Privacy Policy

1. Who We Are and Scope

Bhespoke L.L.C. (“pedgree,” “we,” “us,” or “our”) operates pedgree.com and the related pedigree-register service for breed clubs, societies, and registries. This Policy applies to information we process through the Service. It does not govern third-party services, including Stripe, whose own privacy policies control their processing.

Each Club decides what it records on its Register, including information about its Members and about the owners and breeders of its animals. For that information, the Club is responsible for having a lawful basis to record it and for answering requests about it, and we process it on the Club’s behalf to provide the Service. Terms used in this Policy have the meanings given in our User Terms and Conditions.

2. Personal Information We Collect

2.1 Information You Provide

• Account information, including email address, hashed password, display name, profile photograph, two-factor authentication settings, and communications preferences.
• Club and Register information, including Club name, web address, logo, colors, fonts, contact details, settings, and the records a Club keeps: animal names, registration numbers, dates, microchip numbers, photographs, pedigrees, litters, health results, titles, certificates, and the names and contact details of owners and breeders.
• Waitlist information, including your email address, the types of animal you breed, and the size of Register you expect to keep.
• Support, copyright, moderation, and other communications, including information submitted through the contact page, forms, or correspondence.
• Transaction-related information, including Stripe customer identifiers, subscription status, billing history, and limited card-display information such as brand and last four digits. We do not store full card numbers or bank credentials.

2.2 Information Collected Through Use

• Register activity, including the records added, changed, or deleted, by whom, and when, kept as an audit history.
• Operational and security logs, including IP address, device and browser information, requested URL, timestamps, response codes, sign-in events, upload events, and certificate issuing.
• Region and preference information, including language, currency, locale, and time zone.
• Cookie, local-storage, and similar-technology information described in Section 8.

2.3 Content Processing

We store uploaded photographs, logos, and fonts and create resized copies to display them. We render certificates and pedigree charts from Register records, and keep a copy of each certificate as issued. We calculate inbreeding coefficients from the records entered and may store the results to display them quickly. When a Club deletes a record, we may keep it for a period so the Club can restore it, subject to the retention described in Section 6.

3. How We Use Personal Information

• Provide, personalize, maintain, and secure accounts, Clubs, Registers, certificates, public lineage pages, subscriptions, and payments.
• Process transactions, provide receipts, apply plan limits, and prevent fraud and abuse.
• Calculate inbreeding coefficients and other figures, and provide Clubs with counts and aggregate statistics about their Registers.
• Communicate about billing, service changes, security, support, moderation, copyright claims, invitations from the waitlist, and occasional product updates.
• Monitor, troubleshoot, test, analyze, and improve the Service, including through aggregated or de-identified analytics.
• Comply with law, enforce agreements, protect rights and safety, preserve evidence, and respond to lawful requests.

We do not sell personal information, use personal information for cross-context behavioral advertising, share identifiable information with data brokers, or train general-purpose artificial-intelligence models on Registers or user Content.

4. Legal Basis for Processing

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you or with your Club, comply with legal obligations, protect legitimate interests such as security and service improvement, and act on consent where consent is required, such as joining the waitlist. You may withdraw consent for future processing, but withdrawal does not affect prior lawful processing.

5. How We Disclose Personal Information

We disclose only information reasonably necessary for the purpose described:

• Stripe, for payment processing, recurring billing, and fraud prevention.
• Hetzner and other hosting or infrastructure providers, for servers, networking, backups, maintenance, and security.
• Cloudflare, including network delivery and security, R2 object storage where used, and Turnstile bot detection on selected public forms.
• Google Fonts, which delivers the typefaces used on pedgree.com and receives your IP address and browser information when it does.
• Transactional email providers, including Mailtern, SMTP2GO, or replacement providers, for receipts, password resets, security notices, waitlist confirmations, and service communications.
• Professional advisers, auditors, insurers, and vendors working under appropriate confidentiality and data-protection obligations.
• Your Club and its Club Administrators, who can see the information on their Register and their Members’ accounts. We do not provide Clubs with payment credentials.
• Anyone who opens a public lineage page, for example by scanning a certificate’s QR code, who sees the animal’s identity and ancestry as printed on a certificate, and not owner, breeder, or contact details.
• Government authorities, courts, counterparties, or other persons when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish, exercise, or defend legal claims.
• A buyer, successor, lender, or adviser in connection with a merger, financing, reorganization, sale, or similar transaction, subject to appropriate safeguards.

