Introduction
Stubo Interactive ("we", "our", "us") is a sole trader based in the United Kingdom, owned and operated by Stuart Westgate. This Privacy Policy is a centralised document covering every public website, application, and service we operate under the Stubo Interactive trading name, including but not limited to:
- stubointeractive.com (our main company website)
- dogpanion.app (our Dogpanion website and progressive web app)
- Dogpanion mobile apps (native Android and iOS applications)
- Lead generation sites we may operate on separate domains, including but not limited to sites offering eligibility checks for UK government home improvement, energy efficiency, legal, medical, or similar schemes
Wherever you see a link to this Privacy Policy on any Stubo Interactive property, it refers to this document. If you use more than one of our services, the relevant sections below apply to each.
Information We Collect
The specific information we collect depends on which Stubo Interactive service you are using. Across all services, we collect only what is necessary:
- Contact information: If you contact us, we receive your name, email address, and message.
- Usage data: Basic server logs may include IP addresses and browser information for security purposes.
- Account data (Dogpanion and member-only services): If you sign in with Google or another identity provider, we receive your name and email address for authentication.
- App data (Dogpanion): Dog profiles, health records, weight entries, photos, and similar information you enter into the app. This is stored locally on your device by default and only synced to our servers if you sign in and enable cloud sync.
- Subscription and payment data: If you purchase a premium subscription, we receive transaction identifiers, subscription status, and billing information processed by our payment providers (see "Subscriptions and Payment Processing" below). We never receive or store your full card details.
- Lead generation form data: If you submit a form on one of our lead generation sites (for example, an eligibility check for a UK home improvement grant), we collect the information you enter into that form, typically including name, email address, telephone number, postcode, property type, and eligibility answers. See "Lead Generation Forms" below.
How We Use Information
We use collected information to:
- Respond to your enquiries
- Provide the app or service you requested (including syncing your data across devices, processing subscription payments, and passing lead generation form submissions to approved third parties where applicable)
- Improve our services
- Protect against fraud and abuse
- Comply with our legal obligations
Data Sharing
We do not sell, trade, or share your personal information with third parties for their own marketing purposes, except in the specific circumstances set out in this policy:
- Payment processors: When you purchase a subscription, your billing information is shared with the relevant payment provider as described in "Subscriptions and Payment Processing".
- Lead brokers and approved installers: If you submit a form on one of our lead generation sites and give explicit consent, we forward your submission to the approved third-party provider named on that page. Full details are in "Lead Generation Forms".
- Service providers: We use trusted infrastructure providers (for example, Cloudflare and Google) as described in "Third-Party Services". These providers process data on our behalf under appropriate contractual safeguards.
- Legal requirements: When required by law, court order, or to protect our rights, users, or safety.
Local Storage (Your Device)
Our apps store data locally on your device using browser localStorage. This data never leaves your device unless you sign in and enable cloud sync. Locally stored data includes:
- Dog profiles: Names, breeds, dates of birth, weights, photos
- Health records: Vaccinations, vet visits, medications, attachments
- App settings: Dark mode, weight unit, daily tips preference
- Cookie consent choice
You can delete all local data at any time via the "Delete All Data" option in app settings.
Cloud Storage (Our Servers)
If you sign in with Google, your app data is synced to our cloud database (Cloudflare D1) so you can access it across devices. Cloud-stored data includes:
- Google account info: Name, email address (used for authentication only)
- Synced app data: Dog profiles, health records, settings (the same data stored locally)
- Contact submissions: Name, email, message, and any error logs you choose to send
- Login attempts: IP address and timestamp (for rate limiting and security)
You can delete all cloud data at any time via "Delete All Data" in app settings, which removes both local and server-side data.
Data Retention
We retain data as follows:
- Contact submissions: Automatically deleted after 12 months
- Cloud-synced app data: Retained until you delete it or request deletion
- Login attempt records: Automatically deleted after 90 days
- Subscription and billing records: Retained for 7 years after the subscription ends, as required by UK tax and accounting law. After this period records are deleted or anonymised.
