Privacy notice
Private by design, honest by default.
Effective 30 September 2026
Who is responsible
Black Sheep Digital Ltd is the data controller for PetCardJoy. Contact us at hello@blacksheepdigital.co or at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Your card content
Pet photos, optional before photos, logos, names, captions, crop choices and visit details are processed in your browser to preview and create downloads. Guest editing uploads none of this card content. Closing or refreshing the page clears unsaved editor content. Card content is only sent to our servers if you choose “Save to My Cards” and sign in.
Optional account and My Cards
An account is optional and only needed to save cards. If you sign in, we process your email address, an account identifier and sign-in timestamps to provide passwordless sign-in. When you save a card, its editable settings (such as name, captions, style, format and crop) and re-encoded copies of the photos or logo used on it are stored privately in your account, so you can open and edit them on another device. Photo metadata such as location is removed when images are re-encoded. You can keep up to 10 saved cards. Saved cards are private to your account; there are no public links or albums. Sign-in emails are sent only to sign you in and are not marketing. This processing is necessary to provide the feature you ask for.
Temporary storage while you sign in
If you press “Save to My Cards” before signing in, your browser holds that one card (including its photos) in device-only storage (IndexedDB) so it isn’t lost while you open the email link. It is not uploaded until you are signed in, and it is removed after a successful save, if you cancel, when you sign out, or after 24 hours. Signing in on a different device cannot see it; finish saving on the original device. Your browser also stores your sign-in session locally until you sign out or it expires.
Optional browser storage
If you turn on “Remember my business,” your browser stores the business name, accent colour, valid booking URL and QR choice on that device. Pet photos, pet names and visit details are not included. Turning the option off removes that record where browser storage is available. This storage provides the feature you request and is not used for advertising.
Site access and measurement
Lovable hosts PetCardJoy and may process connection, device, request, security and diagnostic information to deliver and protect the site. Existing Lovable project insights provide aggregate visitors, page views, viewed pages, source, device category and country. PetCardJoy adds no Google Analytics, Meta Pixel or other third-party marketing tracker and sets no advertising cookies. Photos, pet names, card settings and sign-in links are never included in measurement.
Why this information is used
Browser-held card content is used at your request to provide the editor and exports. Hosting and security information is processed where necessary to provide, secure and troubleshoot the service and for the operator’s legitimate interests in understanding aggregate site use. Support messages are used to answer your request and manage the service.
Sharing and support
Downloads are created on your device. Choosing Share hands the prepared file to your device’s share service and the destination you select. If you email support, email providers process the message and attachments you choose to send. Please avoid attaching private photos unless they are needed for your request.
Recipients and international transfers
Information, including saved cards and account details, may be handled by Lovable and its cloud and email infrastructure providers acting to host, store, secure and operate the site and send sign-in emails, and by email providers when you contact us. Their services may process information outside the UK. Where required, the operator and providers rely on recognised safeguards such as adequacy decisions or approved contractual protections.
How long information is kept
Guest editor content is not retained by PetCardJoy. Saved cards and their images are kept until you delete them or delete your account (Account → Delete account), which removes your saved cards, private images and account. Replaced images are removed when you save changes. Deleted data may remain in the hosting provider’s encrypted backups for a limited period until overwritten, and sign-in records may be kept by the provider for security as its policies require. Optional business settings remain in your browser until you remove them or clear browser storage. Hosting security and aggregate measurement information is kept according to the hosting provider’s security, operational and legal requirements. Support correspondence is kept only as long as reasonably needed to answer, manage follow-up and meet legal obligations.
Your rights
Depending on the law that applies, you may ask for access, correction, deletion, restriction, objection or portability, and may withdraw consent where consent is the basis. Email hello@blacksheepdigital.co. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Changes
We may update this notice when the service or its providers change. The effective date above shows the current version. Material changes will be presented clearly on this page.