PRIVACY POLICY

Last Updated: October 15, 2026

1. Introduction

TagsForHope Inc. (“TagsForHope,” “we,” “us,” or “our”), based in St. Thomas, Ontario, Canada, is committed to protecting your privacy. This Privacy Policy governs the collection, use, and disclosure of personal information when you visit our website (tagsforhope.com), purchase our products, or interact with our services.

Important Note on Jurisdiction: This policy applies globally. However, specific sections below apply only to residents of certain jurisdictions (such as Quebec, the United States, or the European Union/UK). We strive to treat all users with the highest standard of privacy protection.

2. Who is Responsible for Your Data

For the purposes of data protection laws (including the GDPR and PIPEDA), the Data Controller is:

TagsForHope Inc.
55 Dennis Rd. Unit 4
St. Thomas, Ontario, Canada
N5P 0B6

Note regarding TagsForHope USA Inc.: While we may maintain a corporate entity in the United States, all customer data processing, storage, and website operations are controlled and managed by our Canadian headquarters listed above.

3. Information We Collect

We collect information in three ways: (1) Information you give us, (2) Information collected automatically, and (3) Information from third parties.

3.1 Information You Provide to Us

• Identity Data: First name, last name, and pet’s name.
• Contact Data: Billing address, delivery address, email address, and telephone number.
• Pet Characteristics: Breed, weight, gender, and other pet details provided during customization. We treat this as commercial preference data.
• Transaction Data: Details about payments to and from you and other details of products you have purchased. Note: We do not store credit card numbers or security codes (CVV). Payment data is tokenized and processed securely by our payment gateways.
• User Content: Reviews, feedback, and photos or videos you upload to our custom review system or for product customization.
• Customer Support Data: Information provided during interactions with our support team via email, helpdesk tickets, or messages and comments you send us on social media (such as Facebook Messenger and Instagram Direct), including the name or username your account shows and any photos or files you send.

3.2 Information We Collect Automatically

• Device & Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
• Account language: We remember the language you use your account in (English, French or Spanish) so that sign-in codes, scan alerts and messages from finders reach you in it.
• Usage Data: Information about how you use our website, products, and services, including clickstream data (pages viewed, time spent).
• Shopping and checkout activity: We use Klaviyo to connect your browsing, cart, checkout and purchase activity on our website with your email profile to personalize marketing emails, including cart reminders. This may include your name and email address entered at checkout, even if you do not submit the form or complete your purchase.

3.3 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

For detailed information on the specific cookies we use, or to manage your consent preferences at any time, please visit our Cookie Policy.

3.4 Information from Social Media Platforms

When you message us, comment on our posts or ads, or tag or mention us on Facebook or Instagram, Meta shares with us the content of that interaction and the name or username your account shows. For public posts and stories that tag or mention us, we receive a link to that content, so that we can thank you or share it from our own account. We do not store the photos or videos of your stories.

3.5 Pet Tag Pages, Scans and Messages from Finders

Every pet ID tag has its own web page (a “tag page”), opened by scanning the tag or following its link. This section applies to pet owners and to anyone who opens a tag page, such as a person who has found a pet (a “finder”).

