As the data controller under the Personal Data Protection Law No. 89/2007 of North Cyprus, PurrNest would like to inform you of the purposes for which, and the legal grounds on which, your personal data is processed, who it may be shared with, and your rights under that Law.
Data controller
PurrNest, Dikmen, Girne (Kyrenia), North Cyprus. Our contact details are on our Contact page.
Personal data we process
- Identity and contact details: full name, phone number (including whether you use WhatsApp on it), email address, preferred language
- Pet and health information: species, name, breed, age, sex, neutering status, size, health and medication notes, vaccination declaration
- Service details: dates of stay, room and extra service preferences, your notes
- Transfer details: address, area, flight time
- Security information: IP address, and the date and time your privacy consent was given
- Correspondence: information you share by WhatsApp, phone and email
Purposes of processing
- Receiving and answering booking requests and preparing quotes
- Providing the boarding service and looking after your pet's health and care
- Planning and carrying out transfers
- Keeping in touch with you and sharing daily photos and videos
- Meeting legal obligations
- Keeping the website and forms secure and preventing misuse
Legal grounds
Your personal data is processed on the following legal grounds provided for in Law No. 89/2007:
- Your explicit consent (for example, the privacy consent on the booking form, and for your pet's health information)
- Providing the service you have requested, and entering into or performing the related contract
- Complying with the legal obligations we are subject to
- Our legitimate interests, provided they do not harm your fundamental rights and freedoms (for example, website security)
Sharing of data
Only to the extent needed for the purposes above, your data may be shared with hosting and infrastructure providers, email service providers, Cloudflare for content delivery and security, our veterinarian for the care of your pet, and competent public authorities where the law requires it. Some service providers may process data outside North Cyprus. We never sell your personal data.
Data security
We protect your data with reasonable technical and organisational measures, such as an encrypted connection and access limited to authorised people. No decisions about you are made solely by automated processing; every request is reviewed by our team.
How the data is collected
Your data is collected through the booking form on our website, WhatsApp, phone and email, partly as information you give us directly and partly by automatic means (technical data).
Retention
Data is kept for as long as the purpose of processing requires and for the period our legal obligations prescribe. After that, it is deleted, destroyed or anonymised.
Your rights
Under Law No. 89/2007 you have the right to:
- Find out whether your personal data is being processed
- Access the data processed about you and request information about it
- Ask for incomplete or inaccurate data to be corrected
- Ask for your data to be deleted or destroyed
- Object to the processing of your data
- Withdraw your explicit consent at any time
To exercise these rights, contact us using the details on our Contact page. We will reply as soon as possible once we have verified your identity. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
Last updated: 30 September 2026