Privacy Policy

1. Data Controller

Mozztec IT Ltd (Company No. 08685736)
55 Guan Road, Brockworth, Gloucester, England, GL3 4RJ
Email: [email protected]

2. Personal Data We Collect

• Account data: name, email address, encrypted password, authentication status.
• Security data: session details, API token metadata, IP address, user-agent, login/security event information.
• Service content: reptile profiles, care activity records, reminder metadata, species requests, and user-entered notes.
• Uploads: photos/images that you add to reptile records.
• Technical and analytics data: cookie/device identifiers, usage events, page/app interactions, and related diagnostics.

3. How and Why We Use Data

We process personal data to:

• Provide and secure your account and core service functionality.
• Synchronize data between the website, iOS app, and API endpoints.
• Operate reminders, account recovery, and support/admin operations.
• Measure service usage and improve performance and product decisions.
• Comply with legal obligations and enforce our terms.

4. Legal Bases (UK GDPR and EU GDPR)

• Contract: to provide ReptiTrack services you request.
• Legitimate interests: service security, fraud prevention, platform improvement, and administration.
• Legal obligation: where processing is required by law.
• Consent: for analytics cookies/technologies where consent is required.

5. Analytics, Cookies, and Similar Technologies

We use Google Analytics 4 and Zoho Analytics. These providers may process cookie/device data, usage events, and technical identifiers to help us understand product usage and improve the service.

Where required, analytics processing is based on consent. You can manage cookie preferences through browser/device controls and can contact us to request assistance.

6. Sharing and Disclosure

We share personal data only with service providers/processors that support hosting, analytics, communications, and security operations. We do not sell personal data and do not use advertising network profiling.

We may also disclose data when required by law, legal process, or to protect users and the service.

7. International Transfers

Some processors may handle data outside the UK or EEA. Where this happens, we use appropriate safeguards such as adequacy decisions, the UK International Data Transfer Addendum, and/or the EU Standard Contractual Clauses.

8. Data Retention

• Account and service records: retained while your account is active.
• After account deletion request: active account data is removed within 30 days, except where retention is required by law.
• Uploads and associated care content: removed with account deletion in normal processing; backup copies may persist for up to 90 days before overwrite.
• Security/session and access logs: retained for up to 12 months.
• Analytics records: retained for up to 25 months, subject to provider settings and legal requirements.

9. Your Rights (UK and EEA Users)

Subject to applicable law, you may request access, correction, deletion, restriction, portability, and objection to processing, and may withdraw consent where consent is used.

To exercise rights, contact [email protected]. You may also lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

10. Children's Privacy

ReptiTrack is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

11. Security

We use technical and organizational measures designed to protect personal data, including authentication controls, encryption where appropriate, and access restrictions. No security measure is absolute.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

13. Contact

Privacy inquiries: [email protected]

This is the public privacy policy URL for both the website and the ReptiTrack iOS app.