels such as website, ENCI, Google or OpenStreetMap. Full source addresses, review notes and import evidence may be restricted to authorised personnel, verified owners or eligible plans.
• Coordinates are used for local search and maps. They may come from an address, automatic geocoding, manual review or information supplied by the owner.
• Imported data may be incomplete or require verification. Where applicable, the owner can request management access and ask for correction, completion or removal.

• Performance of a contract and pre-contractual steps: registration, authentication, profiles, pet diaries, messages, profile management, support, plans, orders and features requested by the user.
• Legal obligations: tax and accounting requirements, responses to authorities, consumer protection and legally required retention.
• Legitimate interests: security, fraud and abuse prevention, service continuity, defence of rights, quality checks, moderation and aggregate statistics. Wefido balances these interests against individual rights and allows objections where applicable.
• Consent: non-essential usage statistics, optional personalisation, any promotional communications and sharing that requires a free choice. Consent may be withdrawn at any time without affecting earlier lawful processing.
• Separate consent for Wefido Ads profiling and marketing: pseudonymous events, inferred interests and behavioural ad selection. Without consent, or after withdrawal, generic or contextual ads remain available without a behavioural profile.
• Links for email verification and password recovery last 45 minutes; API access sessions last up to 30 days. Security records and events are retained as needed to prevent abuse, perform checks and defend rights.
• Account data and pet diaries are retained while the account is active or until deletion is requested, subject to temporary backups, disputes and legal obligations. Sharing ends when permission is withdrawn.
• Account deletion requested through the account panel includes a 14-day reconsideration period. After that, the account and linked private data are deleted, except data that must be retained for legal obligations, disputes or defence of rights; retained data is separated from the operational account and minimised.
• Public content and profiles remain available while published or needed to manage the relationship. Orders and administrative documents are retained for applicable tax and civil-law periods.

• Data comes from the individual, a profile owner, interactions with the service, declared public sources or people requesting a correction, profile access or verification.
• Search, ordering, suggestions, anti-spam and moderation may use automated rules. These systems support platform operation and checks but do not make solely automated decisions with legal or similarly significant effects under Article 22 GDPR.
• The Ads profile assigns probabilistic scores that decrease over time to non-sensitive topics based on permitted interactions. Main factors may appear in the ad explanation. Users can withdraw consent and request access, object to or delete the profile.
• When a significant restriction results from an automated alert, the user may request human review through the stated support or appeal channels.

• Platform messages are processed for delivery, notifications, support, security and prevention of spam, abuse, scams, unauthorised contact and breaches of the Terms.
• Wefido may automatically check text, frequency, links, attachments, technical patterns and risk signals to block spam, phishing, harassment, illegal content, attempts to bypass the platform or misuse of contact details.
• Authorised personnel may access messages, reports or attachments only when necessary: user reports, automated alerts, support requests, abuse reviews, appeals, platform security, legal obligations or defence of rights.
• Messages are not accessed freely or systematically for curiosity, advertising profiling or purposes unrelated to security and service management. Access is restricted to authorised personnel and logged where technically available.
• Messages and attachments must not contain unnecessary sensitive data, credentials, third-party documents, irrelevant health data, unauthorised children’s data, bank details or information not essential to the request.

• Anyone uploading material remains responsible for its lawfulness, accuracy, relevance and the necessary rights.
• Uploaded files may undergo security checks and moderation before or after publication to prevent harmful software, spam, irrelevant content, rights violations, exposure of personal data and prohibited material.
• Wefido may generate previews, resize images, compress photos and videos, read essential technical file information, restrict formats or sizes and remove content where needed for security, moderation or compliance with the Terms.
• Documents used for management requests, verification or appeals are treated as confidential and are not published unless required for a different legitimate operational purpose.

• Subscription payments are handled through Stripe. During checkout, payment and subscription management, Stripe processes the required data under its own privacy notice; Wefido receives and stores the identifiers and outcomes needed to reconcile the service.
• Wefido stores the selected plan and cycle, subscription status, necessary Stripe identifiers, amounts, currency, discounts, period dates, invoice outcomes and technical payment notifications. It does not receive or store the full card number or security code.
• Authorised administrators may view orders, amounts, status and the associated account for support, accounting, security and management of successful or failed payments.
• Administrative and accounting data is retained for the period required by applicable law and to establish, exercise or defend rights. Technical identifiers also remain available while needed for subscription management and disputes.

• Data may be processed by authorised personnel, technical collaborators, advisers and providers required for hosting, databases, storage, email, security, backups, monitoring, CAPTCHA and service maintenance.
• Stripe processes data required for checkout, recurring payments, technical invoices and the subscription portal as an independent controller or processor according to the service and applicable agreements.
• Cloudflare is used for DNS, CDN, network protection and Turnstile as an anti-abuse measure for registration and public forms.
• Additional providers may be used to host the service, store data, send email, create backups and monitor its operation. Current information about relevant recipients can be requested through the privacy contact details.
• Providers act as processors or independent controllers according to the service they perform and the applicable agreements.
• Where a provider transfers data outside the European Economic Area, Wefido will use a lawful transfer basis and safeguards such as adequacy decisions or standard contractual clauses.

Wefido’s public map uses location data available on the platform and does not embed Google Maps as the site map. Google Maps links, place identifiers or Google verification are optional external data supplied by the owner or collected through authorised integrations.

The pet diary helps organise observations, reminders, diet, calendar, symptoms, treatment, doses, stock, attachments and changes over time, such as seizures or other recurring events. Summaries, comparisons and stock estimates are organisational tools, not diagnoses or prescriptions. The user decides whether to export or share the diary with a professional and can withdraw sharing. In a health emergency, contact a qualified professional immediately.

From the Privacy panel, you can obtain a machine-readable JSON export and request or cancel account deletion. You may also request access, correction, restriction, objection, portability and withdrawal of consent where applicable by emailing privacy@wefido.it. A request must allow Wefido to identify you reasonably without collecting excessive data. Wefido responds within GDPR time limits and may retain data still required for legal obligations, security or defence of rights. You may complain to the Italian Data Protection Authority (garanteprivacy.it) or apply to the competent court.

Wefido applies technical and organisational measures proportionate to risk, including access controls, separation of confidential materials, application-level encryption of sensitive fields where provided, hashing of anti-abuse identifiers, backups and security-event logging. No system is risk-free. If a personal-data breach occurs, Wefido applies the assessment, notification and communication duties under Articles 33 and 34 GDPR.

This notice may be updated when the service, providers or law changes. The update date appears at the top. If a change materially affects processing or individual rights, Wefido provides suitable notice and, where required, obtains new consent.