• What a tag page shows: The details given when the tag was ordered: the pet’s name, photo, species or breed, and the phone number printed on the tag. Once an owner sets up a profile in their account, the page shows the profile instead. A profile can add another person to call, a vet, care notes, the pet’s sex and colors, whether it is microchipped and with which registry, and health details: conditions, allergies and how often a medicine is given (its name only if the owner chooses to show it). For each of these, the owner chooses whether everyone sees it, only while the pet is marked lost, or only the owner. The microchip number is shown only if the owner chooses, and only while the pet is marked lost. Vaccination records, medicine doses, the pet’s birthday and size are never shown. Anyone who scans the tag or has its link can see the page. Owners can change these details at any time in their account. The pet’s name and the tag’s reference number (which includes the order number) are always shown, and a tag whose profile is deleted shows the details from the order again.
• Pet links and lost posters: Each pet profile also has its own link, which the owner can share or print on a lost poster made in their account. While the pet is marked lost it opens the same page as the pet’s tag, including the form to message the owner, but never the microchip number. At other times it shows only the pet’s name, its photo if the owner shows it, and that the pet is home. Opening it is never recorded as a scan or reported to the owner. Posters are made on the owner’s device; we do not keep a copy.
• Scans: When a tag page is opened, we record the date and time, the tag, the visitor’s IP address, and the browser and type of device. If the pet is marked lost, we also work out the approximate area (such as the city or region) from that IP address, using a database kept on our own server. The owner sees the time, the type of device and the approximate area in their account, and receives an email when the tag of a pet marked lost is scanned. The owner never sees the visitor’s IP address. As on the rest of our website, our own visit cookies and visit log also apply to tag pages (see Sections 3.2 and 3.3).
• Messages to a pet’s family: A finder may choose to send the owner a message from the tag page. We collect what the finder enters (what is happening, a first name, a phone number or email address, a place, a message, and a photo, if the finder adds one), together with their IP address and browser details. We email the message to the owner and show it in the owner’s account so that the owner can contact the finder. The owner does not see the finder’s IP address or browser details. A photo a finder adds is kept with the message, without the hidden details a phone adds to a picture, such as where it was taken. It is never sent by email: only the pet’s owner sees it, in their account.
• Blocking and reporting a sender: If an owner blocks a sender, we keep the phone number or email address that sender gave so that their next messages are not emailed. It is deleted 90 days after the last message they sent. If an owner reports a message, our support team may read it, and that sender’s other messages to the same owner, with the sender’s contact details, IP address and browser details, for as long as we keep those messages.
• Precise location: A finder’s device location is collected only if the finder taps “Share my location”. It is kept with the message and shown only to the pet’s owner, as a link that opens in Google Maps.
• How we use this information: We use scan records and finders’ messages only to help reunite pets with their families, to show owners the scan history of their tags, and to prevent misuse of the service. We do not use a finder’s details for marketing or add them to a mailing list. Tag pages carry no advertising tags from other companies and no marketing pop-ups.
• How long we keep it: We delete our record of a finder’s message 90 days after it is sent, or sooner if the owner deletes it or deletes the pet’s profile. A photo sent with a message is deleted within a day of its message. The email we sent stays in the owner’s mailbox, and a copy may remain in our email system. Scan records are not deleted automatically and stay after a pet’s profile is deleted; you can ask us to delete them (see Section 16).
• Your choices: Owners can choose who sees each detail on the tag page, including their phone number, turn off messages from finders, block or report a sender, and delete messages in their account. A finder can ask us to delete a message they sent by contacting us (see Section 16).

4. How We Use Your Information

We only use your personal data when the law allows us to. We specifically use your data for:

• Order Fulfillment: To process and deliver your order, including managing payments, fees, and charges.
• Warranty Administration: To maintain records required to honor our warranties (including the Lifetime Warranty on tags and Limited Warranty on other products).
• Customer Support: To answer your questions and requests, including messages and comments you send us on social media, and to resolve technical issues or product inquiries.
• AI-Assisted Service: We use AI tools to help our team provide you with the best possible customer support and shopping experience. Every response is reviewed and personalized by a member of our team before it is sent, and we do not make decisions about you based solely on automated processing.
• Marketing: To send you newsletters and promotional offers (via Klaviyo). You may unsubscribe at any time.
• Advertising: To show you personalized ads on platforms like Facebook, Instagram, and Google (Retargeting).
• Site Improvement: To analyze how users interact with our site (via GA4) to improve our UI/UX.

5. Disclosure of Your Personal Information

We do not sell your personal data in the traditional sense (i.e., for money). However, we may share your data with the following categories of third parties to operate our business:

• Service Providers: Companies that provide IT, security, and system administration services, including:
  • LiquidWeb: Web hosting.
  • Cloudflare: Performance, security, and content delivery network (CDN).
  • Uploadcare: Image storage and processing.
  • Amazon Web Services: Storage and delivery of pet photos, from tag orders and from your account.
  • Freshdesk: Customer support ticketing.
  • AI Service Providers (such as OpenAI): AI tools that our internal systems use to help us provide customer support and a better shopping experience.
  • Klaviyo: Email marketing and automation.
• Payment Processors: PayPal, Braintree (including Apple Pay/Google Pay), Stripe, Sezzle, and Afterpay.
• Advertising Partners: Meta (Facebook/Instagram) and Google. Sharing data with these platforms via pixels may be considered “selling” or “sharing” under California law (see Section 9).

6. International Data Transfers

For EU/UK Residents: We are a Canadian company. Your data will be transferred to, stored, and processed in Canada. The European Commission recognizes Canada (under PIPEDA) as providing an “adequate” level of data protection.

For All Users: We may use service providers located in the United States. When we transfer data to the US, we ensure it is protected by strict contractual clauses regarding data privacy and security.

7. Data Retention & The Lifetime Warranty

We retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Specific to Warranties (Lifetime & Limited): To honor the warranties on our products (including the Lifetime Warranty on tags and the Limited Warranty on other items), we must retain order records to verify purchase dates and ownership.

