Privacy policy

Last updated 22 October 2026

This policy explains what personal data Woofly processes, what we use it for, who we share it with, how long we keep it and what rights you have. It applies to the website woofly.lt, the Woofly online system for salons (kirpk.woofly.lt), salon booking pages and the Woofly app for dog owners. The Lithuanian version of this policy prevails if the two differ.

1. Who we are

Woofly is provided by Žilvinas Klimantavičius, trading as a sole trader under a Lithuanian individual activity registration ("Woofly", "we" or "us"), Vilnius, Lithuania.

For any question about personal data, email hello@woofly.lt or call +370 608 68220.

2. When we are the controller and when the salon is

Salon client data. The data about a salon's clients and their dogs that the salon enters into Woofly or receives through Woofly (names, contact details, visits, notes, in-salon payments) is controlled by the salon. The salon decides what to collect and how to use it, and we process it on the salon's behalf under our contract with the salon (Article 28 GDPR). If you are a salon's client, please contact the salon first about your data. If you write to us, we will pass your request to the salon and help them deal with it.

The shared dog card. So that a dog is handled safely, the main details on its card (breed, size, coat type, weight, date of birth, and handling, behaviour and health notes) can be seen by every salon the dog visits through Woofly. Each salon's private notes and prices are not visible to other salons. Another salon can only link to your record if it has your full phone number; it cannot find you by name. We process this part together with the salons.

In all other cases (the website, the sign-up form, salon accounts, dog owner accounts in the app, online payments and the salon directory) we are the controller.

3. What data we process

3.1. Website visitors

When you open woofly.lt, our server receives technical request data: your IP address and browser and device type. We need it to show the page, monitor the system and protect it from abuse (legitimate interests, Article 6(1)(f) GDPR). Fonts are loaded from Google Fonts, so your browser sends your IP address to Google. Analytics is described in section 7.

3.2. The sign-up form on the website

Data

Salon name, phone number, town or city, and a convenient time to call.

Purpose

To contact you, show you Woofly and set up your salon account.

Legal basis

Steps taken at your request before entering into a contract (Article 6(1)(b)).

Retention

If no contract follows, we delete it no later than 12 months after our last contact.

Form submissions reach us by email at hello@woofly.lt and are not stored in the website's database. We do not sell them or share them with anyone for marketing.

3.3. Salon owners and staff

Data

Name, email address, phone number, role in the salon, working hours; password (we store only a hash of it); sign-in data (IP address, device); an activity log (who changed a booking, price or client record, and when); browser notification subscriptions. If a staff member chooses to connect their own calendar, we store the calendar link encrypted and read only the busy times from it.

Salon owners also

For invoicing: the salon's business details. For payouts of online payments: the identity and bank account details Stripe requires (name, date of birth, address, IBAN).

Purpose

To provide the account and the service, issue invoices, pay money out to the salon, keep the system secure, give support and send important service messages.

Legal basis

Performance of the contract (b); the legal obligation to keep accounts (c); our legitimate interest in protecting accounts and knowing who made a change (f).

Retention

For as long as the contract runs. We delete account data within 90 days of the contract ending. Invoices and other accounting records are kept for 10 years, as Lithuanian law requires.

3.4. Salon clients and their dogs

We process this data on the salon's behalf (see section 2).

Data

Name, phone number, email address; the dog's name, breed, size, coat type, weight, date of birth, vaccinations, photos and attached files, handling and behaviour notes; visit history, services, prices, payments, receipts, gift vouchers; the SMS and emails sent and their delivery status; consent to receive messages.

Purpose

So the salon can book visits, look after the dog safely, take payments and send messages.

Retention

For as long as the salon uses Woofly or until the salon deletes the record. When our contract with a salon ends, we delete its data within 90 days, and the salon can ask for an export first.

Messages. On the salon's behalf we send SMS and emails about visits: confirmations, reminders, changes and cancellations. Marketing messages, such as an invitation to book again, are sent only if the salon has recorded your consent. If you no longer want messages, tell the salon or email us.