- Lead generation form submissions: Once your submission has been successfully forwarded to the approved third-party provider you consented to, we delete our copy of the submission from our systems. A minimal audit record (timestamp, source page, broker reference) may be retained for up to 12 months for fraud prevention and to prove consent.
- Analytics data: Retained by Google for 14 months (if you consent to analytics cookies)
Cookies and Analytics
We use cookies on our website. Essential cookies are required for the site to function. Analytics cookies (Google Analytics 4) are only used if you consent via our cookie banner.
When you consent to analytics cookies, we collect anonymous usage data such as pages visited, device type, and approximate location. IP addresses are anonymised. We do not use this data to identify individuals.
You can change your cookie preferences at any time on our Cookie Policy page.
Subscriptions and Payment Processing
Some of our apps (most notably Dogpanion) offer optional paid subscriptions that unlock premium features. We do not process card details or bank information ourselves. Instead, payment is handled by trusted payment providers who act as the Merchant of Record or payment processor for the transaction:
- RevenueCat: We use RevenueCat to manage in-app subscriptions inside the Dogpanion mobile app. When you subscribe, the underlying transaction is handled by the Google Play Store (Android) or the Apple App Store (iOS), and RevenueCat receives the subscription status and purchase receipt so we can unlock premium features for your account. See RevenueCat's privacy policy, Google's privacy policy, and Apple's privacy policy.
- Lemon Squeezy: We use Lemon Squeezy for subscriptions purchased through our websites. Lemon Squeezy is the Merchant of Record for these transactions, which means they handle payment processing, sales tax, VAT, invoicing, and refunds. Your billing details are entered directly into Lemon Squeezy's secure checkout and are never transmitted through our servers. See Lemon Squeezy's privacy policy.
From our payment providers, we receive a transaction identifier, the subscription plan purchased, the subscription status (active, cancelled, refunded), and the country of purchase. We use this only to grant access to premium features and to handle customer support.
Refunds: If your subscription is refunded, our payment providers return the associated processing fees to us along with the refund, so that the refunded amount reflects what you actually paid.
Lead Generation Forms
Some Stubo Interactive websites are dedicated lead generation sites offering eligibility checks and enquiry forms for UK home improvement schemes, energy efficiency grants, legal services, medical services, and similar third-party offerings. These sites are operated under separate domain names but are owned and operated by Stubo Interactive and are covered by this Privacy Policy.
When you submit a form on one of these sites, we will always make clear:
- The name (or category) of the third-party provider who will receive your details
- What they will do with your details (typically contact you by phone or email about the scheme or service)
- That you are giving explicit consent by submitting the form
Your submission is forwarded to the approved third-party provider (referred to as a "lead broker" or "approved installer") as soon as you submit the form. Examples of the type of providers we work with include:
- Approved home improvement lead networks (such as Lead Pronto, NRG Group, GMS Leads, Pivotal One, and Synergi Marketing)
- MCS-accredited solar, heat pump, and insulation installers
- Regulated legal service providers (for example, will writing and Lasting Power of Attorney providers)
- Regulated medical and dental service providers
The third-party provider becomes an independent data controller for your details once we forward them. Their own privacy policy will apply to how they use your information. We require every provider we work with to be registered with the ICO and to handle data lawfully under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
How we handle your data:
- We only forward your details after you have given explicit, unbundled consent by submitting the form.
- We do not pre-tick consent boxes and we do not bundle consent with other terms.
- We delete our copy of your submission once it has been successfully forwarded, keeping only a minimal audit record (timestamp, source page, broker reference) for fraud prevention and to prove consent.
- We never sell, reuse, or re-broker your data for any other purpose.
- You can withdraw your consent at any time by contacting us, and you can contact the third-party provider directly to exercise your rights against them.
If you are contacted unexpectedly after submitting a form, please contact us so we can investigate and, if necessary, remove the provider from our network.
