PimpYourPaws Privacy Notice — Malaysia

Version 3 · Effective 22 October 2026

This notice is given under the Personal Data Protection Act 2010 (PDPA). The data user is Illustrious & Co Trading Pty Ltd (ACN 657 369 796, ABN 48 657 369 796), trading as Illustrious Systems, an Australian company which operates PimpYourPaws ("PimpYourPaws", "we").

1. Personal data we process

• Account: name, email address, mobile number, country, time zone, profile photo.
• Household: household name, members and permissions, address, emergency contacts, home access instructions (stored encrypted).
• Pets: names, species, breed, age, photos, health conditions, medications, vet details, care and emergency plans, uploaded documents.
• Carers: profile, services, prices, availability, service area, and verification documents, which can include identity documents and police check results. Information about the commission or alleged commission of an offence is sensitive personal data; we process it only with your explicit consent, for verification.
• Bookings and payments: what was booked, when, for how much and its status. Payment details are collected by our payment provider; we never store your full card or bank credentials.
• Messages and reports.
• Technical data: sign-in and session data, and essential cookies.

2. Purposes

To provide the marketplace (accounts, households, bookings, payments, messaging), to verify carers, to share care details with the carer of a confirmed booking, to send service emails, to handle reports and safety issues, and to meet legal, tax and accounting obligations. Marketing is sent only with your consent, which you may withdraw at any time.

3. Source

Most data comes from you. Some comes from other people: a household admin may add you as a member, and an owner provides pet and household details that a carer will see for a booking.

4. Disclosure

To carers (for a confirmed booking, as a snapshot limited to that booking); to household members (as the admin allows); and to service providers that process data for us: Supabase (database and storage), Cloudflare (hosting), Resend (email), our payment provider [TBC — payment provider for Malaysia], and [TBC — CRM provider] (marketing, only with consent). We do not sell personal data.

5. Transfer outside Malaysia

Some providers process data outside Malaysia, including in Australia, Japan and the United States. We transfer data only where the PDPA permits it, including where it is necessary to provide the service you asked for. [Legal review: confirm the transfer basis and the list of countries.]

6. Obligatory or voluntary

Account, booking and payment details are obligatory: without them we cannot provide the service. Pet health details, emergency plans and home access instructions are voluntary, but a carer may not be able to care for your pet safely without them. Marketing consent is voluntary.

7. Retention and deletion

We keep your data while your account is open. You can delete your account from Settings → Account; after the cooling-off period shown when you ask, your profile is anonymised and your household, pet and carer data is deleted or anonymised as described in our Terms. Booking, payment and ledger records are kept in anonymised form for [TBC] years for tax and accounting purposes. [Legal review: confirm the retention period.]

8. Your rights

You may request access to and correction of your personal data, withdraw consent, ask us to limit processing, and ask us to transmit your personal data to another data controller where technically feasible (data portability). Email privacy@pimpyourpaws.com. We may charge a fee permitted by the PDPA for a data access request.

9. Security and breach notification

Data is encrypted in transit, and home access instructions are also encrypted at rest. Access is restricted by role and household permission. If a personal data breach occurs we will notify the Personal Data Protection Commissioner and, where required, affected individuals.

Malaysia early access

• No payments in Malaysia. During early access PimpYourPaws takes no payments in Malaysia: bookings, subscriptions and business plans are not sold here, and we collect no card or bank details from you. Section 1's "Bookings and payments" applies only once bookings open in Malaysia.
• What you can use now: your household and pet records, health records and reminders, grooming and supplies tracking, the places directory, Ask PYP, carer profiles and free business listings.
• More service providers. Google, to search places and show maps, and to turn an address into a point on a map so we can find places near home. Anthropic, to read a document you upload into a draft you confirm field by field, and to answer an Ask PYP question (a question about your pet's health is answered without it). Both process data in the United States. [Legal review: the transfer basis under section 129 of the PDPA as amended in 2024.]
• Your location. When you ask for places near you, your device's position is used to answer that request and is not saved. If someone scans your pet's QR tag, an approximate position (to about 100 metres) is recorded so you know where your pet was seen.
• Access and correction requests. We answer a request to access or correct your personal data within 21 days of receiving it. [Legal review: confirm the period and any fee.]

10. Contact

Data protection contact: the company — no separate Data Protection Officer is appointed — at privacy@pimpyourpaws.com · Illustrious & Co Trading Pty Ltd (ACN 657 369 796, ABN 48 657 369 796), trading as Illustrious Systems · Unit 711, 95 Linton Street, Kangaroo Point QLD 4169, Australia [Legal review: confirm whether the PDPA (Amendment) Act 2024 requires PimpYourPaws to appoint a Data Protection Officer.]