• Conflict with Deletion Rights: If you exercise your right to delete your data (Right to Erasure), we will no longer have the record required to validate your warranty. By requesting full data deletion, you acknowledge and agree that any active warranty (Lifetime or Limited) will be immediately voided.

8. Security

We have put in place appropriate security measures (including SSL encryption) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

9. Rights of US Residents

Applicable States: This section applies to residents of California (CCPA/CPRA/Shine the Light), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), and other US states with comprehensive data privacy laws.

• Right to Know: You may request details on the specific pieces of personal info we have collected about you.
• Right to Delete: You may request that we delete your personal information (subject to the Warranty limitations in Section 7).
• Right to Correct: You may ask us to fix inaccurate information.
• Right to Opt-Out of “Sale” or “Sharing”: Because we use advertising pixels (Meta/Google), this may be legally defined as “sharing” data for cross-context behavioral advertising (or “Targeted Advertising” under Virginia/Colorado/Texas law). You have the right to opt-out of this sharing.
• Right to Limit Sensitive Personal Information: You have the right to direct us to limit our use of your Sensitive Personal Information (SPI) to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. This means we will not deny you goods, charge you different prices, or provide a different level of quality just because you opted out of tracking.
• “Shine the Light” Law: California residents may request a list of all third parties to whom we have disclosed certain personal information for their direct marketing purposes in the past year.

Opt-Out Preference Signals (GPC): TagsForHope recognizes the Global Privacy Control (GPC) signal. If you are using a browser or extension that sends a GPC signal, our website will automatically treat this as a valid request to opt-out of the “sale” or “sharing” of your personal information for that specific browser and device.

To exercise these rights: Please click the “Your Privacy Choices” link in the footer of our website, or email us at [email protected].

10. Rights of Quebec Residents (Law 25)

In compliance with Quebec’s Law 25, we grant residents of Quebec the following rights regarding their personal information:

• The right to access your personal information held by us.
• The right to request rectification of inaccurate information.
• The right to withdraw consent to the communication or use of your information.
• The right to be informed if your information is used to render a decision based exclusively on automated processing.

Person Responsible for Protection of Personal Information (Privacy Officer): Under Quebec Law 25, the person responsible for privacy compliance at TagsForHope is the President/CEO. They have delegated the handling of privacy requests to the Privacy Team.

Contact: Privacy Officer
Email: [email protected] (Attn: Privacy Officer)
Address: TagsForHope Inc., 55 Dennis Rd. Unit 4, St. Thomas, Ontario, Canada, N5P 0B6.

11. Rights of EU/UK Residents (GDPR)

If you are located in the EEA or UK, you have the right to:

• Request access to your personal data.
• Request correction or erasure of your personal data.
• Object to the processing of your personal data.
• Request the transfer of your personal data (Portability).
• Withdraw consent at any time.

12. User Generated Content & Reviews

Our website features a custom review system that allows you to upload photos, videos, and written feedback. By submitting a review:

1. You grant TagsForHope a non-exclusive, royalty-free, perpetual, and irrevocable right to use, reproduce, and display such content throughout the world in any media.
2. You represent that you own the rights to the photos and videos you upload and that they do not infringe on the privacy or rights of any third party.
3. You understand that these reviews, photos, and videos may be publicly visible on our website.

13. Children’s Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.

14. DISPUTE RESOLUTION (Arbitration & Class Action Waiver)

PLEASE READ THIS CAREFULLY. IT AFFECTS YOUR RIGHTS.

14.1 Mandatory Informal Dispute Resolution (Cooling-Off Period): Before filing any lawsuit or arbitration claim regarding your privacy or data, you agree to first participate in a good-faith negotiation. You must send a written notice to [email protected]. For a period of sixty (60) days from our receipt of your notice, both parties agree to negotiate informally. You agree that this 60-day period is a condition precedent—meaning you cannot file a case until this time has passed.

14.2 Binding Arbitration (US Residents): Any dispute or claim relating in any way to your privacy or this Policy will be resolved by binding arbitration, rather than in court, except that you may assert claims in small claims court if your claims qualify. The Federal Arbitration Act applies.

14.3 Class Action Waiver: WE EACH AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION.

14.4 Mass Arbitration Protocol: To prevent abusive litigation tactics, if 25 or more demands for arbitration are filed against TagsForHope by coordinated counsel, you agree that the “Bellwether” process outlined in our Terms of Service shall apply.

15. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible.

16. Contact Us

If you have questions or comments about this policy, you may contact us at:

TagsForHope Inc.
Email: [email protected]
55 Dennis Rd. Unit 4
St. Thomas, Ontario, Canada
N5P 0B6