Your photos. Clear choices.

Who is responsible

BIFROST CREATIVE LTD
Registered in England and Wales · Company number 17407418
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

Email: support@bifrostpet.com
Customer service: 24 hours a day, 7 days a week.

The registered office is a company correspondence address, not a shop, collection point or returns centre. Operations, production, dispatch and returns handling are in China. Contact us before sending a return.

BIFROST CREATIVE LTD is responsible for personal information processed for BifrostPet services.

Information we process

• Account email, profile details, sign-in and session records.
• Customer name, address, product selections, orders and support correspondence.
• Photographs, filenames, image metadata, previews and production specifications.
• Pet profiles, photos, lost-alert details and public links.
• Finder names, contact details and messages, and abuse-report information.
• Technical request information such as IP addresses and security records.

Pet photos can contain personal information about people or locations. Avoid unrelated people, identifying documents and private location details. Test checkout does not collect card details or payment; a live payment provider will be identified before paid checkout opens.

Purposes and legal grounds

We use information to provide requested previews and account tools, review and fulfil orders, deliver goods, answer requests and communicate about the service. Where UK or EU GDPR applies, these activities rely on steps requested before a contract or performance of a contract, as appropriate.

Necessary security, abuse prevention, dispute handling and service reliability processing relies on legitimate interests, subject to your rights and interests. Legal obligations may require record-keeping or disclosure. Where consent is required, it may be withdrawn without affecting earlier lawful processing.

We currently have no marketing-email programme. Signing in, ordering, uploading or sending a sighting message does not subscribe you to marketing.

Customization photos and public profiles

Customization originals and previews are used for the requested customization, review, production and support workflow. They are not automatically published in a gallery or used for advertising or model training.

Pet profiles are different: public links allow others to see public profile details and photographs. Publishing a lost alert makes the selected photo, last-seen area and time, description and other public alert details available to view, share or download. Owner contact details and private care notes are not displayed publicly.

Use an approximate area rather than a home address. Third-party copies, shared posters and caches may remain outside our control after an alert closes. Closing an alert does not erase its history.

Finder messages and reports

When you submit a sighting, your name, provided contact details and message are shared with the pet owner so they can respond. They are not posted as a public comment. Contact details are stored encrypted but readable by authorized recipients; this is not an anonymous or end-to-end encrypted service.

Abuse reports help investigate misuse. Do not include unnecessary personal information about yourself or others.

Providers and international processing

Authorized staff and necessary providers process information for hosting, storage, service email, security, manufacturing, delivery and support. Access should be limited to the task: makers need design specifications; carriers need relevant recipient and delivery information.

We currently use hosting in South Korea, Resend for service emails and Cloudflare Turnstile for abuse prevention. Turnstile processes technical information to distinguish legitimate use from automated abuse; see its Privacy Notice.

Operations, manufacturing and returns handling are in China. Data may be processed outside your country, including in the UK, South Korea, China and countries used by providers. Hosting location alone does not determine every processing location. Contact us for recipient details and applicable international-transfer arrangements. We are reviewing those arrangements before paid ordering opens.

We may disclose information when lawfully required or necessary to protect rights and address abuse. We do not sell customer photographs or contact information.

Cookies and similar technologies

Account and security technologies support requested sign-in and protected services. Signing out ends the current session; it does not delete the account or records.

We currently do not run advertising pixels or a marketing analytics programme. If optional tracking is introduced, we will provide required information and choices before use, including prior consent where required. Security verification is described above.

Retention and deletion

Retention depends on purpose: files support previews, production and related issues; order records may be needed for accounting, legal obligations and disputes; pet profiles support account services; messages and security records support safety and follow-up.

A fixed automatic deletion timetable for customer photos and account content has not yet been implemented. Do not assume abandoning a preview or closing an alert automatically deletes its records. Contact us to request deletion; we will explain information that must be retained and why. We are reviewing category-specific retention and backup handling before paid ordering opens.

Your privacy requests

Email support@bifrostpet.com with the subject “Privacy request”, your request and relevant account email, order or pet reference. Do not send passwords, sign-in links, card details or identity documents unless we have agreed an appropriate verification method.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, or withdraw consent. Legal obligations or claims may require some records to be retained. We may need proportionate identity checks and will respond within the applicable deadline; UK and EU GDPR requests normally require a response within one month, subject to permitted extensions.

You can complain to the UK Information Commissioner or relevant local supervisory authority without contacting us first. We will not penalize you for exercising applicable privacy rights.

Security, children and updates

We use private storage for customization originals, time-limited media links, protected sessions and verification measures. No online service guarantees absolute security. Public profile and alert images are intentionally available through their public links.

Store and account services are intended for adults, not children registering or ordering independently. Contact us about a child providing personal information without appropriate authorization.

We will update this notice when practices change, with additional notice where required. The date above identifies this version.