Advertising
Our websites and apps display advertisements to support our free services:
- Google AdSense: Our websites display ads served by Google AdSense. Google may use cookies and tracking technologies to serve ads based on your browsing history. You can opt out of personalised ads via Google's Ad Settings.
- Google AdMob: Our mobile app displays ads via Google AdMob (free tier only). AdMob may collect device information to serve relevant ads. Premium and ad-free users do not see ads.
See Google's privacy policy for details on how Google handles advertising data.
Affiliate Links
Our websites and apps contain affiliate links. When you click these links and make a purchase, we may earn a commission at no extra cost to you. Our affiliate partners include:
- Amazon Associates: We are a participant in the Amazon Associates Programme, an affiliate advertising programme designed to provide a means for us to earn fees by linking to Amazon.co.uk and affiliated sites.
- Awin: We partner with advertisers through the Awin affiliate network (e.g. pet insurance providers). Awin may use cookies to track referrals. See Awin's privacy policy for details.
Affiliate relationships do not influence our content or recommendations. We only link to products and services we believe are relevant and useful.
Third-Party Services
Our websites and apps may use the following third-party services:
- Cloudflare: For hosting, content delivery, and security. Subject to Cloudflare's privacy policy.
- Google Fonts: For typography. Subject to Google's privacy policy.
- Google Analytics: For anonymous usage analytics (with your consent). Subject to Google's privacy policy. IP anonymisation is enabled.
- Google Sign-In: For authentication in our apps. Subject to Google's privacy policy.
- Google AdSense: For serving display ads on our websites. Subject to Google's privacy policy.
- Google AdMob: For serving ads in our mobile app (free tier only). Subject to Google's privacy policy.
- Google reCAPTCHA: For protecting forms and login pages from automated abuse. Subject to Google's privacy policy.
- RevenueCat: For managing in-app subscriptions in our mobile apps. Subject to RevenueCat's privacy policy.
- Lemon Squeezy: For processing subscription payments on our websites (Merchant of Record). Subject to Lemon Squeezy's privacy policy.
- Google Play Store and Apple App Store: For processing native mobile subscription purchases. Subject to Google's and Apple's privacy policies.
- Amazon Associates: For affiliate product links. Subject to Amazon's privacy policy.
- Awin: For affiliate advertising links. Subject to Awin's privacy policy.
- Lead broker networks and approved installers: Where you submit a form on one of our lead generation sites, your details are forwarded to the approved third-party provider identified at the point of submission. See "Lead Generation Forms" above for details.
International Data Transfers
Some of our third-party service providers (including Google and Cloudflare) are based in the United States. Where your data is transferred outside the UK or European Economic Area, these providers use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data in compliance with UK GDPR.
Data Controller
Stubo Interactive is the data controller for personal data collected through our website and apps. We are a sole trader based in the United Kingdom. As a small business processing minimal personal data, we are not required to appoint a Data Protection Officer. For data protection enquiries, please contact us.
ICO Registration
Stubo Interactive is registered with the UK Information Commissioner's Office (ICO) as a data controller under the Data Protection Act 2018.
ICO Registration Number: [pending, to be added once registration completes]
You can verify this registration via the ICO public register.
Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data based on the following legal grounds:
- Consent: When you accept optional cookies (analytics, advertising), contact us, sign in to sync your data, or submit a lead generation form authorising us to pass your details to a named third-party provider
- Contract: When we provide our app services to you (for example, cloud sync for signed-in users, or a paid subscription for premium features)
- Legal obligation: For retaining billing and tax records as required by UK tax and accounting law
- Legitimate interests: For security, fraud prevention, service improvement, and maintaining our services
Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Restrict processing: Request that we limit how we use your data
- Data portability: Request your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time where processing is based on consent (e.g. via cookie settings)
To exercise any of these rights, please contact us. We will respond within one month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect information from children. If you believe we have collected data from a child under 13, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will make reasonable efforts to notify you.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.