Privacy Policy

Data controller: Monitoimitalo ZXY Oy, Finland

Contact: support@stirpia.com

1. What this covers

This policy explains how Monitoimitalo ZXY Oy ("we") processes personal data through Sirpia ("the service"), a pedigree and breeding-match platform for pet owners and breeders.

2. What data we collect

| Category | Examples | Source |

|---|---|---|

| Account data | name, email, password (hashed), role (owner/breeder) | provided at registration |

| Breeder profile data | kennel name, bio, location, website, contact info | provided by the breeder |

| Verification data | submitted website/email/phone, automatically scraped public web data used to cross-check it | provided by the breeder, and public sources |

| Animal records | names, species, breed, dates, photos, health records, pedigree links | provided by owners/breeders |

| Usage data | pages viewed, animal profile view counts, search history | collected automatically |

| Payment data | billing address, VAT status; card details are handled directly by Stripe and not stored by us | provided at checkout, via Stripe |

| Support/report data | ticket content, report details | provided when contacting support or filing a report |

We do not knowingly collect data from children; the service is intended for adults managing animal records.

3. Why we process it, and the legal basis

| Purpose | Legal basis (GDPR Art. 6) |

|---|---|

| Providing the core service (profiles, pedigree trees, search) | Contract |

| Processing payments | Contract; legal obligation (tax/invoicing) |

| Breeder verification | Contract; legitimate interest (platform trust and safety) |

| Handling reports and support tickets | Contract; legitimate interest |

| Sending parent-link and ownership-transfer notifications | Contract |

| Server-side analytics (page views, visitor counts) via nginx access logs — no cookies required, IP addresses are processed then anonymized | Legitimate interest (service improvement) |

| Fraud/abuse prevention (e.g. detecting false parent-link claims) | Legitimate interest |

4. Who we share data with

• Stripe (payment processing) — receives billing details necessary to process payments; card data is handled entirely by Stripe.
• Hosting provider — data is hosted in Finland, within the EU; no data is transferred outside the EEA.
• Other users — a breeder's kennel name, public contact info, and animal profiles are visible to other users by design; a non-breeder owner's contact details are relayed rather than shown directly.
• We do not sell personal data.

5. How long we keep data

• Active account and animal records: kept as long as the account is active.
• Animal pedigree records: kept indefinitely, even after an owner requests deletion of their personal data under GDPR. When a user exercises their right to erasure, their account and personal data are deleted, but animal records remain in the system stripped of owner information, because those animals form part of other animals' pedigrees and removing them would break the family-tree structure of the platform.
• Denied parent-link claims and rejected verification submissions: retained for 12 months, then deleted.
• Closed support tickets and resolved reports: retained for 12 months, then deleted.
• Payment records: retained as required by Finnish accounting/tax law.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion ("right to be forgotten"), subject to legal retention obligations (e.g. payment records)
• Object to or restrict certain processing
• Data portability
• Lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

To exercise these rights, contact support@stirpia.com.

7. International data transfers

Data is hosted in Finland and stays within the EU/EEA. If this changes (e.g. adopting a non-EU service provider), this policy will be updated to describe the transfer mechanism used.

8. Cookies

See the separate Cookie Policy for details on functional cookies.

9. Changes to this policy

We'll update this page when our data practices change and note the date of the last update.

*Last updated: 7.8.2026.*