3.5. Online booking and the app for dog owners

Data

Name, phone number, email address, your dog's details, and the salon, service and time you choose. We confirm your phone number with an SMS code. If you sign in with Google, Apple or Facebook, we receive your name, email address and account identifier from them. We record the sign-in IP address for security.

Purpose

So you can book a visit, change or cancel it, receive an offer when an earlier slot frees up, and see your visit history.

Legal basis

Performance of the contract (b); our legitimate interest in protecting accounts from abuse (f).

Retention

For as long as you have an account. If you ask us to delete it, we do so within one month.

Your booking is passed to the salon you choose. From then on the salon holds it as its own client data (section 3.4), so the visit record may stay with the salon after you delete your account.

3.6. Online payments

When a salon asks for a deposit or payment online, Woofly is the seller and Stripe processes the payment. We never receive or store your card number; only Stripe handles it.

Data

The payer's name and contact details, amount, date, status, payment method, the related visit and salon, refunds and disputes.

Purpose

To take the payment, make refunds, handle disputes, pay the salon and keep accounts.

Legal basis

Performance of the contract (b); the legal obligation to keep accounts (c).

Retention

10 years, as accounting records.

For fraud prevention Stripe also processes data as an independent controller under its own privacy policy.

3.7. Directory of grooming salons

In the app and on the website we show a directory of Lithuanian dog grooming salons: name, address, phone number, opening hours, services and the public Google rating. We collected this from public sources such as business directories and Google Maps. Where a salon is run by a sole trader, this can be personal data. We process it on the basis of our legitimate interest in helping dog owners find a groomer (f). A salon can ask at any time for its listing to be corrected, removed, or handed over for it to manage itself.

Automated decisions. We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile you.

4. Who we share data with

We do not sell data. We share it only with service providers who help us run Woofly and who process it on our instructions under contract:

Booking details go to the salon you choose. We give data to public authorities only when the law requires it.

5. Data outside the EU

Our servers and database are in the European Union. Some providers (Google, Stripe, Apple, Meta, Amazon) may transfer data to their companies in the United States. Where they do, the EU-US Data Privacy Framework or the European Commission's standard contractual clauses apply.

6. How we protect data

• All data travels over an encrypted connection (HTTPS).
• We do not store passwords, only hashes of them. Calendar links are stored encrypted.
• A salon sees only its own clients, and what a staff member can do depends on their role in the salon.
• Important changes are recorded in an activity log.
• Backups are made daily, kept in the EU and deleted after 30 days.

If a data breach puts your rights at risk, we will notify the Lithuanian State Data Protection Inspectorate within 72 hours and tell you without undue delay.

7. Cookies and analytics

On woofly.lt we use Google Analytics 4 to see how many people visit, where they come from and which parts of the site interest them. Analytics cookies are set only after you click "Sutinku" (I agree) (Article 6(1)(a)). Without your consent Google receives only general, cookieless information that cannot identify you. We keep analytics data for 14 months. We do not use advertising cookies.

You can withdraw your consent at any time:

In the Woofly system and the app we keep only what they cannot work without in your browser or phone storage: your sign-in session and chosen language. This needs no consent. We use no analytics or advertising cookies there.

8. Your rights

You have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict how it is processed;
• object to processing based on legitimate interests or for direct marketing;
• receive the data you gave us in a common machine-readable format and pass it to someone else;
• withdraw consent at any time. This does not affect processing carried out before you withdrew it.

Email hello@woofly.lt. We will reply within one month. Before acting on a request we may ask you to confirm your identity, for example with an SMS code sent to your number.

If you think your data is being handled wrongly, you can complain to the Lithuanian State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt). We would appreciate the chance to sort it out with you first.

9. Children

Woofly is meant for salons and adult dog owners. We do not knowingly collect data from children under 14. If we learn that we have, we will delete it.

10. Changes to this policy

We update this policy when our services, providers or the law change. The date at the top shows the latest update. We will email salons in advance about any significant change.