PimpYourPaws Privacy Policy — Australia

Version 2 · Effective 3 October 2026

This policy explains how Illustrious & Co Trading Pty Ltd (ACN 657 369 796, ABN 48 657 369 796), trading as Illustrious Systems, which operates PimpYourPaws ("PimpYourPaws", "we") handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

• Account details: name, email address, mobile number, country, time zone, profile photo.
• Household details: household name, members and their permissions, address, emergency contacts.
• Home access instructions: for example a key location or alarm code. Stored encrypted.
• Pet details: names, species, breed, age, photos, health conditions, medications, vet details, care and emergency plans, documents you upload.
• Carer details: profile, services, prices, availability, service area, and the documents you submit for verification — which can include identity documents and police or working-with-children check results. A criminal record is sensitive information; we collect it only with your consent and only to verify you.
• Bookings, payments and payouts: what was booked, when, for how much, and its status. Card details are collected and held by our payment provider, Stripe; we never see or store your full card number.
• Messages between owners and carers, and anything you report to us.
• Technical information: sign-in and session data, and essential cookies that keep you signed in. We do not use advertising cookies.

2. Why we use it

To run the marketplace: create and secure your account; let households share information among the people they choose; match, book, pay and pay out; give a carer the care details for a confirmed booking; verify carers; send booking and account emails; handle reports and keep people safe; meet our legal, tax and accounting obligations. We send marketing only if you opted in, and you can opt out at any time in Settings or from any marketing email.

3. Who sees it

• Carers see a booking's care details and, during the booking window, the home access instructions — a snapshot taken when the booking is confirmed, for that booking only. They do not get ongoing access to your household's records.
• Household members see what the household admin allows.
• Our team sees only what their role needs. Every view of home access instructions is logged.
• Service providers who process information for us: Supabase (database and storage), Cloudflare (hosting), Stripe (payments and carer payouts), Resend (email) and [TBC — CRM provider] (marketing, only if you opted in).

We do not sell personal information.

4. Overseas disclosure (APP 8)

Some providers store or process information outside Australia, including in the United States (Stripe, Cloudflare, Resend). [Legal review: confirm the production database region — the intended location is Sydney — and list any other countries.]

5. How long we keep it

We keep your information while your account is open. When you delete your account, we delete or anonymise it as described in section 6. Booking, payment and ledger records are kept in anonymised form for [TBC] years to meet tax and financial record-keeping obligations. [Legal review: confirm the retention period.]

6. Deleting your account

Ask from Settings → Account. After the cooling-off period shown when you ask, during which you can cancel:

• your profile is anonymised and you can no longer sign in;
• for a household where you are the only member, the household's addresses, home access instructions, emergency contacts, pet records and documents are deleted; if the household had bookings, the household and pets are kept only as anonymised entries linked to those bookings;
• if you are a carer, your profile is anonymised and taken down and your verification documents are deleted (we keep a record that a check took place);
• messages you sent are replaced with "Message removed by sender";
• photos and documents you uploaded are deleted from storage.

Deletion waits until any booking in progress has finished and any money owed to you has been paid out.

7. Security

Information is encrypted in transit; home access instructions are also encrypted at rest. Access is restricted by role and household permission and enforced in the database itself.

8. Your rights

You can ask to access or correct the personal information we hold about you (APPs 12 and 13) by emailing privacy@pimpyourpaws.com. We respond within 30 days.

9. Complaints

Email privacy@pimpyourpaws.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Contact

Illustrious & Co Trading Pty Ltd (ACN 657 369 796, ABN 48 657 369 796), trading as Illustrious Systems · Unit 711, 95 Linton Street, Kangaroo Point QLD 4169, Australia · privacy@pimpyourpaws.com