6. Retention and Deletion

We retain personal information only as long as reasonably necessary for the purposes described, including account administration, contractual obligations, dispute resolution, fraud prevention, legal compliance, security, and backups. Standard server logs are ordinarily retained for up to ninety (90) days. Closing an account initiates deletion or de-identification of personal information within ninety (90) days, subject to backup cycles and information retained for tax, accounting, transaction, anti-fraud, copyright, legal-hold, or other legal obligations. A Register is kept while its Club is open and deleted or de-identified within ninety (90) days after the Club closes, on the same terms. Waitlist and contact-page information is kept until it is no longer needed for the purpose you gave it, or until you ask us to delete it. Aggregated or de-identified information may be retained without a fixed period.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including password hashing, optional two-factor authentication, access controls, encrypted transmission where appropriate, monitoring, vendor controls, and data minimization. No security measure or method of transmission is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Cookies and Analytics

We use a required session cookie to maintain sign-in on Club sites and a functional region or locale cookie to remember language, currency, and time-zone preferences. On pedgree.com, your browser’s local storage remembers your theme, the animal you chose, and your currency and billing choices on the pricing page; this stays on your device and is not sent to us. We do not use advertising cookies, third-party cross-site tracking cookies, or product analytics. Cloudflare Turnstile may load on selected public forms, such as the waitlist and contact page, to distinguish legitimate submissions from automated abuse. Browser or device controls may allow you to block optional cookies and storage, but blocking required cookies may prevent account features from working.

9. International Data Transfers

pedgree and some service providers process information in the United States and the European Economic Area. If information is transferred from a jurisdiction that restricts international transfers, such as the European Economic Area, the United Kingdom, or Switzerland, we use an available lawful mechanism appropriate to the transfer, which may include contractual safeguards such as the European Commission’s Standard Contractual Clauses and the United Kingdom’s International Data Transfer Addendum, together with supplementary measures where appropriate.

10. Your Privacy Rights and Choices

Subject to applicable law and verification, you may request access to, correction of, deletion of, or a portable copy of your personal information; object to or restrict certain processing; withdraw consent; and opt out of a sale, targeted advertising, or qualifying profiling. Because we do not sell personal information or use it for targeted advertising, those opt-out requests ordinarily confirm that no such activity occurs. We extend access, correction, deletion, and portability requests to users regardless of residence where reasonably practicable. Signed-in users can download the personal information we hold about them from their account.

Submit a request through the contact page on pedgree.com. If your information is on a Club’s Register, for example as an owner or breeder, and you do not have an account, you may also contact the Club; we will help the Club respond. We may request information reasonably necessary to verify identity and authority. We aim to respond within thirty (30) days, or within another period permitted by applicable law, and will explain any lawful extension or denial. You may appeal a denied request by replying to the decision or submitting a new request marked “Privacy Appeal.” You may use an authorized agent where applicable law permits, subject to verification.

The California Consumer Privacy Act, as amended, gives covered California residents rights including to know, correct, and delete personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Whether a particular provision applies depends on statutory scope and exemptions; this Policy is intended to support compliant handling if and when the law applies. We do not sell or share personal information as those terms are defined in that law.

11. Account Closure and Club Data

A user may close an account using available controls or by contacting us. For a Club Administrator closing a Club, billing stops, Members may be notified, and the Club may export its Register during any offered export period. We may retain transaction, tax, fraud-prevention, copyright, and legal records as described in Section 6.

12. Children

The Service is not directed to children under thirteen (13), and we do not knowingly collect personal information from a child under thirteen. Users must be at least eighteen (18) to create accounts or enter paid transactions. If you believe a child provided personal information, contact us through the contact page so we can investigate and delete it where appropriate.

13. Do Not Track and Global Privacy Controls

Because we do not engage in targeted advertising or sell personal information, the Service does not use browser “Do Not Track” signals to alter advertising practices. Where legally required and technically feasible, we will treat a recognized universal opt-out mechanism, such as a Global Privacy Control signal, as a request to opt out of sale or targeted advertising.

14. Changes to This Policy

We may update this Policy to reflect changes in the Service, law, or our practices. We will post the revised Policy with a new effective date. For a material change, we will provide advance notice by email, in-product notice, or another reasonable method when required by law. We will request consent if a new use requires consent.

15. Contact Us

Submit privacy questions or requests through the contact page on pedgree.com. Mail may be sent to Bhespoke L.L.C., Attn: Privacy, [ADDRESS].